last executing test programs: 12.793240752s ago: executing program 3 (id=7601): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) 12.756613725s ago: executing program 3 (id=7604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 12.756248765s ago: executing program 3 (id=7606): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) capget(&(0x7f0000000300)={0x19980330}, 0x0) 12.717705039s ago: executing program 3 (id=7609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) io_setup(0x2, &(0x7f0000000640)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x1, 0x0, r2, 0x0}]) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) 12.675349032s ago: executing program 3 (id=7616): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "478b78d5acd8471f999e618e1ae67906"}}}}}}, 0x0) 12.674879432s ago: executing program 3 (id=7617): ptrace(0x10, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000bc0)}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x40010002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[], 0x0) 12.10986315s ago: executing program 4 (id=7653): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x3, "42fba4"}, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_disconnect(r0) 11.397594621s ago: executing program 4 (id=7685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1d01000000000020961b0a0000000000000109022400010000000009040000050300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200108"], 0x0}) 10.886345114s ago: executing program 4 (id=7705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x25) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 10.838549658s ago: executing program 4 (id=7708): unshare(0x400) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 10.796910222s ago: executing program 4 (id=7712): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000006a80)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="53d2d9de939847c9dd37ed564f2be0a4f9d29f7e23b3a032bbe730dc52348cbe87ceee766fd6025fe3e79ae4be665c25801faff43856dd4a90209ef9ad9a90beca5921e77f0b0248d2793d9a477240b4d3e13b1079fb066ea5b89316eaa679c336a781bafb6020144f23f787a4057fcb152a4a807a2fda22545953e4650264b5f42a2712642c0e"], 0x25, 0x558f, &(0x7f00000014c0)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x198) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0xc0) ftruncate(r2, 0xee72) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="e5", 0x1}], 0x1, 0x7c00, 0x0, 0x0) fallocate(r0, 0x10, 0x70, 0x7000) 10.545824103s ago: executing program 4 (id=7728): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) bind$bt_hci(r1, &(0x7f0000000140), 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 10.34827149s ago: executing program 2 (id=7730): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x1, r1, 0x3, 0x80000}) 2.562550482s ago: executing program 2 (id=7746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000458e5e080304c8f05602000000010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.573875636s ago: executing program 2 (id=7755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa3) 954.987488ms ago: executing program 2 (id=7758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x400, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_setup(0x401, &(0x7f0000000000)) 248.547669ms ago: executing program 2 (id=7761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 205.034152ms ago: executing program 2 (id=7764): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x0, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 124.813879ms ago: executing program 1 (id=7767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r1}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) 107.83973ms ago: executing program 1 (id=7768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x4, 0x0, @private2, @loopback, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 84.839062ms ago: executing program 0 (id=7769): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f0000000280), &(0x7f0000000000)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x12, 0x0) 73.946163ms ago: executing program 1 (id=7770): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000cb000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff044d564b"]) 62.085965ms ago: executing program 0 (id=7771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r2}, 0x10) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, r3}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0xc018aec0, &(0x7f0000000140)={0xfb7f, 0x1fc}) 61.182585ms ago: executing program 1 (id=7772): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000200)=""/54, 0x36}], 0x2, 0x0, 0x0) 46.727916ms ago: executing program 0 (id=7773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 45.785796ms ago: executing program 1 (id=7774): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") readlink(&(0x7f0000000a40)='./file2\x00', &(0x7f0000000d80)=""/201, 0xc9) mount$overlay(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0) readlink(&(0x7f0000000700)='./file2\x00', &(0x7f0000000b00)=""/233, 0xe9) newfstatat(0xffffffffffffff9c, &(0x7f0000003280)='./file2\x00', 0x0, 0x0) lstat(&(0x7f0000003c00)='./file2\x00', 0x0) 28.355677ms ago: executing program 0 (id=7775): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x180, 0x0) 14.023988ms ago: executing program 0 (id=7776): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) writev(r0, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r0, &(0x7f00000031c0), 0x12) 13.259718ms ago: executing program 1 (id=7777): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x72) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 0s ago: executing program 0 (id=7778): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T329] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.977137][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 615.985001][ T329] usb 5-1: SerialNumber: syz [ 616.008306][T18121] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 616.228990][T18121] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 616.708492][ T329] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 616.715372][ T329] usb 5-1: USB disconnect, device number 119 [ 618.179626][T18145] loop2: detected capacity change from 0 to 256 [ 618.195613][T18142] loop0: detected capacity change from 0 to 2048 [ 618.259113][T18142] loop0: p1 < > p4 [ 618.263623][T18142] loop0: p4 size 8388608 extends beyond EOD, truncated [ 618.317965][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.333619][T18149] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.341307][T18149] device bridge_slave_0 entered promiscuous mode [ 618.348478][T18149] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.355380][T18149] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.364024][T18149] device bridge_slave_1 entered promiscuous mode [ 618.365421][T18160] loop2: detected capacity change from 0 to 512 [ 618.384281][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 618.384298][ T30] audit: type=1400 audit(1728985572.548:6586): avc: denied { unmount } for pid=16709 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 618.492799][ T30] audit: type=1400 audit(1728985572.658:6587): avc: denied { name_bind } for pid=18173 comm="syz.4.7043" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 618.546563][T18149] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.553158][ T30] audit: type=1400 audit(1728985572.718:6588): avc: denied { getopt } for pid=18179 comm="syz.2.7046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 618.553464][T18149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.580107][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.586959][T18149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.601945][ T30] audit: type=1400 audit(1728985572.748:6589): avc: denied { bind } for pid=18181 comm="syz.1.7045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 618.646583][T18191] loop0: detected capacity change from 0 to 512 [ 618.662961][ T30] audit: type=1400 audit(1728985572.758:6590): avc: denied { write } for pid=18175 comm="syz.0.7044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 618.700416][ T30] audit: type=1326 audit(1728985572.808:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.1.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3237fff9 code=0x7ffc0000 [ 618.729705][T18191] EXT4-fs (loop0): Ignoring removed orlov option [ 618.738575][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.746369][ T30] audit: type=1326 audit(1728985572.808:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.1.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3237fff9 code=0x7ffc0000 [ 618.771289][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.778250][ T30] audit: type=1326 audit(1728985572.808:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.1.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb3237fff9 code=0x7ffc0000 [ 618.802067][T18191] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 618.810863][T18191] EXT4-fs (loop0): orphan cleanup on readonly fs [ 618.817174][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.825205][T18191] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 618.833417][ T30] audit: type=1326 audit(1728985572.808:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.1.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3237fff9 code=0x7ffc0000 [ 618.863232][ T30] audit: type=1326 audit(1728985572.808:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.1.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3237fff9 code=0x7ffc0000 [ 618.888725][T18191] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 618.903998][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.906912][T18191] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.7051: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 618.923951][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.936480][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.944249][T18191] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7051: couldn't read orphan inode 13 (err -117) [ 618.957653][T18191] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,nogrpid,orlov,grpid,,errors=continue. Quota mode: writeback. [ 618.974342][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.983088][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.990203][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.008534][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.016758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 619.038948][T18191] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 619.052801][T18191] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 619.068998][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 619.082460][T18191] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 619.083573][T18149] device veth0_vlan entered promiscuous mode [ 619.103838][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 619.116769][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 619.125336][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 619.154364][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 619.163088][T18218] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 619.167527][T18149] device veth1_macvtap entered promiscuous mode [ 619.189945][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 619.210608][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 619.250650][T18230] input: syz0 as /devices/virtual/input/input140 [ 619.340146][ T1000] device bridge_slave_1 left promiscuous mode [ 619.346131][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.353896][ T1000] device bridge_slave_0 left promiscuous mode [ 619.360226][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.368792][ T1000] device veth1_macvtap left promiscuous mode [ 619.399809][T18228] loop1: detected capacity change from 0 to 40427 [ 619.428639][T18228] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 619.436307][T18228] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 619.445647][T18228] F2FS-fs (loop1): invalid crc value [ 619.452690][T18228] F2FS-fs (loop1): Found nat_bits in checkpoint [ 619.490454][T18228] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 619.497433][T18228] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 619.521426][T18228] attempt to access beyond end of device [ 619.521426][T18228] loop1: rw=2049, want=45208, limit=40427 [ 619.538251][ T603] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 619.579360][T18254] syz.0.7076[18254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 619.579450][T18254] syz.0.7076[18254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 619.877384][T18276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7085'. [ 619.908234][ T603] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 619.916565][ T603] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 619.925081][ T603] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 619.933970][ T603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 619.943889][ T603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 620.018268][ T385] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 620.034276][T18283] syz.4.7088[18283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 620.034338][T18283] syz.4.7088[18283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 620.208346][ T603] usb 4-1: string descriptor 0 read error: -22 [ 620.225665][ T603] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 620.234501][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.242815][ T603] usb 4-1: config 0 descriptor?? [ 620.278496][ T603] hub 4-1:0.0: bad descriptor, ignoring hub [ 620.284266][ T603] hub: probe of 4-1:0.0 failed with error -5 [ 620.290467][ T603] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input141 [ 620.318186][ T20] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 620.428238][ T385] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 234, using maximum allowed: 30 [ 620.438979][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.449685][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.459229][ T385] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 234 [ 620.472199][ T385] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 620.481067][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.489528][ T603] usb 4-1: USB disconnect, device number 114 [ 620.490104][ T385] usb 1-1: config 0 descriptor?? [ 620.678270][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.689273][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.698997][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 620.707841][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.716118][ T20] usb 3-1: config 0 descriptor?? [ 620.868209][ T603] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 620.979827][ T385] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.012E/input/input142 [ 620.992555][ T385] sony 0003:054C:03D5.012E: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 621.192764][ T445] usb 1-1: USB disconnect, device number 107 [ 621.228306][ T603] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 621.239167][ T603] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 621.328269][ T603] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.337223][ T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 621.345141][ T603] usb 2-1: SerialNumber: syz [ 621.368251][T18292] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 621.588194][ T329] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 621.596216][T18292] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 621.698333][ T20] usb 3-1: string descriptor 0 read error: -71 [ 621.718255][ T20] uclogic 0003:256C:006D.012F: failed retrieving string descriptor #200: -71 [ 621.726906][ T20] uclogic 0003:256C:006D.012F: failed retrieving pen parameters: -71 [ 621.735088][ T20] uclogic 0003:256C:006D.012F: failed probing pen v2 parameters: -71 [ 621.743026][ T20] uclogic 0003:256C:006D.012F: failed probing parameters: -71 [ 621.750277][ T20] uclogic: probe of 0003:256C:006D.012F failed with error -71 [ 621.758237][ T20] usb 3-1: USB disconnect, device number 118 [ 621.864773][T18311] xt_hashlimit: max too large, truncated to 1048576 [ 621.968423][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.979868][ T329] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 621.992695][ T329] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 622.001490][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.009888][ T329] usb 5-1: config 0 descriptor?? [ 622.068287][ T603] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 622.075320][ T603] usb 2-1: USB disconnect, device number 115 [ 622.198214][ T337] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 622.489153][ T329] plantronics 0003:047F:FFFF.0130: No inputs registered, leaving [ 622.497689][ T329] plantronics 0003:047F:FFFF.0130: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 622.509861][ T60] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 622.558246][ T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.573383][ T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.583201][ T337] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 622.593008][ T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.601690][ T337] usb 4-1: config 0 descriptor?? [ 622.679367][T18342] syz.1.7115[18342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 622.679436][T18342] syz.1.7115[18342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 622.758251][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 622.803738][T18343] loop0: detected capacity change from 0 to 40427 [ 622.858660][T18343] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 622.866360][T18343] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 622.876449][T18343] F2FS-fs (loop0): invalid crc value [ 622.882915][T18343] F2FS-fs (loop0): Found nat_bits in checkpoint [ 622.902075][T18343] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 622.908938][T18343] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 622.918255][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.928438][T18343] attempt to access beyond end of device [ 622.928438][T18343] loop0: rw=2049, want=45208, limit=40427 [ 622.929060][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.949759][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 622.962551][ T60] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 622.971610][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.980793][ T60] usb 3-1: config 0 descriptor?? [ 623.078559][ T337] hid (null): bogus close delimiter [ 623.136778][T18388] netlink: 'syz.1.7133': attribute type 1 has an invalid length. [ 623.144398][T18388] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7133'. [ 623.158817][ T445] usb 5-1: USB disconnect, device number 120 [ 623.172868][T18392] loop1: detected capacity change from 0 to 16 [ 623.209129][T18392] erofs: (device loop1): mounted with root inode @ nid 36. [ 623.218450][ T48] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 623.235262][T18392] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 623.298279][ T337] usb 4-1: language id specifier not provided by device, defaulting to English [ 623.388217][ T603] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 623.468943][ T60] microsoft 0003:045E:07DA.0132: unknown main item tag 0x0 [ 623.476151][ T60] microsoft 0003:045E:07DA.0132: unknown main item tag 0x0 [ 623.483346][ T60] microsoft 0003:045E:07DA.0132: unknown main item tag 0x0 [ 623.490489][ T60] microsoft 0003:045E:07DA.0132: unknown main item tag 0x0 [ 623.497460][ T60] microsoft 0003:045E:07DA.0132: unknown main item tag 0x0 [ 623.504632][ T60] microsoft 0003:045E:07DA.0132: unknown main item tag 0x0 [ 623.511741][ T60] microsoft 0003:045E:07DA.0132: unknown main item tag 0x0 [ 623.518777][ T60] microsoft 0003:045E:07DA.0132: unknown main item tag 0x0 [ 623.525784][ T60] microsoft 0003:045E:07DA.0132: unknown main item tag 0x0 [ 623.533009][ T60] microsoft 0003:045E:07DA.0132: unknown main item tag 0x0 [ 623.542103][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0132/input/input143 [ 623.553976][ T60] microsoft 0003:045E:07DA.0132: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 623.638175][ T603] usb 1-1: Using ep0 maxpacket: 32 [ 623.689841][ T445] usb 3-1: USB disconnect, device number 119 [ 623.719151][ T337] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0131/input/input144 [ 623.731739][ T337] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0131/input/input145 [ 623.744152][ T337] uclogic 0003:256C:006D.0131: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 623.759497][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.770319][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.776427][T18403] loop4: detected capacity change from 0 to 512 [ 623.781330][ T603] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 623.795171][ T603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.795520][T18404] loop1: detected capacity change from 0 to 512 [ 623.810236][ T603] usb 1-1: config 0 descriptor?? [ 623.815567][T18403] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 623.830706][T18403] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.7140: bg 0: block 64: padding at end of block bitmap is not set [ 623.844966][T18403] __quota_error: 47 callbacks suppressed [ 623.844980][T18403] Quota error (device loop4): write_blk: dquota write failed [ 623.857973][T18403] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 623.859694][ T603] hub 1-1:0.0: USB hub found [ 623.868772][T18403] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.7140: Failed to acquire dquot type 0 [ 623.883784][T18403] EXT4-fs (loop4): 1 truncate cleaned up [ 623.884682][T18404] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,nombcache,,errors=continue. Quota mode: writeback. [ 623.889682][T18403] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 623.902676][T18404] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038 (0x7fffffff) [ 623.925068][ T60] usb 4-1: USB disconnect, device number 115 [ 623.929580][ T30] audit: type=1400 audit(1728985578.088:6643): avc: denied { setattr } for pid=18402 comm="syz.1.7139" path="/153/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 623.969217][T18403] Quota error (device loop4): write_blk: dquota write failed [ 623.973055][T18404] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #19: comm syz.1.7139: corrupted inode contents [ 623.976480][T18403] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 623.988557][T18404] EXT4-fs error (device loop1): ext4_dirty_inode:6038: inode #19: comm syz.1.7139: mark_inode_dirty error [ 623.997976][T18403] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.7140: Failed to acquire dquot type 0 [ 624.014073][T18404] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #19: comm syz.1.7139: corrupted inode contents [ 624.033809][T18404] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2960: inode #19: comm syz.1.7139: mark_inode_dirty error [ 624.045736][T18404] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2963: inode #19: comm syz.1.7139: mark inode dirty (error -117) [ 624.058824][T18404] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 624.078253][ T603] hub 1-1:0.0: 1 port detected [ 624.227709][ T30] audit: type=1326 audit(1728985578.388:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.2.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6f7f2ff9 code=0x7ffc0000 [ 624.269024][ T30] audit: type=1326 audit(1728985578.388:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.2.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c6f7f2ff9 code=0x7ffc0000 [ 624.293029][ T30] audit: type=1326 audit(1728985578.388:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.2.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6f7f2ff9 code=0x7ffc0000 [ 624.317044][ T30] audit: type=1326 audit(1728985578.388:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.2.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6f7f2ff9 code=0x7ffc0000 [ 624.348068][ T30] audit: type=1326 audit(1728985578.428:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.2.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c6f7f2ff9 code=0x7ffc0000 [ 624.379913][T18436] input: syz0 as /devices/virtual/input/input146 [ 624.406707][T18438] loop4: detected capacity change from 0 to 256 [ 624.450512][T18438] FAT-fs (loop4): Directory bread(block 64) failed [ 624.456876][T18438] FAT-fs (loop4): Directory bread(block 65) failed [ 624.463400][T18438] FAT-fs (loop4): Directory bread(block 66) failed [ 624.469751][T18438] FAT-fs (loop4): Directory bread(block 67) failed [ 624.480325][T18438] FAT-fs (loop4): Directory bread(block 68) failed [ 624.488030][T18438] FAT-fs (loop4): Directory bread(block 69) failed [ 624.495739][T18438] FAT-fs (loop4): Directory bread(block 70) failed [ 624.502160][T18438] FAT-fs (loop4): Directory bread(block 71) failed [ 624.508909][T18438] FAT-fs (loop4): Directory bread(block 72) failed [ 624.518645][T18438] FAT-fs (loop4): Directory bread(block 73) failed [ 624.548658][T18449] loop3: detected capacity change from 0 to 1024 [ 624.563970][T18438] attempt to access beyond end of device [ 624.563970][T18438] loop4: rw=2049, want=1228, limit=256 [ 624.575885][T18449] EXT4-fs (loop3): Test dummy encryption mode enabled [ 624.582735][T18449] EXT4-fs (loop3): Ignoring removed orlov option [ 624.594833][T18449] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 624.633621][T18454] netlink: 'syz.1.7161': attribute type 4 has an invalid length. [ 624.648596][T18456] loop4: detected capacity change from 0 to 256 [ 624.685706][T18456] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 624.728247][ T445] hub 1-1:0.0: activate --> -90 [ 624.748269][ T337] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 624.856512][T18477] loop4: detected capacity change from 0 to 1024 [ 624.898980][T18477] EXT4-fs (loop4): Ignoring removed orlov option [ 624.905215][T18477] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 624.919838][T18477] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,journal_dev=0x0000000000000001,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 624.983554][T18481] loop4: detected capacity change from 0 to 256 [ 625.038896][ T26] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 625.128487][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.139435][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.149104][ T337] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 625.157997][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.166974][ T337] usb 3-1: config 0 descriptor?? [ 625.372338][T12183] usb 1-1: USB disconnect, device number 108 [ 625.378337][ T445] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 625.385185][ T445] usb 1-1-port1: attempt power cycle [ 625.398244][ T26] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 625.406169][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 625.417121][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 625.428317][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 625.441409][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 625.450329][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.458596][ T26] usb 2-1: config 0 descriptor?? [ 625.478376][T18471] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 625.488780][T18487] loop3: detected capacity change from 0 to 2048 [ 625.529960][T18487] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 625.583255][T18491] syz.3.7175[18491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 625.583351][T18491] syz.3.7175[18491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 625.603089][T18493] input: syz0 as /devices/virtual/input/input147 [ 625.659506][ T337] uclogic 0003:5543:0781.0133: item fetching failed at offset 5/7 [ 625.667281][ T337] uclogic 0003:5543:0781.0133: parse failed [ 625.673352][ T337] uclogic: probe of 0003:5543:0781.0133 failed with error -22 [ 625.752992][T18499] netlink: 'syz.3.7178': attribute type 2 has an invalid length. [ 625.862177][ T337] usb 3-1: USB disconnect, device number 120 [ 625.939247][ T26] plantronics 0003:047F:FFFF.0134: unknown main item tag 0xd [ 625.947331][ T26] plantronics 0003:047F:FFFF.0134: No inputs registered, leaving [ 625.955680][ T26] plantronics 0003:047F:FFFF.0134: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 626.085177][T18526] loop0: detected capacity change from 0 to 256 [ 626.088357][T18528] loop4: detected capacity change from 0 to 512 [ 626.109155][T18528] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 626.120939][T18528] EXT4-fs (loop4): 1 truncate cleaned up [ 626.122043][T18526] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 626.126466][T18528] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 626.163815][ T329] usb 2-1: USB disconnect, device number 116 [ 626.197758][T18533] loop0: detected capacity change from 0 to 256 [ 626.245565][T18533] FAT-fs (loop0): Directory bread(block 64) failed [ 626.252095][T18533] FAT-fs (loop0): Directory bread(block 65) failed [ 626.258552][T18533] FAT-fs (loop0): Directory bread(block 66) failed [ 626.264867][T18533] FAT-fs (loop0): Directory bread(block 67) failed [ 626.272157][T18533] FAT-fs (loop0): Directory bread(block 68) failed [ 626.278687][T18533] FAT-fs (loop0): Directory bread(block 69) failed [ 626.285138][T18533] FAT-fs (loop0): Directory bread(block 70) failed [ 626.291665][T18533] FAT-fs (loop0): Directory bread(block 71) failed [ 626.298104][T18533] FAT-fs (loop0): Directory bread(block 72) failed [ 626.304703][T18533] FAT-fs (loop0): Directory bread(block 73) failed [ 626.350814][T18533] attempt to access beyond end of device [ 626.350814][T18533] loop0: rw=2049, want=1228, limit=256 [ 626.445732][T18535] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.452711][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.460230][T18535] device bridge_slave_0 entered promiscuous mode [ 626.471038][T18535] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.477954][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.485516][T18535] device bridge_slave_1 entered promiscuous mode [ 626.537494][T18535] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.544347][T18535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.551429][T18535] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.558249][T18535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.579336][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 626.586690][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.594286][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.601811][T18552] loop2: detected capacity change from 0 to 256 [ 626.618608][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 626.627920][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.635070][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.654807][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 626.663323][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.670200][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.677169][T18563] loop0: detected capacity change from 0 to 1024 [ 626.688671][T18552] /dev/loop2: Can't open blockdev [ 626.691858][T18563] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 626.722326][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 626.730416][T18566] loop1: detected capacity change from 0 to 512 [ 626.734743][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 626.756266][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.768992][T18566] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 626.770698][T18535] device veth0_vlan entered promiscuous mode [ 626.789654][ T45] device bridge_slave_1 left promiscuous mode [ 626.795625][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.806266][ T45] device bridge_slave_0 left promiscuous mode [ 626.815936][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.824894][ T45] device veth1_macvtap left promiscuous mode [ 626.833163][T18576] loop0: detected capacity change from 0 to 512 [ 626.834054][T18566] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.7206: bg 0: block 64: padding at end of block bitmap is not set [ 626.854120][T18566] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.7206: Failed to acquire dquot type 0 [ 626.866342][T18566] EXT4-fs (loop1): 1 truncate cleaned up [ 626.871895][T18566] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 626.895889][T18566] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.7206: Failed to acquire dquot type 0 [ 626.911636][T18576] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 626.918285][ T329] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 626.923446][T18576] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 626.932035][T18566] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 626.971431][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.980303][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.987722][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.007083][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.016056][T18535] device veth1_macvtap entered promiscuous mode [ 627.025480][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 627.035264][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 627.164368][T18601] loop2: detected capacity change from 0 to 256 [ 627.174075][T18593] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.181212][T18593] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.188180][ T329] usb 4-1: Using ep0 maxpacket: 32 [ 627.192969][T18593] device bridge_slave_0 entered promiscuous mode [ 627.200775][T18593] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.207788][T18593] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.215148][T18593] device bridge_slave_1 entered promiscuous mode [ 627.240855][T18601] /dev/loop2: Can't open blockdev [ 627.278766][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 627.283737][T18608] loop2: detected capacity change from 0 to 512 [ 627.286347][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 627.301655][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 627.310088][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 627.318096][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.325132][ T2730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.333164][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 627.342260][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 627.350533][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.358608][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.365426][ T2730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.378461][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 627.392352][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 627.417022][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 627.430268][T18593] device veth0_vlan entered promiscuous mode [ 627.446354][T18593] device veth1_macvtap entered promiscuous mode [ 627.460069][ T39] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 627.468279][ T329] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 627.478333][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 627.486303][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.488829][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 627.494080][ T329] usb 4-1: Product: syz [ 627.503771][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.508250][ T329] usb 4-1: Manufacturer: syz [ 627.514743][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.519783][ T329] usb 4-1: SerialNumber: syz [ 627.530796][ T329] usb 4-1: config 0 descriptor?? [ 627.535648][T18612] loop2: detected capacity change from 0 to 2048 [ 627.536344][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.549457][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.599753][T18618] loop0: detected capacity change from 0 to 512 [ 627.612869][T18618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.7227: inode #1: comm syz.0.7227: iget: illegal inode # [ 627.626035][T18618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.7227: error while reading EA inode 1 err=-117 [ 627.635591][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.638573][T18618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.7227: inode #1: comm syz.0.7227: iget: illegal inode # [ 627.645532][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.658610][T18618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.7227: error while reading EA inode 1 err=-117 [ 627.665899][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.678209][T18618] EXT4-fs (loop0): 1 orphan inode deleted [ 627.684925][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.691348][T18618] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 627.698068][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.722696][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 627.729930][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.739386][T18618] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7227: invalid indirect mapped block 234881024 (level 0) [ 627.741932][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.764630][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.771953][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.779297][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.786486][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.793885][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.801185][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.808448][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.815737][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.823186][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.830637][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.834424][T18621] loop1: detected capacity change from 0 to 512 [ 627.838229][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.848664][ T39] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 627.851312][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.859897][ T39] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 627.866633][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.875905][T18621] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 627.882284][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.892057][ T39] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 627.899128][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.908433][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 627.915443][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.926523][T18621] EXT4-fs (loop1): 1 truncate cleaned up [ 627.931989][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.938829][T18621] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,user_xattr,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,barrier,quota,,errors=continue. Quota mode: writeback. [ 627.944709][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.968035][ T39] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 627.971032][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.987885][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.995112][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 627.995122][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 627.995148][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 628.013130][ T39] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 628.015560][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 628.023937][T18621] EXT4-fs (loop1): shut down requested (0) [ 628.032106][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 628.039496][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.044260][T12183] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 628.052526][ T39] usb 5-1: config 0 descriptor?? [ 628.062551][T12183] hid-generic 0000:0000:0000.0135: hidraw0: HID v0.00 Device [syz0] on syz0 [ 628.135008][T18631] loop1: detected capacity change from 0 to 1024 [ 628.170039][T18631] EXT4-fs (loop1): Ignoring removed orlov option [ 628.176735][T18631] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 628.189881][T18631] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,max_dir_size_kb=0x0000000000000001,norecovery,journal_dev=0x0000000000000002,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 628.228314][ T329] (unnamed net_device) (uninitialized): Assigned a random MAC address: e6:86:93:cd:38:5f [ 628.239136][ T329] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 628.250752][ T45] device bridge_slave_1 left promiscuous mode [ 628.256725][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.264952][ T45] device bridge_slave_0 left promiscuous mode [ 628.271048][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.279532][ T45] device veth1_macvtap left promiscuous mode [ 628.285382][ T45] device veth0_vlan left promiscuous mode [ 628.328353][ T20] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 628.331847][ T39] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 121 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 628.378203][T12183] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 628.438617][ T329] usb 4-1: USB disconnect, device number 116 [ 628.553135][ T60] usb 5-1: USB disconnect, device number 121 [ 628.562677][ T60] usblp0: removed [ 628.578286][ T337] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 628.628211][T12183] usb 1-1: Using ep0 maxpacket: 8 [ 628.698380][ T20] usb 3-1: config 0 has no interfaces? [ 628.703812][ T20] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 628.713085][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.721368][ T20] usb 3-1: config 0 descriptor?? [ 