last executing test programs: 3.910422881s ago: executing program 0 (id=963): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@jqfmt_vfsv0}]}, 0x1, 0x4c4, &(0x7f00000000c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/872], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r2, 0x407, 0x8900003) write$eventfd(r2, &(0x7f0000000000), 0x8) 3.331619104s ago: executing program 0 (id=970): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0xffffffffffffff37, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xb}, 0x0}, 0x0) 2.962882568s ago: executing program 1 (id=982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100040e, &(0x7f0000000280)={[{@noload}, {@mblk_io_submit}, {@lazytime}, {@nogrpid}, {@block_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x3ed}}]}, 0x3, 0x449, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r1, 0xee72) lseek(r0, 0x10004e9, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000340)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) 2.783607664s ago: executing program 1 (id=984): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000019006c798af8ff0000000100a200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800003c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.736363728s ago: executing program 1 (id=985): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.009621925s ago: executing program 3 (id=994): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x365, &(0x7f0000000b00)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc, 0x0, 0x0, 0x0, @void, @value}, 0x20) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 1.893960056s ago: executing program 1 (id=995): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000040)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 1.846878021s ago: executing program 3 (id=996): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000003c0), 0x12) write$cgroup_pid(r1, &(0x7f00000001c0), 0x74) 1.782345766s ago: executing program 3 (id=997): socket$unix(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 1.772822127s ago: executing program 1 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.754656179s ago: executing program 3 (id=999): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r1, r0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) finit_module(r1, 0x0, 0x0) 1.752385639s ago: executing program 1 (id=1000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @timestamp, @window], 0x21a5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 1.649536329s ago: executing program 3 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'vlan0\x00', 0x400}) 1.348393526s ago: executing program 4 (id=1005): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1004400, &(0x7f0000001940), 0x6, 0x588, &(0x7f0000000300)="$eJzs3U1sHFcdAPD/TOzsOnGaFHooCGgohYCirmOnjapeWi5IUFUgFU49pNZ6Y0VeZyPvutTGB+fEgSsSlTjBhQsnDpU4IPWEuHKDG5dyQCooAtVICE014914d7ObbOOPiePfTxrte/P1f2/kfeN5szMvgBPrYkRsR8TpiHgnIs5HUsxPulO8vjvl631yd6u+c3ernkSWvfWvqe4etuq99XvORsRPR8Sq9KXbG5sri81mY62bn+us3p5rb2y+eHN1cbmx3Li1sHBt/tqVV66+vHBgdX1u9Xcff+fmGz/6w++//NGft7/1k7zMr3WX5XXrWzXJsmz/AV/rHZfpmO3OSiMiP3Jv7H/vj4VT3fqcLrsgPJL87/FzEfF8N31PtbwyAQCHK8vOR3a+P78nHchlWTJiHQDg+Mmv+WcjSWvd6//ZSNNarejDqz4TZ9Jmq925fKO1fivpdfFNpzduNhtXir7CiEpMJ3l+PiIuFNNufmEofzUino6In1dminyt3moulfIfDwBwduj8/59Kfv6vTLKpOwQAcJw5kwPAyXP/+X+6lHIAAEfH9T8AnDx95/+J7vwDAMdfdejZ/5Gy5EjKAgAcjZH9/2+f20s/mwy94gsAOO7c/weAE+UHb76ZT9lOlhTvv156d2N9pfXui0uN9kptdb1eq7fWbteWW63l4p09qyN2cac/02y1bs+/FOvvzXUa7c5ce2Pz+mpr/VbnevFe7+sNDxYAQPmefu7DvyYRsf3qTDFFbyyHh/8gADjm0oiZsssAlONU2QUASjNVdgGA0uiPBx72496RPxGaiYj3x2+jYwEeb5e+MKb/f/h/g8H7Af8/gNGxgZJ1v9a6AeAE2l//v94DOM4efOL3YBA8ybIsMZ4/AJwwE1zB+4kgPOEe6f4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnHCzxZSkte5Y4LORprVaxLmIuBDTyY2bzcaViHgqIv5Sma7k+fmyCw0A7FP6j6Q7/tel8y/MDi89nfy3UnxGxI9/+dYv3lvs9IYOvDe/834xv7O2MDJA5fDrAAD0mRqe0TtPF599F/Kf3N2q96ajLODH396Lv3N3q743HvFUt/DVyOed+XcyUJnkgAYm3r4TEc8O1z+9t/xCd+TT4fh57HOHFj+KGs4OxB/8Nyotlu1+5sfi8zMTxjuAMsOT4sO8/Xl91PcvjYvFZ/f7NzXYmFbjZ/c3ro+gaP+qETvZbvu30xc/3//3z1WLtmZU+3dx0hgv/fG7Y5fdOZV9cSqiF3unr/3ZVS1So+K/MGH8v33pK8+PO1jZryIuxYPi76bmOqu359obm7/93gd/Wm4sN24tLFybv3bllasvL8wVfdRzvZ7q+/3z1ctPja9/xJkx8asPqf/XJ6z/r//3zttffUD8b35tVPw0nnlA/Pyc+I1Ymyj+4pkPxg7fncdfGlP/qYH4pwe2y+ddHt7ZmD/Ij/6+uTRRQQGAI9He2FxZbDYba5Mk0thcWexdaE681UBi5pG2mjARh7bn0YnpgYNQPaxYZ8cs+s1n3uF0HOnxObDEnc+wcqWcop6KZq8/6qErd9fb3k/QLNtHmS9OsE5JDRJwZPa+9GWXBAAAAAAAAAAAAAAAGKf9w+4r/w74oaj+h+HKriMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPrk8DAAD//xa4xxY=") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002000128008000100736974001400028008000200"], 0x40}}, 0x0) 1.286302502s ago: executing program 0 (id=1006): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r1, 0x1f) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 1.135030896s ago: executing program 4 (id=1009): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x20) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000018c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000008c0)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x28, 0x0, 0x1040400}}, 0x50) clock_gettime(0xffffffc6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) fstat(r2, 0x0) 1.08679289s ago: executing program 4 (id=1011): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) writev(r1, &(0x7f0000000940)=[{&(0x7f0000000080)='?', 0x1}, {&(0x7f0000000700)="61029310d163f14cfd225d4fced8600166da153b83d56c63c0725e4a576d1cc9ee9b21d640dc6927", 0x28}, {&(0x7f0000000740)="de977e94495f3fd26ec26a6c30bfd65f4d0e6105416246fc079cabf6", 0x1c}], 0x3) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x0) 1.077445931s ago: executing program 0 (id=1012): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xc, &(0x7f0000001440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 1.061836652s ago: executing program 4 (id=1013): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x2, 0x56) 904.314907ms ago: executing program 0 (id=1014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 772.887209ms ago: executing program 0 (id=1017): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000020100102505a1a4400000000001090244000101000000090400001602020000052406000005240000000d240f01060000000000000000090581032000000000090582020800000000090503020002"], 0x0) 772.673329ms ago: executing program 4 (id=1018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 488.008655ms ago: executing program 2 (id=1019): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100040e, &(0x7f0000000280)={[{@noload}, {@mblk_io_submit}, {@lazytime}, {@nogrpid}, {@block_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x3ed}}]}, 0x3, 0x449, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r1, 0xee72) lseek(r0, 0x10004e9, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000340)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) 426.02487ms ago: executing program 4 (id=1020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 391.858374ms ago: executing program 3 (id=1002): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) read(r3, &(0x7f0000000140)=""/199, 0xc7) 293.214683ms ago: executing program 2 (id=1022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r1, 0x1f) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 173.268434ms ago: executing program 2 (id=1023): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x20) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000018c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000008c0)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x28, 0x0, 0x1040400}}, 0x50) clock_gettime(0xffffffc6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) fstat(r2, 0x0) 112.096309ms ago: executing program 2 (id=1024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, r0) 91.780511ms ago: executing program 2 (id=1025): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xc, &(0x7f0000001440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 0s ago: executing program 2 (id=1026): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x2, 0x56) kernel console output (not intermixed with test programs): B device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.556133][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.563986][ T326] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 73.564966][ T19] usb 5-1: config 0 descriptor?? [ 73.577799][ T326] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 73.585708][ T326] usb 3-1: Product: syz [ 73.589633][ T326] usb 3-1: SerialNumber: syz [ 73.594834][ T326] usb 3-1: config 0 descriptor?? [ 73.601475][ T2014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.609859][ T2014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.617526][ T2008] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.822598][ T39] usb 2-1: USB disconnect, device number 8 [ 73.880970][ T326] usb 3-1: invalid MIDI in EP 0 [ 73.887769][ T326] snd-usb-audio: probe of 3-1:0.2 failed with error -22 [ 73.895469][ T326] usb 3-1: USB disconnect, device number 9 [ 73.903513][ T1588] udevd[1588]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.947499][ T295] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 73.954969][ T295] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input13 [ 73.964995][ T28] audit: type=1400 audit(1728017080.487:311): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=567 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.987084][ T28] audit: type=1400 audit(1728017080.487:312): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=567 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.010312][ T28] audit: type=1400 audit(1728017080.487:313): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=567 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.039640][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0010/input/input15 [ 74.157913][ T19] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 74.179135][ T39] usb 1-1: USB disconnect, device number 11 [ 74.252592][ T299] usb 5-1: USB disconnect, device number 11 [ 74.322215][ T2018] loop1: detected capacity change from 0 to 512 [ 74.337911][ T2018] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.656: bad orphan inode 17 [ 74.348362][ T2018] ext4_test_bit(bit=16, block=4) = 1 [ 74.353586][ T2018] is_bad_inode(inode)=0 [ 74.357489][ T2018] NEXT_ORPHAN(inode)=0 [ 74.362008][ T2018] max_ino=32 [ 74.365028][ T2018] i_nlink=1 [ 74.368094][ T2018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.385510][ T2018] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.656: bg 0: block 7: invalid block bitmap [ 74.409603][ T1029] EXT4-fs (loop1): unmounting filesystem. [ 74.460840][ T2027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.658'. [ 74.477906][ T2027] tipc: Invalid UDP bearer configuration [ 74.477933][ T2027] tipc: Enabling of bearer rejected, failed to enable media [ 74.525575][ T2030] loop1: detected capacity change from 0 to 512 [ 74.546522][ T2030] EXT4-fs (loop1): 1 orphan inode deleted [ 74.552120][ T2030] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.561151][ T2030] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038 (0x7fffffff) [ 74.584896][ T1029] EXT4-fs (loop1): unmounting filesystem. [ 74.678846][ T2039] ------------[ cut here ]------------ [ 74.684186][ T2039] WARNING: CPU: 1 PID: 2039 at mm/page_alloc.c:5690 __alloc_pages+0xc0/0x780 [ 74.692800][ T2039] Modules linked in: [ 74.696455][ T2039] CPU: 1 PID: 2039 Comm: syz.1.663 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 74.706105][ T2039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 74.716105][ T2039] RIP: 0010:__alloc_pages+0xc0/0x780 [ 74.721396][ T2039] Code: 0b 72 13 44 89 e8 25 00 20 00 00 75 09 80 3d 8b 91 d7 05 00 74 0d 83 fb 0a 76 16 45 31 e4 e9 4e 03 00 00 c6 05 75 91 d7 05 01 <0f> 0b 83 fb 0a 77 ea 89 1c 24 44 23 2d 57 be da 05 65 48 8b 05 27 [ 74.740886][ T2039] RSP: 0018:ffffc90003fb7a40 EFLAGS: 00010246 [ 74.746731][ T2039] RAX: 0000000000000000 RBX: 000000000000001a RCX: 0000000000000000 [ 74.754564][ T2039] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90003fb7ae8 [ 74.762350][ T2039] RBP: ffffc90003fb7b78 R08: dffffc0000000000 R09: ffffc90003fb7ad0 [ 74.770177][ T2039] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 74.778190][ T2039] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff920007f6f54 [ 74.785964][ T2039] FS: 00007f94f79146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 74.794757][ T2039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.801189][ T2039] CR2: 0000001b2c41bff8 CR3: 0000000122c50000 CR4: 00000000003506a0 [ 74.809022][ T2039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.816895][ T2039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.824806][ T2039] Call Trace: [ 74.827959][ T2039] [ 74.830708][ T2039] ? show_regs+0x58/0x60 [ 74.834783][ T2039] ? __warn+0x160/0x3d0 [ 74.838797][ T2039] ? __alloc_pages+0xc0/0x780 [ 74.843297][ T2039] ? report_bug+0x4d5/0x7d0 [ 74.847661][ T2039] ? __alloc_pages+0xc0/0x780 [ 74.852157][ T2039] ? handle_bug+0x41/0x70 [ 74.856339][ T2039] ? exc_invalid_op+0x1b/0x50 [ 74.860831][ T2039] ? asm_exc_invalid_op+0x1b/0x20 [ 74.865719][ T2039] ? __alloc_pages+0xc0/0x780 [ 74.870199][ T2039] ? do_vfs_ioctl+0xba7/0x29a0 [ 74.874799][ T2039] ? prep_new_page+0x110/0x110 [ 74.879431][ T2039] __kmalloc_large_node+0x9e/0x1b0 [ 74.884401][ T2039] ? ioctl_has_perm+0x1f8/0x560 [ 74.889056][ T2039] ? input_mt_init_slots+0xcf/0xa50 [ 74.894067][ T2039] __kmalloc+0xef/0x1e0 [ 74.898082][ T2039] ? ioctl_has_perm+0x3f0/0x560 [ 74.902746][ T2039] input_mt_init_slots+0xcf/0xa50 [ 74.907629][ T2039] ? mutex_lock_interruptible+0xb1/0x1e0 [ 74.913073][ T2039] uinput_create_device+0x522/0x630 [ 74.918142][ T2039] uinput_ioctl_handler+0xa63/0x16a0 [ 74.923229][ T2039] ? selinux_file_ioctl+0x3cc/0x540 [ 74.928292][ T2039] ? uinput_release+0x50/0x50 [ 74.932778][ T2039] ? __fget_files+0x2cb/0x330 [ 74.932979][ T299] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 74.937315][ T2039] uinput_ioctl+0x28/0x30 [ 74.948836][ T2039] ? uinput_poll+0x120/0x120 [ 74.953370][ T2039] __se_sys_ioctl+0x114/0x190 [ 74.957858][ T2039] __x64_sys_ioctl+0x7b/0x90 [ 74.962319][ T2039] x64_sys_call+0x98/0x9a0 [ 74.966683][ T2039] do_syscall_64+0x3b/0xb0 [ 74.970882][ T2039] ? clear_bhb_loop+0x55/0xb0 [ 74.975585][ T2039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.981269][ T2039] RIP: 0033:0x7f94f6b7dff9 [ 74.985556][ T2039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.005078][ T2039] RSP: 002b:00007f94f7914038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.013331][ T2039] RAX: ffffffffffffffda RBX: 00007f94f6d35f80 RCX: 00007f94f6b7dff9 [ 75.021383][ T2039] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 75.029186][ T2039] RBP: 00007f94f6bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 75.037008][ T2039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.044813][ T2039] R13: 0000000000000000 R14: 00007f94f6d35f80 R15: 00007ffc6d9698f8 [ 75.052777][ T2039] [ 75.055559][ T2039] ---[ end trace 0000000000000000 ]--- [ 75.077048][ T2048] loop1: detected capacity change from 0 to 256 [ 75.086341][ T2048] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 75.088542][ T314] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 75.098923][ T2048] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 75.120574][ T28] audit: type=1400 audit(1728017081.687:314): avc: denied { read } for pid=2047 comm="syz.1.667" name="file1" dev="loop1" ino=1048695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.142878][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.146846][ T1246] Bluetooth: hci1: command 0x1003 tx timeout [ 75.148812][ T1245] Bluetooth: hci0: command 0x1003 tx timeout [ 75.154614][ T1320] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 75.165562][ T28] audit: type=1400 audit(1728017081.687:315): avc: denied { mounton } for pid=2047 comm="syz.1.667" path="/95/file2/bus" dev="loop1" ino=1048696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.173392][ T1029] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 75.198787][ T1029] exFAT-fs (loop1): Filesystem has been set read-only [ 75.205414][ T1029] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 75.331464][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.352521][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.375587][ T299] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 75.384641][ T299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.396572][ T299] usb 1-1: config 0 descriptor?? [ 75.429465][ T28] audit: type=1400 audit(1728017082.006:316): avc: denied { ioctl } for pid=2060 comm="syz.3.672" path="/dev/rtc0" dev="devtmpfs" ino=171 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.467788][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.481267][ T314] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 75.492478][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.494777][ T2064] loop3: detected capacity change from 0 to 512 [ 75.501236][ T314] usb 5-1: config 0 descriptor?? [ 75.513308][ T2064] EXT4-fs: Ignoring removed bh option [ 75.531215][ T2064] EXT4-fs error (device loop3): __ext4_iget:5046: inode #15: block 1803188595: comm syz.3.673: invalid block [ 75.542766][ T2064] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.673: couldn't read orphan inode 15 (err -117) [ 75.556927][ T2064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.565854][ T2062] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.575496][ T2062] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.582790][ T2062] device bridge_slave_0 entered promiscuous mode [ 75.599143][ T2062] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.606390][ T2062] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.613876][ T2062] device bridge_slave_1 entered promiscuous mode [ 75.722136][ T2075] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 75.743192][ T2062] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.750047][ T2062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.757357][ T2062] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.764209][ T2062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.804158][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.815387][ T641] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.825077][ T2069] EXT4-fs (loop3): unmounting filesystem. [ 75.831621][ T641] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.860140][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.868978][ T299] hid (null): bogus close delimiter [ 75.875255][ T641] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.882129][ T641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.891960][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.903814][ T641] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.910787][ T641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.919037][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.926829][ T28] audit: type=1400 audit(1728017082.507:317): avc: denied { lock } for pid=2081 comm="syz.2.683" path="socket:[27967]" dev="sockfs" ino=27967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 