628.748287][T12183] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 628.757081][T12183] usb 1-1: config 1 has no interface number 1 [ 628.763430][T12183] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.774160][T12183] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 628.978409][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.989260][T12183] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.998095][T12183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.006361][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.015970][T12183] usb 1-1: Product: syz [ 629.019934][ T337] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 629.028844][T12183] usb 1-1: Manufacturer: syz [ 629.033260][T12183] usb 1-1: SerialNumber: syz [ 629.038183][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.048035][ T337] usb 2-1: config 0 descriptor?? [ 629.055864][T18643] tipc: Started in network mode [ 629.060692][T18643] tipc: Node identity ac1414aa, cluster identity 4711 [ 629.067387][T18643] tipc: New replicast peer: 100.1.1.1 [ 629.072611][T18643] tipc: Enabled bearer , priority 10 [ 629.171863][T18647] loop3: detected capacity change from 0 to 40427 [ 629.218991][T18647] F2FS-fs (loop3): fault_injection options not supported [ 629.226847][T18647] F2FS-fs (loop3): invalid crc value [ 629.233256][T18647] F2FS-fs (loop3): Found nat_bits in checkpoint [ 629.252503][T18647] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 629.266627][T18149] attempt to access beyond end of device [ 629.266627][T18149] loop3: rw=2049, want=45104, limit=40427 [ 629.478322][ T445] usb 3-1: USB disconnect, device number 121 [ 629.492785][T18656] loop2: detected capacity change from 0 to 2048 [ 629.499925][T12183] usb 1-1: USB disconnect, device number 113 [ 629.528437][ T337] hid (null): bogus close delimiter [ 629.688229][ T20] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 629.738251][ T337] usb 2-1: language id specifier not provided by device, defaulting to English [ 629.879111][T18663] loop2: detected capacity change from 0 to 512 [ 629.958212][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 629.978052][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 629.978072][ T30] audit: type=1400 audit(1728985584.138:6722): avc: denied { lock } for pid=18668 comm="syz.2.7245" path="socket:[112410]" dev="sockfs" ino=112410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 630.068234][ T295] tipc: Node number set to 2886997162 [ 630.088296][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.099069][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.108576][ T20] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 630.117611][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.127543][ T20] usb 4-1: config 0 descriptor?? [ 630.148933][ T30] audit: type=1326 audit(1728985584.318:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18679 comm="syz.2.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6f7f2ff9 code=0x7ffc0000 [ 630.175570][ T30] audit: type=1326 audit(1728985584.318:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18679 comm="syz.2.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6f7f2ff9 code=0x7ffc0000 [ 630.203918][ T30] audit: type=1326 audit(1728985584.318:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18679 comm="syz.2.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f6c6f7f2ff9 code=0x7ffc0000 [ 630.205905][ T337] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0136/input/input149 [ 630.227726][ T30] audit: type=1326 audit(1728985584.318:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18679 comm="syz.2.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6f7f2ff9 code=0x7ffc0000 [ 630.239524][T12183] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 630.263340][ T30] audit: type=1326 audit(1728985584.318:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18679 comm="syz.2.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6f7f2ff9 code=0x7ffc0000 [ 630.273952][ T337] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0136/input/input150 [ 630.306590][ T337] uclogic 0003:256C:006D.0136: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 630.328174][ T30] audit: type=1400 audit(1728985584.488:6728): avc: denied { mounton } for pid=18683 comm="syz.4.7251" path="/proc/13/task" dev="proc" ino=112432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 630.355250][T18687] loop4: detected capacity change from 0 to 256 [ 630.401158][T18687] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 630.419932][ T30] audit: type=1400 audit(1728985584.588:6729): avc: denied { write } for pid=18686 comm="syz.4.7252" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 630.454123][ T30] audit: type=1400 audit(1728985584.608:6730): avc: denied { add_name } for pid=18686 comm="syz.4.7252" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 630.475048][ T30] audit: type=1400 audit(1728985584.608:6731): avc: denied { associate } for pid=18686 comm="syz.4.7252" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 630.498064][ T26] usb 2-1: USB disconnect, device number 117 [ 630.598931][ T20] playstation 0003:054C:0CE6.0137: item fetching failed at offset 5/7 [ 630.607147][ T20] playstation 0003:054C:0CE6.0137: Parse failed [ 630.613380][ T20] playstation: probe of 0003:054C:0CE6.0137 failed with error -22 [ 630.658247][T12183] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.669057][T12183] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.678652][T12183] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 630.687420][T12183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.695760][T12183] usb 1-1: config 0 descriptor?? [ 630.802757][ T20] usb 4-1: USB disconnect, device number 117 [ 631.013520][T18699] loop1: detected capacity change from 0 to 512 [ 631.058924][T18699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 631.070253][T18699] EXT4-fs (loop1): 1 truncate cleaned up [ 631.075728][T18699] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 631.133334][T18707] kvm [18706]: vcpu0, guest rIP: 0x1b disabled perfctr wrmsr: 0xc1 data 0xd [ 631.142240][T18707] kvm [18706]: vcpu0, guest rIP: 0x1d disabled perfctr wrmsr: 0xc1 data 0xd [ 631.168810][T12183] hid (null): bogus close delimiter [ 631.278234][ T26] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 631.335730][T18711] loop3: detected capacity change from 0 to 512 [ 631.388300][T12183] usb 1-1: language id specifier not provided by device, defaulting to English [ 631.402502][T18711] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,nombcache,,errors=continue. Quota mode: writeback. [ 631.415611][T18711] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 631.434841][T18712] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.441930][T18712] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.451537][T18712] device bridge_slave_0 entered promiscuous mode [ 631.462725][T18712] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.469868][T18712] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.477533][T18712] device bridge_slave_1 entered promiscuous mode [ 631.492228][T18719] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #19: comm syz.3.7260: corrupted inode contents [ 631.513490][T18719] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #19: comm syz.3.7260: mark_inode_dirty error [ 631.528448][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 631.544391][T18719] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #19: comm syz.3.7260: corrupted inode contents [ 631.568369][T18719] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2960: inode #19: comm syz.3.7260: mark_inode_dirty error [ 631.596689][T18719] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2963: inode #19: comm syz.3.7260: mark inode dirty (error -117) [ 631.616396][T18719] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -117) [ 631.639532][ T317] device bridge_slave_1 left promiscuous mode [ 631.645623][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.652919][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.669414][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.687719][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 631.699617][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.709465][ T317] device bridge_slave_0 left promiscuous mode [ 631.715525][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.717622][ T26] usb 3-1: config 0 descriptor?? [ 631.728302][ T317] device veth1_macvtap left promiscuous mode [ 631.758907][ T26] hub 3-1:0.0: USB hub found [ 631.817439][T18712] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.824348][T18712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.829563][T12183] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0138/input/input151 [ 631.831727][T18712] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.850125][T18712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.854669][T12183] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0138/input/input152 [ 631.877821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 631.886335][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.893931][T12183] uclogic 0003:256C:006D.0138: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 631.905982][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.927203][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 631.935551][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.942533][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.950241][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 631.968369][ T26] hub 3-1:0.0: 1 port detected [ 631.968486][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.979969][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.005350][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.017126][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.040964][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.050899][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.058928][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 632.066354][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 632.068160][T12183] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 632.080432][ T329] usb 1-1: USB disconnect, device number 114 [ 632.082102][T18712] device veth0_vlan entered promiscuous mode [ 632.098081][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 632.107458][T18712] device veth1_macvtap entered promiscuous mode [ 632.117193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.127100][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.200851][T18732] loop1: detected capacity change from 0 to 2048 [ 632.230431][T18732] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 632.250787][T18732] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold,. Quota mode: writeback. [ 632.289588][T18732] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.7265: bad entry in directory: inode out of bounds - offset=60, inode=15, rec_len=16, size=2048 fake=0 [ 632.308912][T18732] EXT4-fs (loop1): Remounting filesystem read-only [ 632.321645][T18712] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /1/file0: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=2048 fake=1 [ 632.488443][T12183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.499675][T12183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.509290][T12183] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 632.518095][T12183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.526849][T12183] usb 4-1: config 0 descriptor?? [ 632.608254][ T329] hub 3-1:0.0: activate --> -90 [ 632.641744][T18742] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.648753][T18742] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.656132][T18742] device bridge_slave_0 entered promiscuous mode [ 632.665171][T18742] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.672083][T18742] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.679636][T18742] device bridge_slave_1 entered promiscuous mode [ 632.722675][T18742] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.729613][T18742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.736721][T18742] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.743620][T18742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.765738][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.773267][ T2730] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.781036][ T2730] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.790342][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.798407][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.805371][ T2730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.818030][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.826145][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.833032][ T2730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.846028][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.857163][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.858194][ T26] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 632.879215][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.893029][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.900946][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 632.908589][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 632.916610][T18742] device veth0_vlan entered promiscuous mode [ 632.923346][ T317] device bridge_slave_1 left promiscuous mode [ 632.929427][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.936921][ T317] device bridge_slave_0 left promiscuous mode [ 632.943050][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.950979][ T317] device veth1_macvtap left promiscuous mode [ 632.956807][ T317] device veth0_vlan left promiscuous mode [ 632.988425][T12183] hid (null): bogus close delimiter [ 633.043941][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 633.053806][T18742] device veth1_macvtap entered promiscuous mode [ 633.066990][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 633.082079][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 633.153107][T18758] loop1: detected capacity change from 0 to 1024 [ 633.190502][T18758] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 633.215787][T12183] usb 4-1: language id specifier not provided by device, defaulting to English [ 633.248267][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.259513][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.269305][ T26] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 633.269893][ T20] usb 3-1: USB disconnect, device number 122 [ 633.278329][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.291995][ T329] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 633.298774][ T329] usb 3-1-port1: attempt power cycle [ 633.304632][ T26] usb 1-1: config 0 descriptor?? [ 633.639167][T12183] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0139/input/input153 [ 633.652904][T12183] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0139/input/input154 [ 633.665258][T12183] uclogic 0003:256C:006D.0139: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 633.778072][T18791] input: syz0 as /devices/virtual/input/input155 [ 633.788435][ T26] hid (null): bogus close delimiter [ 633.798259][ T337] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 633.842309][ T385] usb 4-1: USB disconnect, device number 118 [ 633.895166][T18801] loop2: detected capacity change from 0 to 512 [ 634.008256][ T26] usb 1-1: language id specifier not provided by device, defaulting to English [ 634.158287][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.176937][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.188892][T18808] xt_bpf: check failed: parse error [ 634.196697][ T337] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 634.205931][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.217467][ T337] usb 2-1: config 0 descriptor?? [ 634.370863][T18823] netem: incorrect gi model size [ 634.375666][T18823] netem: change failed [ 634.439929][ T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.013A/input/input156 [ 634.455749][ T26] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.013A/input/input157 [ 634.471001][ T26] uclogic 0003:256C:006D.013A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 634.628166][ T26] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 634.663794][ T329] usb 1-1: USB disconnect, device number 115 [ 634.699261][ T337] appleir 0003:05AC:8243.013B: item fetching failed at offset 3/5 [ 634.707213][ T337] appleir 0003:05AC:8243.013B: parse failed [ 634.713126][ T337] appleir: probe of 0003:05AC:8243.013B failed with error -22 [ 634.901058][ T20] usb 2-1: USB disconnect, device number 118 [ 634.908280][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 635.038343][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.049089][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.058756][ T385] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 635.066190][ T39] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 635.073738][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 635.082873][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.091895][ T26] usb 5-1: config 0 descriptor?? [ 635.128673][ T26] hub 5-1:0.0: USB hub found [ 635.338321][ T26] hub 5-1:0.0: 1 port detected [ 635.448400][ T385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.459294][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.470262][ T385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.479965][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.488188][T12183] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 635.489564][ T39] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 635.505855][ T385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 635.518541][ T385] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 635.527258][ T385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.535190][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.543641][ T39] usb 3-1: config 0 descriptor?? [ 635.548846][ T385] usb 4-1: config 0 descriptor?? [ 635.688199][ T337] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 635.848415][T12183] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 635.859905][T12183] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 635.870992][T12183] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 635.879878][T12183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.908279][T18860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 635.958261][ T26] hub 5-1:0.0: activate --> -90 [ 636.019335][ T39] uclogic 0003:5543:0042.013C: No inputs registered, leaving [ 636.027171][ T385] logitech 0003:046D:C293.013D: item fetching failed at offset 5/7 [ 636.035264][ T39] uclogic 0003:5543:0042.013C: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 636.046568][ T385] logitech 0003:046D:C293.013D: parse failed [ 636.052379][ T385] logitech: probe of 0003:046D:C293.013D failed with error -22 [ 636.068268][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.078988][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.088527][ T337] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 636.097349][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.105669][ T337] usb 2-1: config 0 descriptor?? [ 636.238780][ T39] usb 4-1: USB disconnect, device number 119 [ 636.238780][ T20] usb 3-1: USB disconnect, device number 127 [ 636.569067][ T337] hid-rmi 0003:06CB:81A7.013E: unknown main item tag 0x0 [ 636.576390][ T337] hid-rmi 0003:06CB:81A7.013E: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 636.598696][ T385] usb 5-1: USB disconnect, device number 122 [ 636.608228][ T26] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 636.615066][ T26] usb 5-1-port1: attempt power cycle [ 636.770015][ T337] usb 2-1: USB disconnect, device number 119 [ 636.916585][T18878] loop2: detected capacity change from 0 to 2048 [ 636.918253][T12183] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 636.930070][T12183] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input158 [ 636.941236][T12183] usb 1-1: USB disconnect, device number 116 [ 636.942161][T18878] Alternate GPT is invalid, using primary GPT. [ 636.953239][T18878] loop2: p2 p3 p7 [ 637.128389][ T20] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 637.181709][T18896] loop4: detected capacity change from 0 to 256 [ 637.257595][T18898] cgroup: fork rejected by pids controller in /syz4 [ 637.364900][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 637.364919][ T30] audit: type=1400 audit(1728985591.528:6801): avc: denied { bind } for pid=18907 comm="syz.1.7340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 637.368393][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 637.370989][ T30] audit: type=1400 audit(1728985591.528:6802): avc: denied { setopt } for pid=18907 comm="syz.1.7340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 637.416353][ T337] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 637.425744][ T30] audit: type=1400 audit(1728985591.528:6803): avc: denied { ioctl } for pid=18907 comm="syz.1.7340" path="socket:[114115]" dev="sockfs" ino=114115 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 637.476539][T18910] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.483481][T18910] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.490550][T18910] device bridge_slave_0 entered promiscuous mode [ 637.497302][T18910] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.504419][T18910] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.511704][T18910] device bridge_slave_1 entered promiscuous mode [ 637.528327][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 637.539896][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 637.550887][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 637.559709][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.568581][ T20] usb 4-1: config 0 descriptor?? [ 637.588230][T18875] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 637.602052][T18910] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.609024][T18910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.616202][T18910] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.622982][T18910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.634483][ T20] hub 4-1:0.0: USB hub found [ 637.645788][T18916] loop0: detected capacity change from 0 to 512 [ 637.656181][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.663894][ T2730] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.671084][ T2730] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.680611][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 637.688895][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.695758][ T2730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.700356][T18916] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 637.716475][T18916] ext4 filesystem being mounted at /9/bus supports timestamps until 2038 (0x7fffffff) [ 637.718186][T12183] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 637.734554][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 637.742838][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.749725][ T2730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.758844][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 637.771782][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.784994][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.798978][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.806458][ T30] audit: type=1400 audit(1728985591.968:6804): avc: denied { execute } for pid=18920 comm="syz.0.7343" path=2F6D656D66643A1033717D329ACEAF03DF795BD9FF5238F41C0869E45ED5FDA90DAC374194A0202864656C6574656429 dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 637.808219][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 637.837585][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.848301][ T20] hub 4-1:0.0: 2 ports detected [ 637.854982][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.869564][ T337] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 637.875358][T18910] device veth0_vlan entered promiscuous mode [ 637.888274][ T30] audit: type=1400 audit(1728985592.048:6805): avc: denied { create } for pid=18920 comm="syz.0.7343" dev="anon_inodefs" ino=114213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 637.918198][ T337] usb 3-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00 [ 637.918377][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.934102][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.936351][ T30] audit: type=1400 audit(1728985592.098:6806): avc: denied { ioctl } for pid=18920 comm="syz.0.7343" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=114213 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 637.968539][ T337] usb 3-1: config 0 descriptor?? [ 637.971626][T18910] device veth1_macvtap entered promiscuous mode [ 637.979931][T12183] usb 2-1: Using ep0 maxpacket: 32 [ 637.994725][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 638.006882][ T30] audit: type=1400 audit(1728985592.168:6807): avc: denied { mount } for pid=18925 comm="syz.0.7345" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 638.007729][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.069321][T18932] loop0: detected capacity change from 0 to 256 [ 638.082805][T18932] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 638.095668][ T317] device bridge_slave_1 left promiscuous mode [ 638.097750][ T30] audit: type=1400 audit(1728985592.268:6808): avc: denied { create } for pid=18931 comm="syz.0.7347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 638.101676][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.108390][T12183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.139589][ T30] audit: type=1400 audit(1728985592.298:6809): avc: denied { setopt } for pid=18931 comm="syz.0.7347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 638.140978][ T317] device bridge_slave_0 left promiscuous mode [ 638.160421][ T30] audit: type=1400 audit(1728985592.298:6810): avc: denied { map } for pid=18931 comm="syz.0.7347" path="/14/file2/blkio.bfq.io_service_bytes_recursive" dev="loop0" ino=1049057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 638.166324][T12183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.199343][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.209311][T12183] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 638.219092][T12183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.227129][ T317] device veth1_macvtap left promiscuous mode [ 638.227754][T12183] usb 2-1: config 0 descriptor?? [ 638.233255][ T317] device veth0_vlan left promiscuous mode [ 638.278686][T12183] hub 2-1:0.0: USB hub found [ 638.288235][ T20] hub 4-1:0.0: set hub depth failed [ 638.329788][ T20] usb 4-1: USB disconnect, device number 120 [ 638.368346][ T39] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 638.469577][ T337] logitech-djreceiver 0003:046D:C70A.013F: unknown main item tag 0x0 [ 638.477541][ T337] logitech-djreceiver 0003:046D:C70A.013F: unknown main item tag 0x0 [ 638.485596][T12183] hub 2-1:0.0: 1 port detected [ 638.490717][ T337] logitech-djreceiver 0003:046D:C70A.013F: unknown main item tag 0x0 [ 638.498658][ T337] logitech-djreceiver 0003:046D:C70A.013F: unknown main item tag 0x0 [ 638.506554][ T337] logitech-djreceiver 0003:046D:C70A.013F: unknown main item tag 0x0 [ 638.566435][T18944] loop0: detected capacity change from 0 to 2048 [ 638.619669][T18944] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.7352: bad orphan inode 8192 [ 638.629928][T18944] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 638.638168][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 