75.956191][ T404] device bridge_slave_1 left promiscuous mode [ 75.962525][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.969847][ T404] device bridge_slave_0 left promiscuous mode [ 75.975757][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.006090][ T314] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 76.016105][ T314] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0012/input/input17 [ 76.048174][ T2062] device veth0_vlan entered promiscuous mode [ 76.054872][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.063089][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.071399][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.078723][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.086480][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.096289][ T314] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 76.133137][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.144588][ T2062] device veth1_macvtap entered promiscuous mode [ 76.162951][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.176306][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.220920][ T2045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.222246][ T2083] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.236092][ T2083] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.243678][ T2083] device bridge_slave_0 entered promiscuous mode [ 76.248624][ T2045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.258838][ T2083] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.266611][ T2083] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.273999][ T2083] device bridge_slave_1 entered promiscuous mode [ 76.346321][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.353568][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.362618][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.370917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.379155][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.386003][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.394473][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.401988][ T404] tipc: Left network mode [ 76.407444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.415504][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.423529][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.430375][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.451374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.459750][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.467580][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.475453][ T295] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 76.482195][ T2083] device veth0_vlan entered promiscuous mode [ 76.491103][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.499087][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.499336][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.507264][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.517144][ T299] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0011/input/input18 [ 76.535020][ T299] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0011/input/input19 [ 76.548273][ T299] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0011/input/input20 [ 76.549364][ T2083] device veth1_macvtap entered promiscuous mode [ 76.562334][ T299] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0011/input/input21 [ 76.572733][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.588267][ T299] uclogic 0003:256C:006D.0011: input,hiddev96,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 76.604116][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.731410][ T295] usb 2-1: Using ep0 maxpacket: 32 [ 76.742408][ T313] usb 1-1: USB disconnect, device number 12 [ 76.812986][ T2093] loop3: detected capacity change from 0 to 40427 [ 76.823289][ T2093] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 76.831196][ T2093] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 76.857201][ T2093] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.902774][ T2093] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 76.910604][ T2093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 76.961779][ T2083] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 76.961802][ T2083] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 76.975074][ T404] device bridge_slave_1 left promiscuous mode [ 76.988591][ T2083] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 76.988628][ T2083] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 76.996104][ T2083] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.004331][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.021036][ T2083] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.021055][ T2083] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.026364][ T295] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 77.046569][ T404] device bridge_slave_0 left promiscuous mode [ 77.052052][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.055810][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.061775][ T295] usb 2-1: Product: syz [ 77.068162][ T28] audit: type=1400 audit(1728017083.679:318): avc: denied { rmdir } for pid=2083 comm="syz-executor" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.071657][ T295] usb 2-1: Manufacturer: syz [ 77.097710][ T295] usb 2-1: SerialNumber: syz [ 77.103306][ T404] device veth1_macvtap left promiscuous mode [ 77.109438][ T404] device veth0_vlan left promiscuous mode [ 77.110535][ T39] usb 5-1: USB disconnect, device number 12 [ 77.122363][ T295] usb 2-1: config 0 descriptor?? [ 77.496536][ T28] audit: type=1400 audit(1728017084.105:319): avc: denied { connect } for pid=2148 comm="syz.3.704" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.558199][ T641] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 77.735747][ T314] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 77.826948][ T295] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 77.886860][ T28] audit: type=1400 audit(1728017084.510:320): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 77.917238][ T28] audit: type=1400 audit(1728017084.541:321): avc: denied { getattr } for pid=2165 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=309 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.923519][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.950826][ T28] audit: type=1400 audit(1728017084.571:322): avc: denied { read } for pid=2167 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=309 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.954583][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.979871][ T28] audit: type=1400 audit(1728017084.601:323): avc: denied { open } for pid=2167 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=309 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.989981][ T641] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.029348][ T641] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 78.042364][ T295] usb 2-1: USB disconnect, device number 9 [ 78.046828][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.061313][ T641] usb 1-1: config 0 descriptor?? [ 78.140836][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.152943][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.162563][ T314] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 78.171400][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.179729][ T314] usb 3-1: config 0 descriptor?? [ 78.219719][ T19] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 78.330916][ T2192] loop3: detected capacity change from 0 to 512 [ 78.350374][ T2192] EXT4-fs (loop3): 1 orphan inode deleted [ 78.355940][ T2192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.365737][ T2192] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 78.385442][ T2083] EXT4-fs (loop3): unmounting filesystem. [ 78.537247][ T641] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 78.544285][ T641] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 78.551485][ T641] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 78.558560][ T641] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 78.565538][ T641] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 78.579743][ T641] prodikeys 0003:041E:2801.0013: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 78.591452][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.602454][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.617245][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.629940][ T19] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 78.639132][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.647723][ T19] usb 5-1: config 0 descriptor?? [ 78.658735][ T314] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0014/input/input22 [ 78.670889][ T314] sony 0003:054C:03D5.0014: input,hidraw1: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 78.811141][ T314] usb 1-1: USB disconnect, device number 13 [ 78.853335][ T313] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 78.918265][ T641] usb 3-1: USB disconnect, device number 10 [ 83.528969][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 83.528984][ T28] audit: type=1400 audit(1728017090.185:328): avc: denied { wake_alarm } for pid=2206 comm="syz.1.715" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.778377][ T19] usbhid 5-1:0.0: can't add hid device: -32 [ 83.784243][ T19] usbhid: probe of 5-1:0.0 failed with error -32 [ 85.732099][ T39] usb 5-1: USB disconnect, device number 13 [ 85.773031][ T2224] loop0: detected capacity change from 0 to 512 [ 85.814512][ T2224] EXT4-fs (loop0): 