638.644601][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.652826][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.660025][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.667202][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.674579][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.681913][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.689898][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.697299][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.704566][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.712109][ T385] usb 3-1: USB disconnect, device number 2 [ 638.712214][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.725012][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.732409][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.739627][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.746886][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.754153][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.761315][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.768442][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.768525][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.779831][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.786654][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.803582][ T39] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 638.812941][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.813987][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.822013][ T39] usb 5-1: config 0 descriptor?? [ 638.835799][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.843084][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.850718][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.857971][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.865426][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.872712][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.879878][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.887069][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.894348][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.901576][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.908780][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.916108][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.923667][ T20] hid-generic 0000:0000:0000.0140: unknown main item tag 0x0 [ 638.934881][ T20] hid-generic 0000:0000:0000.0140: hidraw0: HID v0.00 Device [syz0] on syz0 [ 638.944305][ T26] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 639.158215][ T20] hub 2-1:0.0: activate --> -90 [ 639.318882][ T39] cp2112 0003:10C4:EA90.0141: unknown main item tag 0x0 [ 639.325797][ T39] cp2112 0003:10C4:EA90.0141: unknown main item tag 0x0 [ 639.332552][ T39] cp2112 0003:10C4:EA90.0141: unknown main item tag 0x0 [ 639.339385][ T26] usb 1-1: config 0 has no interfaces? [ 639.344687][ T26] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 639.353580][ T39] cp2112 0003:10C4:EA90.0141: unknown main item tag 0x0 [ 639.360336][ T39] cp2112 0003:10C4:EA90.0141: unknown main item tag 0x0 [ 639.367443][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.375776][ T39] cp2112 0003:10C4:EA90.0141: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 639.388071][ T26] usb 1-1: config 0 descriptor?? [ 639.529097][ T39] cp2112 0003:10C4:EA90.0141: Part Number: 0x00 Device Version: 0x00 [ 639.798718][ T329] usb 2-1: USB disconnect, device number 120 [ 639.808222][ T20] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 639.815042][ T20] usb 2-1-port1: attempt power cycle [ 639.968249][ T39] cp2112 0003:10C4:EA90.0141: error setting SMBus config [ 639.975474][ T39] cp2112: probe of 0003:10C4:EA90.0141 failed with error -71 [ 639.983892][ T39] usb 5-1: USB disconnect, device number 127 [ 640.133225][ T358] usb 1-1: USB disconnect, device number 117 [ 640.150057][T18956] print_req_error: 262 callbacks suppressed [ 640.150075][T18956] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.166738][T18956] FAT-fs (loop5): unable to read boot sector [ 640.501697][T18983] loop4: detected capacity change from 0 to 2048 [ 640.509084][T18981] loop1: detected capacity change from 0 to 40427 [ 640.558208][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 640.567502][T18981] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 640.577222][T18981] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 640.586970][T18981] F2FS-fs (loop1): invalid crc value [ 640.594186][T18981] F2FS-fs (loop1): Found nat_bits in checkpoint [ 640.602861][T18983] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.7368: bad orphan inode 8192 [ 640.617702][T18983] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 640.633107][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.641095][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.648364][ T358] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 640.655841][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.663196][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.670494][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.677723][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.679049][T18981] F2FS-fs (loop1): Start checkpoint disabled! [ 640.685139][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.692568][T18981] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 640.698429][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.709175][T18981] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 640.716613][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.726994][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.734255][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.741549][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.748710][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.755887][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.763127][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.770419][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.777681][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.785095][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.792327][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.799760][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.807051][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.814648][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.828291][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 640.830273][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.840581][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.848237][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.855437][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.863933][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.866003][ T2730] attempt to access beyond end of device [ 640.866003][ T2730] loop1: rw=2049, want=40968, limit=40427 [ 640.883184][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.890463][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.897603][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.905009][ T358] usb 1-1: Using ep0 maxpacket: 32 [ 640.919809][T18995] loop3: detected capacity change from 0 to 1024 [ 640.926032][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.933229][ T39] hid-generic 0000:0000:0000.0142: unknown main item tag 0x0 [ 640.941386][ T39] hid-generic 0000:0000:0000.0142: hidraw0: HID v0.00 Device [syz0] on syz0 [ 640.959193][T18995] EXT4-fs (loop3): Ignoring removed nobh option [ 640.965432][T18995] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 640.979931][T18995] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,dioread_nolock,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 641.002479][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.006471][T18999] loop1: detected capacity change from 0 to 1024 [ 641.015123][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.021206][T18995] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 641.029188][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.036109][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 641.049046][ T20] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 641.060352][T18995] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 641.068850][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.075937][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 641.084572][ T20] usb 3-1: config 0 descriptor?? [ 641.094809][T18995] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 641.111498][ T358] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 641.112055][T18999] EXT4-fs (loop1): Ignoring removed oldalloc option [ 641.120386][T18995] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 641.120416][T18995] EXT4-fs (loop3): can't enable nombcache during remount [ 641.120471][ T358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.127045][T18999] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 641.147651][ T358] usb 1-1: config 0 descriptor?? [ 641.154061][T18149] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /40/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 641.169719][T18999] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 641.189632][T18976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 641.211382][T18149] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 641.237095][ T358] hub 1-1:0.0: USB hub found [ 641.242267][T18149] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 641.253720][T18149] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /40/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 641.275188][T18149] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 641.294434][T18149] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 641.306008][T18149] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /40/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 641.308221][ T329] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 641.334845][T18149] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 641.354029][T18149] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 641.365806][T18149] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /40/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 641.388062][T18149] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 641.407543][T18149] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 641.419075][T18149] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /40/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 641.449235][T18149] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 641.468394][ T358] hub 1-1:0.0: 2 ports detected [ 641.473404][T18149] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 641.485558][T18149] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 641.497438][T18149] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 641.509397][T18149] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 641.521185][T18149] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 641.533480][T18149] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 641.568887][ T20] ryos 0003:1E7D:31CE.0143: ignoring exceeding usage max [ 641.576783][ T20] ryos 0003:1E7D:31CE.0143: ignoring exceeding usage max [ 641.583734][ T20] ryos 0003:1E7D:31CE.0143: usage index exceeded [ 641.589861][ T20] ryos 0003:1E7D:31CE.0143: item 0 0 2 2 parsing failed [ 641.596860][ T20] ryos 0003:1E7D:31CE.0143: parse failed [ 641.602511][ T20] ryos: probe of 0003:1E7D:31CE.0143 failed with error -22 [ 641.639446][ T317] tipc: Disabling bearer [ 641.644548][ T317] tipc: Left network mode [ 641.698322][ T329] usb 5-1: config 0 has no interfaces? [ 641.703625][ T329] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 641.712592][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.720900][ T329] usb 5-1: config 0 descriptor?? [ 641.792835][ T20] usb 3-1: USB disconnect, device number 3 [ 641.888246][ T358] hub 1-1:0.0: set hub depth failed [ 641.893339][ T26] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 641.940049][ T358] usb 1-1: USB disconnect, device number 118 [ 642.138188][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 642.143558][ T317] device bridge_slave_1 left promiscuous mode [ 642.149516][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.156785][ T317] device bridge_slave_0 left promiscuous mode [ 642.162753][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.170316][ T317] device veth1_macvtap left promiscuous mode [ 642.176298][ T317] device veth0_vlan left promiscuous mode [ 642.258318][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.269066][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.278571][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 642.287416][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.296618][ T26] usb 2-1: config 0 descriptor?? [ 642.338755][ T26] hub 2-1:0.0: USB hub found [ 642.353410][T19016] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.360345][T19016] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.367461][T19016] device bridge_slave_0 entered promiscuous mode [ 642.374327][T19016] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.381218][T19016] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.388612][T19016] device bridge_slave_1 entered promiscuous mode [ 642.419680][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 642.419696][ T30] audit: type=1326 audit(1728985596.588:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.0.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b134dff9 code=0x7ffc0000 [ 642.449457][ T30] audit: type=1326 audit(1728985596.588:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.0.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f94b134dff9 code=0x7ffc0000 [ 642.473997][ T30] audit: type=1326 audit(1728985596.588:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.0.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b134dff9 code=0x7ffc0000 [ 642.497503][ T30] audit: type=1326 audit(1728985596.588:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.0.