1 truncate cleaned up [ 85.820171][ T2224] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 85.865364][ T2238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.726'. [ 85.899962][ T2224] EXT4-fs warning (device loop0): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 85.903507][ T2242] loop1: detected capacity change from 0 to 2048 [ 85.934174][ T1628] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 85.955650][ T28] audit: type=1400 audit(1728017092.620:329): avc: denied { mounton } for pid=2240 comm="syz.1.727" path="/5/file0/file0" dev="loop1" ino=1048705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 85.980001][ T1628] EXT4-fs (loop0): Remounting filesystem read-only [ 86.003387][ T1628] EXT4-fs (loop0): unmounting filesystem. [ 86.009561][ T28] audit: type=1400 audit(1728017092.620:330): avc: denied { mount } for pid=2240 comm="syz.1.727" name="/" dev="configfs" ino=13654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 86.047007][ T28] audit: type=1400 audit(1728017092.620:331): avc: denied { mounton } for pid=2240 comm="syz.1.727" path="/" dev="configfs" ino=13654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.071197][ T28] audit: type=1400 audit(1728017092.640:332): avc: denied { unmount } for pid=2062 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 86.154437][ T39] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 86.323317][ T28] audit: type=1400 audit(1728017092.980:333): avc: denied { mounton } for pid=2249 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 86.414102][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 86.443283][ T2249] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.463522][ T2249] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.479830][ T2249] device bridge_slave_0 entered promiscuous mode [ 86.508452][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.526242][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.533453][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.540897][ T39] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 86.555169][ T2249] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.562011][ T2249] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.572491][ T39] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 86.585304][ T2249] device bridge_slave_1 entered promiscuous mode [ 86.602921][ T39] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 86.615561][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.622806][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.644338][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.651563][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.658980][ T39] usb 5-1: config 250 has no interface number 0 [ 86.673318][ T39] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 86.684937][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.692160][ T39] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 86.705603][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.717178][ T39] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 86.727644][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.735125][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.742782][ T39] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 86.758350][ T8] device bridge_slave_1 left promiscuous mode [ 86.764469][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.769543][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.779243][ T8] device bridge_slave_0 left promiscuous mode [ 86.784745][ T39] usb 5-1: config 250 interface 228 has no altsetting 0 [ 86.791949][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.793733][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.807352][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.813774][ T8] device veth1_macvtap left promiscuous mode [ 86.820651][ T8] device veth0_vlan left promiscuous mode [ 86.826302][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.843653][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.860339][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.877937][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.891523][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.904008][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.921434][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.928901][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.936264][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.943651][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 86.952618][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.964526][ T39] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 86.976639][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 86.987635][ T39] usb 5-1: Product: syz [ 86.991614][ T39] usb 5-1: SerialNumber: syz [ 86.996669][ T2255] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.003553][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 87.003599][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 87.016931][ T2255] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.023484][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 87.031551][ T2255] device bridge_slave_0 entered promiscuous mode [ 87.038642][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 87.051459][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 87.053205][ T2255] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.065605][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 87.072728][ T2255] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.074053][ T39] hub 5-1:250.228: bad descriptor, ignoring hub [ 87.085294][ T2255] device bridge_slave_1 entered promiscuous mode [ 87.091902][ T326] hid-generic 0000:04AD:0000.0015: unknown main item tag 0x0 [ 87.098078][ T2249] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.099242][ T39] hub: probe of 5-1:250.228 failed with error -5 [ 87.105884][ T2249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.119161][ T2249] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.122794][ T326] hid-generic 0000:04AD:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.126030][ T2249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.135542][ T313] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 87.167340][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.174583][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.263804][ T28] audit: type=1400 audit(1728017093.931:334): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.296091][ T2268] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 87.312634][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.314154][ T39] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 87.322495][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.338699][ T28] audit: type=1400 audit(1728017093.961:335): avc: denied { setattr } for pid=2267 comm="syz.2.737" name="work" dev="incremental-fs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.348659][ T2268] overlayfs: failed to resolve './file0': -2 [ 87.373459][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.387372][ T2269] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 87.391702][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.410372][ T2269] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 87.420583][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.427447][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.433125][ T2269] overlayfs: failed to resolve './file0': -2 [ 87.442864][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.458692][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.473299][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.480170][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.513088][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.531099][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.539344][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.548277][ T28] audit: type=1400 audit(1728017094.211:336): avc: denied { read write } for pid=2219 comm="syz.4.718" name="lp0" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 87.557327][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.572139][ T28] audit: type=1400 audit(1728017094.231:337): avc: denied { open } for pid=2219 comm="syz.4.718" path="/dev/usb/lp0" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 87.620464][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.629615][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.652220][ T2249] device veth0_vlan entered promiscuous mode [ 87.659443][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.668668][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.686783][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.697294][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.707368][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.714235][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.722269][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.730106][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.753354][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.760953][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.768297][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.775984][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.784968][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.793125][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.799967][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.807519][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.815526][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.825283][ T2249] device veth1_macvtap entered promiscuous mode [ 87.854320][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.864425][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.881966][ T2276] loop2: detected capacity change from 0 to 2048 [ 87.890339][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.916892][ T2255] device veth0_vlan entered promiscuous mode [ 87.928980][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.938539][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.950401][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.957914][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.965503][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.973889][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.982045][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.984128][ T2276] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.990769][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.021691][ T2255] device veth1_macvtap entered promiscuous mode [ 88.028047][ T2276] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 88.043017][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.070585][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.090658][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.139442][ T2276] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.740: Invalid inode table block 0 in block_group 0 [ 88.165335][ T2276] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 88.186506][ T2276] EXT4-fs error (device loop2): ext4_setattr:5552: inode #13: comm syz.2.740: mark_inode_dirty error [ 88.207452][ T2276] EXT4-fs error (device loop2) in ext4_setattr:5613: Corrupt filesystem [ 88.230812][ T1994] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 88.259530][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 88.277599][ T1994] EXT4-fs (loop2): unmounting filesystem. [ 88.342490][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 88.359192][ T2291] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 88.384708][ T8] device bridge_slave_1 left promiscuous mode [ 88.390653][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.402977][ T8] device bridge_slave_0 left promiscuous mode [ 88.411184][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.423171][ T8] device veth1_macvtap left promiscuous mode [ 88.429005][ T8] device veth0_vlan left promiscuous mode [ 88.556682][ T2295] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.563671][ T2295] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.570820][ T2295] device bridge_slave_0 entered promiscuous mode [ 88.577725][ T2295] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.584862][ T2295] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.592094][ T2295] device bridge_slave_1 entered promiscuous mode [ 88.602360][ T313] usb 4-1: device descriptor read/64, error -71 [ 88.608460][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 88.655854][ T2295] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.662703][ T2295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.669791][ T2295] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.676592][ T2295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.682339][ T6] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 88.701783][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.709472][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.717130][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.735747][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.743750][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.750572][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.752360][ T39] usb 2-1: config 0 has no interfaces? [ 88.758328][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.770862][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.777722][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.784975][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.798923][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.815462][ T2295] device veth0_vlan entered promiscuous mode [ 88.822483][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.830650][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.838790][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.846063][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.857491][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.866723][ T2295] device veth1_macvtap entered promiscuous mode [ 88.877275][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.887164][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.919115][ T2300] loop2: detected capacity change from 0 to 512 [ 88.925743][ T2300] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 88.934112][ T2300] EXT4-fs (loop2): invalid journal inode [ 88.939600][ T2300] EXT4-fs (loop2): can't get journal size [ 88.947253][ T2300] EXT4-fs (loop2): 1 truncate cleaned up [ 88.952804][ T2300] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.966420][ T39] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 88.975341][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.983174][ T39] usb 2-1: Product: syz [ 88.987104][ T39] usb 2-1: Manufacturer: syz [ 88.991496][ T39] usb 2-1: SerialNumber: syz [ 88.997716][ T2295] EXT4-fs (loop2): unmounting filesystem. [ 88.998979][ T39] r8152-cfgselector 2-1: config 0 descriptor?? [ 89.031183][ T2303] loop2: detected capacity change from 0 to 4096 [ 89.038014][ T2303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.042534][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.055594][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.063011][ T2303] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.065580][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 89.082794][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.094172][ T6] usb 1-1: config 0 descriptor?? [ 89.101325][ T2303] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.749: corrupted inode contents [ 89.113531][ T2303] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #15: comm syz.2.749: mark_inode_dirty error [ 89.125088][ T2303] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.749: corrupted inode contents [ 89.138826][ T2303] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.749: mark_inode_dirty error [ 89.150230][ T2303] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.749: corrupted inode contents [ 89.162273][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 89.162707][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 89.162721][ T28] audit: type=1400 audit(1728017095.832:349): avc: denied { rename } for pid=2302 comm="syz.2.749" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.173510][ T2303] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.749: mark_inode_dirty error [ 89.182319][ T28] audit: type=1400 audit(1728017095.842:350): avc: denied { unlink } for pid=2302 comm="syz.2.749" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.201948][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 89.212962][ T2303] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.749: corrupted inode contents [ 89.235124][ T313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 89.244331][ T2303] EXT4-fs error (device loop2): ext4_truncate:4302: inode #15: comm syz.2.749: mark_inode_dirty error [ 89.272034][ T39] r8152-cfgselector 2-1: Unknown version 0x0000 [ 89.279185][ T2303] EXT4-fs error (device loop2) in ext4_setattr:5613: Corrupt filesystem [ 89.294224][ T2305] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.749: corrupted inode contents [ 89.320639][ T2295] EXT4-fs (loop2): unmounting filesystem. [ 89.432809][ T313] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 89.442620][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.451057][ T313] usb 4-1: Product: syz [ 89.456334][ T8] device bridge_slave_1 left promiscuous mode [ 89.462279][ T313] usb 4-1: Manufacturer: syz [ 89.466753][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.474041][ T313] usb 4-1: SerialNumber: syz [ 89.478908][ T8] device bridge_slave_0 left promiscuous mode [ 89.502020][ T313] usb 4-1: config 0 descriptor?? [ 89.510141][ T2265] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 89.518188][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.528844][ T8] device veth1_macvtap left promiscuous mode [ 89.535253][ T8] device veth0_vlan left promiscuous mode [ 89.572230][ T6] hid (null): bogus close delimiter [ 89.795221][ T313] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 89.804186][ T313] usb 4-1: USB disconnect, device number 10 [ 89.809421][ T2108] udevd[2108]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.101737][ T6] usb 1-1: string descriptor 0 read error: -71 [ 90.121757][ T6] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #200: -71 [ 90.130542][ T6] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 90.138618][ T6] uclogic 0003:256C:006D.0016: failed probing pen v2 parameters: -71 [ 90.146735][ T6] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 90.154304][ T6] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 90.163258][ T6] usb 1-1: USB disconnect, device number 14 [ 90.254100][ T2316] loop1: detected capacity change from 0 to 8192 [ 90.299129][ T2326] loop1: detected capacity change from 0 to 128 [ 90.444006][ T28] audit: type=1400 audit(1728017097.103:351): avc: denied { execute } for pid=2338 comm="syz.3.763" path="/18/cpu.stat" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.574900][ T2350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.768'. [ 90.686452][ T6] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 