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f94b134dff9 code=0x7ffc0000 [ 642.505573][ T329] usb 5-1: USB disconnect, device number 2 [ 642.521103][ T30] audit: type=1326 audit(1728985596.588:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.0.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b134dff9 code=0x7ffc0000 [ 642.552235][ T30] audit: type=1326 audit(1728985596.588:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.0.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f94b134dff9 code=0x7ffc0000 [ 642.575705][ T26] hub 2-1:0.0: 1 port detected [ 642.582587][ T30] audit: type=1326 audit(1728985596.588:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.0.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 642.606592][ T30] audit: type=1326 audit(1728985596.588:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.0.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b134dff9 code=0x7ffc0000 [ 642.630453][T12183] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 642.630994][ T30] audit: type=1326 audit(1728985596.618:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.0.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b134dff9 code=0x7ffc0000 [ 642.663055][T19024] loop0: detected capacity change from 0 to 256 [ 642.681914][T19026] loop4: detected capacity change from 0 to 512 [ 642.712384][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 642.719983][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 642.722063][T19026] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 642.738732][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 642.741508][T19026] ext4 filesystem being mounted at /4/bus supports timestamps until 2038 (0x7fffffff) [ 642.750031][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 642.767382][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.774265][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.783656][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 642.792777][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 642.801350][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.808308][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.815994][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 642.824322][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 642.832201][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 642.840309][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 642.849132][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 642.864891][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 642.873706][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 642.888420][T19016] device veth0_vlan entered promiscuous mode [ 642.894751][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 642.908192][T12183] usb 3-1: Using ep0 maxpacket: 32 [ 642.908994][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 642.921438][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 642.937516][T19016] device veth1_macvtap entered promiscuous mode [ 642.945191][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 642.960073][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 642.968895][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 642.989809][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 642.998313][T19030] loop0: detected capacity change from 0 to 40427 [ 643.003610][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 643.018992][T19030] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 643.026615][T19030] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 643.037002][T19030] F2FS-fs (loop0): Found nat_bits in checkpoint [ 643.057309][T19030] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 643.064312][T19030] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 643.074944][T19030] attempt to access beyond end of device [ 643.074944][T19030] loop0: rw=2049, want=45104, limit=40427 [ 643.097576][ T317] attempt to access beyond end of device [ 643.097576][ T317] loop0: rw=1, want=45112, limit=40427 [ 643.188191][ T329] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 643.217656][T19043] kvm [19042]: vcpu0, guest rIP: 0x1b disabled perfctr wrmsr: 0xc1 data 0xd [ 643.218275][T12183] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 643.226932][T19043] kvm [19042]: vcpu0, guest rIP: 0x1d disabled perfctr wrmsr: 0xc1 data 0xd [ 643.237998][T12183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.248233][ T26] hub 2-1:0.0: activate --> -90 [ 643.252859][T12183] usb 3-1: Product: syz [ 643.261315][T12183] usb 3-1: Manufacturer: syz [ 643.265828][T12183] usb 3-1: SerialNumber: syz [ 643.271222][T12183] usb 3-1: config 0 descriptor?? [ 643.278179][ T385] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 643.518350][ T385] usb 4-1: Using ep0 maxpacket: 16 [ 643.558452][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.569557][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.579185][ T329] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 643.588070][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.596720][ T329] usb 5-1: config 0 descriptor?? [ 643.808292][ T385] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 643.817284][ T385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.825157][ T385] usb 4-1: Product: syz [ 643.829203][ T385] usb 4-1: Manufacturer: syz [ 643.833640][ T385] usb 4-1: SerialNumber: syz [ 643.840020][ T385] r8152-cfgselector 4-1: config 0 descriptor?? [ 643.878630][ T20] usb 2-1: USB disconnect, device number 125 [ 643.888195][ T26] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 643.895100][ T26] usb 2-1-port1: attempt power cycle [ 643.978222][T12183] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4a:45:dc:12:e9:f6 [ 643.990052][T12183] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 644.078533][ T329] hid (null): bogus close delimiter [ 644.098311][ T385] r8152-cfgselector 4-1: Unknown version 0x0000 [ 644.218597][ T445] usb 3-1: USB disconnect, device number 4 [ 644.298323][ T329] usb 5-1: string descriptor 0 read error: -22 [ 644.318236][ T385] r8152-cfgselector 4-1: Unknown version 0x0000 [ 644.324391][ T385] r8152-cfgselector 4-1: bad CDC descriptors [ 644.348231][ T337] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 644.348258][ T385] r8152-cfgselector 4-1: Unknown version 0x0000 [ 644.362429][ T385] r8152-cfgselector 4-1: USB disconnect, device number 121 [ 644.396201][T19049] syz.1.7388[19049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.396311][T19049] syz.1.7388[19049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.409421][T19049] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 644.434905][ T30] audit: type=1400 audit(1728985598.598:6829): avc: denied { mount } for pid=19050 comm="syz.1.7389" name="/" dev="configfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 644.509187][ T329] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0144/input/input160 [ 644.522562][ T329] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0144/input/input161 [ 644.537922][ T329] uclogic 0003:256C:006D.0144: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 644.539102][T19056] loop1: detected capacity change from 0 to 2048 [ 644.610057][T19056] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.7392: bad orphan inode 8192 [ 644.620506][T19056] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 644.634337][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.641609][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.648799][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.655926][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.663303][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.670519][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.677695][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.684975][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.692193][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.699599][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.706806][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.714129][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.721454][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.721691][ T385] usb 5-1: USB disconnect, device number 3 [ 644.728780][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.728804][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.728823][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.728842][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.728861][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.728902][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.778572][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.789449][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.799165][ T337] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 644.808024][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.816508][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.823996][ T337] usb 1-1: config 0 descriptor?? [ 644.829088][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.836955][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.844409][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.851955][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.859338][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.866558][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.874613][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.881857][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.890034][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.898240][ T329] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 644.901045][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.913051][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.920587][ T445] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 644.930273][ T445] hid-generic 0000:0000:0000.0145: hidraw0: HID v0.00 Device [syz0] on syz0 [ 645.145395][T19085] loop2: detected capacity change from 0 to 40427 [ 645.184211][T19089] loop3: detected capacity change from 0 to 40427 [ 645.228672][T19089] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 645.235698][T19089] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 645.244014][T19089] F2FS-fs (loop3): fault_injection options not supported [ 645.251246][T19089] F2FS-fs (loop3): fault_type options not supported [ 645.258926][T19089] F2FS-fs (loop3): invalid crc value [ 645.265716][T19089] F2FS-fs (loop3): Found nat_bits in checkpoint [ 645.271873][ T329] usb 2-1: config 0 has no interfaces? [ 645.281577][ T329] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 645.305448][T19089] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 645.312379][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.312395][T19089] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 645.331103][ T329] usb 2-1: config 0 descriptor?? [ 645.333583][T19089] attempt to access beyond end of device [ 645.333583][T19089] loop3: rw=2049, want=53256, limit=40427 [ 645.348709][T19089] attempt to access beyond end of device [ 645.348709][T19089] loop3: rw=2049, want=53264, limit=40427 [ 645.360429][T19089] attempt to access beyond end of device [ 645.360429][T19089] loop3: rw=2049, want=45104, limit=40427 [ 645.379577][ T337] hid-multitouch 0003:0EEF:72D0.0146: unknown main item tag 0x0 [ 645.398567][ T337] hid-multitouch 0003:0EEF:72D0.0146: unknown main item tag 0x0 [ 645.406292][ T337] hid-multitouch 0003:0EEF:72D0.0146: unknown main item tag 0x0 [ 645.413822][ T337] hid-multitouch 0003:0EEF:72D0.0146: unknown main item tag 0x0 [ 645.421279][ T337] hid-multitouch 0003:0EEF:72D0.0146: unknown main item tag 0x0 [ 645.438086][ T337] hid-multitouch 0003:0EEF:72D0.0146: hidraw1: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.0-1/input0 [ 645.491147][T19107] input: syz1 as /devices/virtual/input/input162 [ 645.506857][T19109] loop3: detected capacity change from 0 to 2048 [ 645.539972][T19109] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 645.553992][T19109] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 645.569662][T19109] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 645.582188][T19109] EXT4-fs (loop3): This should not happen!! Data will be lost [ 645.582188][T19109] [ 645.593973][ T445] usb 1-1: USB disconnect, device number 119 [ 645.594131][T19109] EXT4-fs (loop3): Total free blocks count 0 [ 645.605899][T19109] EXT4-fs (loop3): Free/Dirty block details [ 645.611966][T19109] EXT4-fs (loop3): free_blocks=2415919104 [ 645.617579][T19109] EXT4-fs (loop3): dirty_blocks=16 [ 645.622493][T19109] EXT4-fs (loop3): Block reservation details [ 645.628432][T19109] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 645.634693][T19114] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 645.646915][T19114] EXT4-fs (loop3): This should not happen!! Data will be lost [ 645.646915][T19114] [ 645.738265][ T337] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 645.882869][T19141] loop3: detected capacity change from 0 to 2048 [ 645.939815][T19141] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 646.098260][ T337] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.113331][ T337] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.116091][ T39] usb 2-1: USB disconnect, device number 4 [ 646.123270][ T337] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 646.141056][ T337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.207665][T19152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7430'. [ 646.301231][ T603] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 646.479016][T19175] loop0: detected capacity change from 0 to 128 [ 646.499791][T19179] loop2: detected capacity change from 0 to 512 [ 646.505035][T19175] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 646.516481][T19175] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 646.568176][ T603] usb 4-1: Using ep0 maxpacket: 16 [ 646.639953][ T337] logitech-hidpp-device 0003:046D:C086.0147: unknown main item tag 0x0 [ 646.648524][ T337] logitech-hidpp-device 0003:046D:C086.0147: unknown main item tag 0x0 [ 646.657231][ T337] logitech-hidpp-device 0003:046D:C086.0147: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 646.840149][ T26] usb 5-1: USB disconnect, device number 4 [ 646.848252][ T603] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 646.857185][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.864927][ T603] usb 4-1: Product: syz [ 646.868975][ T603] usb 4-1: Manufacturer: syz [ 646.873331][ T603] usb 4-1: SerialNumber: syz [ 646.878467][ T603] usb 4-1: config 0 descriptor?? [ 646.898401][ T39] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 646.918692][ T603] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 646.926270][ T603] usb 4-1: Detected FT232H [ 647.108204][ T329] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 647.128388][ T603] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 647.258958][ T39] usb 1-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 647.269480][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 647.318383][ T39] usb 1-1: string descriptor 0 read error: -71 [ 647.324434][ T39] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 647.333276][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 647.368228][ T39] usb 1-1: can't set config #1, error -71 [ 647.374273][ T39] usb 1-1: USB disconnect, device number 120 [ 647.388209][ T603] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 647.395984][ T603] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 647.404892][ T603] usb 4-1: USB disconnect, device number 122 [ 647.411801][ T603] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 647.421187][ T603] ftdi_sio 4-1:0.0: device disconnected [ 647.431297][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 647.431312][ T30] audit: type=1400 audit(1728985601.598:6924): avc: denied { map_create } for pid=19212 comm="syz.4.7458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 647.456512][ T30] audit: type=1400 audit(1728985601.598:6925): avc: denied { prog_load } for pid=19212 comm="syz.4.7458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 647.476690][ T329] usb 3-1: device descriptor read/all, error -71 [ 647.479105][ T30] audit: type=1400 audit(1728985601.598:6926): avc: denied { prog_load } for pid=19212 comm="syz.4.7458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 647.502293][ T30] audit: type=1400 audit(1728985601.598:6927): avc: denied { read write } for pid=19212 comm="syz.4.7458" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 647.780194][ T30] audit: type=1400 audit(1728985601.948:6928): avc: denied { read write } for pid=18593 comm="syz-executor" name="loop0" dev="devtmpfs" ino=2208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 647.803759][ T30] audit: type=1400 audit(1728985601.948:6929): avc: denied { name_bind } for pid=19214 comm="syz.0.7459" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 647.830013][ T30] audit: type=1400 audit(1728985601.978:6930): avc: denied { read write } for pid=18742 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 647.855864][ T30] audit: type=1400 audit(1728985601.988:6931): avc: denied { read write } for pid=18593 comm="syz-executor" name="loop0" dev="devtmpfs" ino=2208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 647.879580][ T30] audit: type=1400 audit(1728985601.988:6932): avc: denied { prog_load } for pid=19216 comm="syz.1.7460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 647.898709][ T30] audit: type=1400 audit(1728985601.998:6933): avc: denied { create } for pid=19216 comm="syz.1.7460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 649.468428][T19357] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=19357 comm=syz.2.7524 [ 651.914832][T19508] device syzkaller0 entered promiscuous mode [ 651.933834][T19510] tap0: tun_chr_ioctl cmd 1074025675 [ 651.939053][T19510] tap0: persist enabled [ 651.948763][T19510] tap0: tun_chr_ioctl cmd 1074025675 [ 651.953859][T19510] tap0: persist enabled [ 651.997486][T19522] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.004730][T19522] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.440721][ T30] kauditd_printk_skb: 740 callbacks suppressed [ 652.440739][ T30] audit: type=1400 audit(1728985606.608:7674): avc: denied { read write } for pid=18910 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 652.471105][ T30] audit: type=1400 audit(1728985606.608:7675): avc: denied { name_bind } for pid=19611 comm="syz.4.7643" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 652.493145][ T30] audit: type=1400 audit(1728985606.608:7676): avc: denied { create } for pid=19611 comm="syz.4.7643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=0 [ 652.513855][ T30] audit: type=1400 audit(1728985606.608:7677): avc: denied { create } for pid=19611 comm="syz.4.7643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=0 [ 652.534519][ T30] audit: type=1400 audit(1728985606.638:7678): avc: denied { read write } for pid=18910 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 652.559451][ T30] audit: type=1400 audit(1728985606.638:7679): avc: denied { prog_load } for pid=19613 comm="syz.4.7644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 652.578662][ T30] audit: type=1400 audit(1728985606.638:7680): avc: denied { read write } for pid=19613 comm="syz.4.7644" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 652.602649][ T30] audit: type=1400 audit(1728985606.658:7681): avc: denied { read write } for pid=18910 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 652.627528][ T30] audit: type=1400 audit(1728985606.658:7682): avc: denied { read } for pid=19615 comm="syz.4.7645" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 652.651154][ T30] audit: type=1400 audit(1728985606.658:7683): avc: denied { read write } for pid=18910 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 654.256680][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 656.328200][ T26] Bluetooth: hci0: command 0x1003 tx timeout [ 656.334050][ T772] Bluetooth: hci0: sending frame failed (-49) [ 658.181988][ T30] kauditd_printk_skb: 409 callbacks suppressed [ 658.182002][ T30] audit: type=1400 audit(1728985612.348:8093): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 658.210055][ T30] audit: type=1400 audit(1728985612.378:8094): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 658.408610][ T329] Bluetooth: hci0: command 0x1001 tx timeout [ 658.414495][ T772] Bluetooth: hci0: sending frame failed (-49) [ 659.183053][ T30] audit: type=1400 audit(1728985613.348:8095): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 659.205724][ T30] audit: type=1400 audit(1728985613.378:8096): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 659.838775][ T317] device bridge_slave_1 left promiscuous mode [ 659.844717][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.851965][ T317] device bridge_slave_0 left promiscuous mode [ 659.857945][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.865824][ T317] device veth1_macvtap left promiscuous mode [ 659.871670][ T317] device veth0_vlan left promiscuous mode [ 660.184804][ T30] audit: type=1400 audit(1728985614.348:8097): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 660.206534][ T30] audit: type=1400 audit(1728985614.348:8098): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 660.488241][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 661.185869][ T30] audit: type=1400 audit(1728985615.358:8099): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 661.208020][ T30] audit: type=1400 audit(1728985615.378:8100): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 662.187363][ T30] audit: type=1400 audit(1728985616.348:8101): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 662.209277][ T30] audit: type=1400 audit(1728985616.348:8102): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 662.241240][T19834] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 663.048916][ T317] device bridge_slave_1 left promiscuous mode [ 663.054961][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.062318][ T317] device bridge_slave_0 left promiscuous mode [ 663.068329][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.075820][ T317] device veth1_macvtap left promiscuous mode [ 663.081637][ T317] device veth0_vlan left promiscuous mode [ 663.189202][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 663.189221][ T30] audit: type=1400 audit(1728985617.358:8135): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 663.223392][ T30] audit: type=1400 audit(1728985617.388:8136): avc: denied { create } for pid=19857 comm="syz.0.7753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 663.243069][ T30] audit: type=1400 audit(1728985617.388:8137): avc: denied { map_create } for pid=19856 comm="syz.1.7754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 663.262166][ T30] audit: type=1400 audit(1728985617.398:8138): avc: denied { prog_load } for pid=19856 comm="syz.1.7754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 663.281286][ T30] audit: type=1400 audit(1728985617.398:8139): avc: denied { execmem } for pid=19855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 663.300782][ T30] audit: type=1400 audit(1728985617.398:8140): avc: denied { map_create } for pid=19859 comm="syz.2.7755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 663.320030][ T30] audit: type=1400 audit(1728985617.398:8141): avc: denied { prog_load } for pid=19859 comm="syz.2.7755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 663.339335][ T30] audit: type=1400 audit(1728985617.398:8142): avc: denied { prog_load } for pid=19859 comm="syz.2.7755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 663.358310][ T30] audit: type=1400 audit(1728985617.398:8143): avc: denied { map_create } for pid=19859 comm="syz.2.7755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 663.377643][ T30] audit: type=1400 audit(1728985617.408:8144): avc: denied { read write } for pid=17414 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=3 req=7743 state=1 status=67 (errno 9: Bad file descriptor) [ 664.996771][T19935] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.003770][T19935] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.011291][T19935] device bridge_slave_0 entered promiscuous mode [ 665.019848][T19935] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.026669][T19935] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.033931][T19935] device bridge_slave_1 entered promiscuous mode [ 665.071749][T19935] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.078615][T19935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.085803][T19935] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.092615][T19935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.111922][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 665.119329][ T2730] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.126365][ T2730] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.135600][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 665.143810][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.150640][ T2730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.160844][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 665.168865][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.175689][ T2730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.187345][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 665.198683][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 665.212190][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 665.225585][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 665.233396][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 665.240595][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 665.249239][T19935] device veth0_vlan entered promiscuous mode [ 665.260268][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 665.269590][T19935] device veth1_macvtap entered promiscuous mode [ 665.278702][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 665.288491][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 665.299873][ T317] device bridge_slave_1 left promiscuous mode [ 665.305798][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.313503][ T317] device bridge_slave_0 left promiscuous mode [ 665.319974][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.327630][ T317] device veth1_macvtap left promiscuous mode [ 665.333506][ T317] device veth0_vlan left promiscuous mode [ 666.369290][ T317] device bridge_slave_1 left promiscuous mode [ 666.375224][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.382444][ T317] device bridge_slave_0 left promiscuous mode [ 666.388402][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.395791][ T317] device bridge_slave_1 left promiscuous mode [ 666.401871][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.408925][ T317] device bridge_slave_0 left promiscuous mode [ 666.414919][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.422485][ T317] device bridge_slave_1 left promiscuous mode [ 666.428459][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.435523][ T317] device bridge_slave_0 left promiscuous mode [ 666.441520][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.449204][ T317] device bridge_slave_1 left promiscuous mode [ 666.455097][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.462340][ T317] device bridge_slave_0 left promiscuous mode [ 666.468443][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.476393][ T317] device veth1_macvtap left promiscuous mode [ 666.482220][ T317] device veth0_vlan left promiscuous mode [ 666.488065][ T317] device veth1_macvtap left promiscuous mode [ 666.493921][ T317] device veth0_vlan left promiscuous mode [ 666.499720][ T317] device veth1_macvtap left promiscuous mode [ 666.505718][ T317] device veth1_macvtap left promiscuous mode [ 666.511753][ T317] device veth0_vlan left promiscuous mode