90.814248][ T2360] loop0: detected capacity change from 0 to 40427 [ 90.827502][ T2360] F2FS-fs (loop0): invalid crc value [ 90.834222][ T2360] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.860199][ T28] audit: type=1400 audit(1728017097.513:352): avc: denied { bind } for pid=2378 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.881426][ T299] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 90.889579][ T2360] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.914004][ T2384] loop3: detected capacity change from 0 to 1024 [ 90.927796][ T2384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.944668][ T2360] syz.0.773: attempt to access beyond end of device [ 90.944668][ T2360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.959320][ T2083] EXT4-fs (loop3): unmounting filesystem. [ 90.978199][ T2389] loop3: detected capacity change from 0 to 1024 [ 90.984706][ T2389] EXT4-fs: Ignoring removed orlov option [ 90.990207][ T2389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.002978][ T2389] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.061400][ T6] usb 3-1: config 0 has an invalid interface number: 91 but max is 0 [ 91.069472][ T6] usb 3-1: config 0 has no interface number 0 [ 91.076283][ T2392] process 'syz.3.783' launched './file0/file0' with NULL argv: empty string added [ 91.085708][ T28] audit: type=1400 audit(1728017097.743:353): avc: denied { execute } for pid=2388 comm="syz.3.783" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.109700][ T28] audit: type=1400 audit(1728017097.743:354): avc: denied { execute_no_trans } for pid=2388 comm="syz.3.783" path="/33/file1/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.163113][ T2083] EXT4-fs (loop3): unmounting filesystem. [ 91.180363][ T2394] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 91.231361][ T6] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=64.02 [ 91.240392][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.248710][ T6] usb 3-1: Product: syz [ 91.252868][ T299] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.262894][ T6] usb 3-1: Manufacturer: syz [ 91.267324][ T299] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.277249][ T6] usb 3-1: SerialNumber: syz [ 91.282871][ T6] usb 3-1: config 0 descriptor?? [ 91.306907][ T2404] loop3: detected capacity change from 0 to 1024 [ 91.313368][ T2404] EXT4-fs: Ignoring removed orlov option [ 91.318828][ T2404] EXT4-fs: Ignoring removed nobh option [ 91.332549][ T2404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.348580][ T2083] EXT4-fs (loop3): unmounting filesystem. [ 91.361324][ T299] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.370267][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.378159][ T299] usb 2-1: SerialNumber: syz [ 91.494627][ T28] audit: type=1400 audit(1728017098.153:355): avc: denied { shutdown } for pid=2410 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.531251][ T6] snd-usb-audio: probe of 3-1:0.91 failed with error -71 [ 91.538719][ T6] usb 3-1: USB disconnect, device number 11 [ 91.651797][ T299] usb 2-1: 0:2 : does not exist [ 91.854198][ T2358] loop1: detected capacity change from 0 to 512 [ 91.863051][ T2358] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.772: corrupted in-inode xattr [ 91.874968][ T2358] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.772: couldn't read orphan inode 15 (err -117) [ 91.886764][ T2358] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.895687][ T2114] usb 5-1: USB disconnect, device number 14 [ 91.909093][ T2114] usblp0: removed [ 91.909214][ T2416] loop4: detected capacity change from 0 to 128 [ 91.915940][ T2358] EXT4-fs (loop1): unmounting filesystem. [ 91.927093][ T2416] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.934792][ T2416] FAT-fs (loop4): Filesystem has been set read-only [ 91.954029][ T2418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.793'. [ 92.035626][ T2424] loop4: detected capacity change from 0 to 512 [ 92.054420][ T2424] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.796: casefold flag without casefold feature [ 92.067148][ T2424] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.796: missing EA_INODE flag [ 92.079035][ T2424] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.796: error while reading EA inode 2 err=-117 [ 92.091395][ T2424] EXT4-fs (loop4): 1 orphan inode deleted [ 92.096980][ T2424] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.122458][ T1128] EXT4-fs (loop4): unmounting filesystem. [ 92.195300][ T6] usb 2-1: USB disconnect, device number 11 [ 92.200460][ T2434] loop2: detected capacity change from 0 to 8192 [ 92.237817][ T2436] loop2: detected capacity change from 0 to 512 [ 92.251524][ T2436] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.801: casefold flag without casefold feature [ 92.264252][ T2436] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.801: missing EA_INODE flag [ 92.275710][ T2440] loop4: detected capacity change from 0 to 2048 [ 92.276144][ T2436] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.801: error while reading EA inode 2 err=-117 [ 92.294708][ T2436] EXT4-fs (loop2): 1 orphan inode deleted [ 92.300342][ T2436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.315948][ T2440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.337370][ T1128] EXT4-fs (loop4): unmounting filesystem. [ 92.380024][ T2449] netem: unknown loss type 5 [ 92.384967][ T2449] netem: change failed [ 92.391684][ T2295] EXT4-fs (loop2): unmounting filesystem. [ 92.495240][ T2460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.810'. [ 92.533293][ T2464] loop2: detected capacity change from 0 to 1024 [ 92.550220][ T2464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.573963][ T2469] loop4: detected capacity change from 0 to 4096 [ 92.583775][ T2469] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.603257][ T2295] EXT4-fs (loop2): unmounting filesystem. [ 92.616992][ T1128] EXT4-fs (loop4): unmounting filesystem. [ 92.668454][ T2478] loop4: detected capacity change from 0 to 512 [ 92.676760][ T2478] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.817: casefold flag without casefold feature [ 92.689283][ T2478] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.817: missing EA_INODE flag [ 92.700849][ T2478] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.817: error while reading EA inode 2 err=-117 [ 92.713081][ T2478] EXT4-fs (loop4): 1 orphan inode deleted [ 92.718712][ T2478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.771641][ T2485] syz.1.820[2485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.771692][ T2485] syz.1.820[2485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.783677][ T2485] syz.1.820[2485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.795194][ T2485] syz.1.820[2485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.822597][ T1128] EXT4-fs (loop4): unmounting filesystem. [ 92.892733][ T6] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 93.001480][ T2489] loop4: detected capacity change from 0 to 40427 [ 93.008409][ T2489] F2FS-fs (loop4): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 93.017242][ T2489] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 93.027387][ T2489] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.062345][ T2489] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 93.069274][ T2489] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.087185][ T2489] syz.4.822: attempt to access beyond end of device [ 93.087185][ T2489] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 93.106011][ T1128] syz-executor: attempt to access beyond end of device [ 93.106011][ T1128] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 93.201307][ T1320] Bluetooth: hci0: command 0x1003 tx timeout [ 93.207154][ T2049] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.271140][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 93.282360][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 93.297658][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 93.331465][ T28] audit: type=1400 audit(1728017099.993:356): avc: denied { load_policy } for pid=2508 comm="syz.4.827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 93.331652][ T2509] SELinux: failed to load policy [ 93.401357][ T2513] loop4: detected capacity change from 0 to 2048 [ 93.423844][ T2513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.448971][ T1128] EXT4-fs (loop4): unmounting filesystem. [ 93.464072][ T28] audit: type=1400 audit(1728017100.123:357): avc: denied { bind } for pid=2518 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.483212][ T6] usb 3-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 93.492397][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.500358][ T6] usb 3-1: Product: syz [ 93.504747][ T6] usb 3-1: Manufacturer: syz [ 93.509166][ T6] usb 3-1: SerialNumber: syz [ 93.514624][ T6] usb 3-1: config 0 descriptor?? [ 93.710864][ T2265] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 93.795559][ T6] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 93.803034][ T6] usb 3-1: USB disconnect, device number 12 [ 93.812272][ T1586] udevd[1586]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.010876][ T2265] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 94.038306][ T28] audit: type=1326 audit(1728017100.693:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2531 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b977dff9 code=0x7ffc0000 [ 94.071013][ T313] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 94.087611][ T2534] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 94.440840][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.451728][ T313] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.460480][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.469457][ T313] usb 2-1: config 0 descriptor?? [ 94.690765][ T2265] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 94.699632][ T2265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.951278][ T313] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 94.960890][ T313] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0017/input/input23 [ 95.043361][ T313] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 95.155529][ T2530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.163930][ T2517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.164001][ T2530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.172126][ T2517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.220942][ T2265] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 95.227791][ T2265] usb 1-1: No valid video chain found. [ 95.233843][ T2265] usb 1-1: USB disconnect, device number 15 [ 95.953707][ T313] usb 2-1: USB disconnect, device number 12 [ 96.000638][ T6] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 96.150638][ T1320] Bluetooth: hci0: command 0x1003 tx timeout [ 96.150672][ T2049] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.390813][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 96.402275][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 96.562212][ T2563] netlink: 6 bytes leftover after parsing attributes in process `syz.3.849'. [ 96.582904][ T2565] netlink: 96 bytes leftover after parsing attributes in process `syz.3.850'. [ 96.590703][ T6] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 96.600540][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.608371][ T6] usb 1-1: Product: syz [ 96.612896][ T6] usb 1-1: Manufacturer: syz [ 96.617322][ T6] usb 1-1: SerialNumber: syz [ 96.629258][ T6] usb 1-1: config 0 descriptor?? [ 96.630623][ T2567] loop3: detected capacity change from 0 to 512 [ 96.647528][ T2567] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.851: bad orphan inode 17 [ 96.657539][ T2567] ext4_test_bit(bit=16, block=4) = 1 [ 96.663046][ T2567] is_bad_inode(inode)=0 [ 96.667062][ T2567] NEXT_ORPHAN(inode)=0 [ 96.671029][ T2546] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.671540][ T2567] max_ino=32 [ 96.680930][ T2567] i_nlink=1 [ 96.683892][ T2567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.699819][ T2567] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.851: bg 0: block 7: invalid block bitmap [ 96.717001][ T2083] EXT4-fs (loop3): unmounting filesystem. [ 96.733058][ T2571] loop3: detected capacity change from 0 to 1024 [ 96.739541][ T2571] journal_path: Lookup failure for './file0' [ 96.745584][ T2265] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 96.746616][ T2571] EXT4-fs: error: could not find journal device path [ 96.902644][ T6] usb 1-1: USB disconnect, device number 16 [ 96.911168][ T1586] udevd[1586]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.080560][ T299] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 97.110548][ T2265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.121655][ T2265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.131141][ T2265] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 97.140004][ T2265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.148665][ T2265] usb 2-1: config 0 descriptor?? [ 97.320549][ T299] usb 4-1: Using ep0 maxpacket: 16 [ 97.398279][ T2578] loop2: detected capacity change from 0 to 1024 [ 97.414505][ T2578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.425002][ T2578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.450864][ T299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.461949][ T299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.471860][ T299] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.484632][ T299] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.499204][ T299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.512228][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 97.512240][ T28] audit: type=1400 audit(1728017104.174:375): avc: denied { unlink } for pid=2295 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 97.517612][ T299] usb 4-1: config 0 descriptor?? [ 97.552197][ T2295] EXT4-fs (loop2): unmounting filesystem. [ 97.595143][ T28] audit: type=1400 audit(1728017104.254:376): avc: denied { map } for pid=2588 comm="syz.2.859" path="/dev/ashmem" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.631813][ T2265] itetech 0003:258A:6A88.0018: unknown main item tag 0x0 [ 97.640780][ T2265] itetech 0003:258A:6A88.0018: unknown main item tag 0x0 [ 97.647685][ T2265] itetech 0003:258A:6A88.0018: unknown main item tag 0x0 [ 97.654931][ T28] audit: type=1400 audit(1728017104.304:377): avc: denied { read } for pid=2590 comm="syz.2.860" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.685285][ T2265] itetech 0003:258A:6A88.0018: unknown main item tag 0x0 [ 97.692953][ T2265] itetech 0003:258A:6A88.0018: unknown main item tag 0x0 [ 97.700438][ T28] audit: type=1400 audit(1728017104.304:378): avc: denied { open } for pid=2590 comm="syz.2.860" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.700659][ T2265] itetech 0003:258A:6A88.0018: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 97.735855][ T28] audit: type=1400 audit(1728017104.304:379): avc: denied { ioctl } for pid=2590 comm="syz.2.860" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.763458][ T28] audit: type=1400 audit(1728017104.304:380): avc: denied { set_context_mgr } for pid=2590 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 97.834743][ T2265] usb 2-1: USB disconnect, device number 13 [ 98.051892][ T299] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 98.058942][ T299] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 98.070304][ T299] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 98.089905][ T299] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 98.103429][ T299] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 98.118294][ T299] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 98.125690][ T299] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 98.130659][ T2604] loop0: detected capacity change from 0 to 1024 [ 98.133091][ T299] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 98.146299][ T299] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 98.153909][ T2604] EXT4-fs: Ignoring removed oldalloc option [ 98.167485][ T299] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 98.180955][ T299] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0019/input/input24 [ 98.193642][ T2604] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.216465][ T299] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 98.260783][ T299] usb 4-1: USB disconnect, device number 11 [ 98.274556][ T2255] EXT4-fs (loop0): unmounting filesystem. [ 98.382220][ T2614] loop1: detected capacity change from 0 to 512 [ 98.412389][ T2614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.427184][ T2611] device syzkaller0 entered promiscuous mode [ 98.436431][ T2614] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 98.481356][ T2614] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 98.497672][ T2249] EXT4-fs (loop1): unmounting filesystem. [ 98.569702][ T2625] loop0: detected capacity change from 0 to 512 [ 98.576443][ T2625] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.587233][ T2625] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 98.598605][ T2625] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.605312][ T2625] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.620027][ T2625] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.633395][ T2625] EXT4-fs (loop0): 1 truncate cleaned up [ 98.638913][ T2625] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.652467][ T2625] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 98.666407][ T2255] EXT4-fs (loop0): unmounting filesystem. [ 98.712174][ T2630] loop0: detected capacity change from 0 to 512 [ 98.751906][ T2630] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.875: invalid indirect mapped block 256 (level 2) [ 98.770695][ T2630] EXT4-fs (loop0): 2 truncates cleaned up [ 98.776345][ T2630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.792545][ T2629] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.875: bg 0: block 5: invalid block bitmap [ 98.810591][ T299] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 98.825755][ T2255] EXT4-fs (loop0): unmounting filesystem. [ 98.863848][ T2635] loop0: detected capacity change from 0 to 128 [ 98.872045][ T28] audit: type=1400 audit(1728017105.534:381): avc: denied { map } for pid=2632 comm="syz.2.877" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.912655][ T2639] loop3: detected capacity change from 0 to 128 [ 98.913098][ T28] audit: type=1400 audit(1728017105.534:382): avc: denied { execute } for pid=2632 comm="syz.2.877" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.923377][ T2639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.962347][ T2639] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 98.984031][ T2635] syz.0.876: attempt to access beyond end of device [ 98.984031][ T2635] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 99.038511][ T2633] syz.0.876: attempt to access beyond end of device [ 99.038511][ T2633] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 99.039461][ T2083] EXT4-fs (loop3): unmounting filesystem. [ 99.094484][ T28] audit: type=1326 audit(1728017105.754:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2652 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac3d7dff9 code=0x7ffc0000 [ 99.117607][ T28] audit: type=1326 audit(1728017105.754:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2652 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ac3d7dff9 code=0x7ffc0000 [ 99.240522][ T299] usb 2-1: config 1 interface 0 has no altsetting 0 [ 99.350745][ T2114] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 99.358265][ T2265] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 99.380556][ T19] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 99.430572][ T299] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.439549][ T299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.447302][ T299] usb 2-1: Product: syz [ 99.451263][ T299] usb 2-1: Manufacturer: syz [ 99.455659][ T299] usb 2-1: SerialNumber: syz [ 99.590439][ T2114] usb 4-1: Using ep0 maxpacket: 8 [ 99.600606][ T2265] usb 1-1: Using ep0 maxpacket: 16 [ 99.710558][ T2114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.721328][ T2265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.732068][ T2114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.741796][ T2265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.751384][ T2114] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 99.760195][ T2114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.768055][ T2265] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.781001][ T2265] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 99.789839][ T2265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.797928][ T2114] usb 4-1: config 0 descriptor?? [ 99.803272][ T2265] usb 1-1: config 0 descriptor?? [ 99.810514][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.821282][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.830786][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 99.839633][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.848304][ T19] usb 3-1: config 0 descriptor?? [ 100.151490][ T299] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 100.291382][ T2114] hid-picolcd 0003:04D8:F002.001A: unknown main item tag 0x0 [ 100.298628][ T2114] hid-picolcd 0003:04D8:F002.001A: item fetching failed at offset 5/7 [ 100.307816][ T2265] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 100.314912][ T2265] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 100.322096][ T2114] hid-picolcd 0003:04D8:F002.001A: device report parse failed [ 100.329408][ T2114] hid-picolcd: probe of 0003:04D8:F002.001A failed with error -22 [ 100.337088][ T2265] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 100.344110][ T2265] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 100.352084][ T19] logitech-djreceiver 0003:046D:C70E.001C: unexpected long global item [ 100.352128][ T2265] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 100.367066][ T19] logitech-djreceiver 0003:046D:C70E.001C: logi_dj_probe: parse failed [ 100.373811][ T2265] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 100.375776][ T19] logitech-djreceiver: probe of 0003:046D:C70E.001C failed with error -22 [ 100.382356][ T2265] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 100.397779][ T2265] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 100.404855][ T2265] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 100.412013][ T2265] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 100.423134][ T2265] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001B/input/input25 [ 100.435424][ T2265] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 100.471779][ T2265] usb 2-1: USB disconnect, device number 14 [ 100.480473][ C1] usblp0: nonzero write bulk status received: -108 [ 100.511749][ T19] usb 1-1: USB disconnect, device number 17 [ 100.511760][ T313] usb 4-1: USB disconnect, device number 12 [ 100.571950][ T319] usb 3-1: USB disconnect, device number 13 [ 100.670789][ T2617] usblp0: removed [ 101.046218][ T2665] loop0: detected capacity change from 0 to 128 [ 101.070302][ T2665] syz.0.889: attempt to access beyond end of device [ 101.070302][ T2665] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 101.095699][ T404] kworker/u4:4: attempt to access beyond end of device [ 101.095699][ T404] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 101.171741][ T2676] loop3: detected capacity change from 0 to 512 [ 101.198433][ T2676] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 101.408689][ T2690] loop3: detected capacity change from 0 to 256 [ 101.425647][ T2690] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcf532d90, utbl_chksum : 0xe619d30d) [ 101.460449][ T319] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 101.479286][ T2687] loop1: detected capacity change from 0 to 40427 [ 101.486696][ T2687] F2FS-fs (loop1): invalid crc value [ 101.500384][ T2687] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.508504][ T2696] device pim6reg1 entered promiscuous mode [ 101.537516][ T2687] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.730439][ T319] usb 1-1: Using ep0 maxpacket: 8 [ 101.860514][ T319] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.868742][ T319] usb 1-1: config 179 has no interface number 0 [ 101.875251][ T319] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 101.886636][ T319] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 101.898031][ T319] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.909413][ T319] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 101.920244][ T319] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.933712][ T319] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 101.942796][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.980525][ T2677] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.002128][ T319] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input26 [ 102.227546][ T19] usb 1-1: USB disconnect, device number 18 [ 102.250413][ T19] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 102.361147][ T8] device bridge_slave_1 left promiscuous mode [ 102.367324][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.375102][ T8] device bridge_slave_0 left promiscuous mode [ 102.381144][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.389426][ T8] device veth1_macvtap left promiscuous mode [ 102.395738][ T8] device veth0_vlan left promiscuous mode [ 102.483918][ T2733] tipc: Started in network mode [ 102.488649][ T2733] tipc: Node identity 1, cluster identity 4711 [ 102.494892][ T2733] tipc: Node number set to 1 [ 102.578305][ T2736] device syzkaller0 entered promiscuous mode [ 102.605000][ T2734] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.611983][ T2734] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.619314][ T2734] device bridge_slave_0 entered promiscuous mode [ 102.626390][ T2734] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.633709][ T2734] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.645641][ T2734] device bridge_slave_1 entered promiscuous mode [ 102.759813][ T2747] loop0: detected capacity change from 0 to 2048 [ 102.787855][ T2747] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.804659][ T2734] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.811546][ T2734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.818637][ T2734] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.825430][ T2734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.902993][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.912523][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.930403][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.939277][ T2255] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 102.951729][ T2741] loop2: detected capacity change from 0 to 40427 [ 102.955282][ T2255] EXT4-fs (loop0): Remounting filesystem read-only [ 102.987923][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.988712][ T2741] F2FS-fs (loop2): invalid crc value [ 102.996410][ T2255] EXT4-fs (loop0): unmounting filesystem. [ 103.006881][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.013754][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.021845][ T2741] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.030967][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.049173][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.056057][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.084553][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.102748][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.112528][ T2741] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.127167][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.139499][ T2734] device veth0_vlan entered promiscuous mode [ 103.146875][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.171114][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.178327][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.197945][ T2734] device veth1_macvtap entered promiscuous mode [ 103.206888][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.221014][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.240089][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.350486][ T319] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 103.373848][ T2765] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.380775][ T2765] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.388057][ T2765] device bridge_slave_0 entered promiscuous mode [ 103.396910][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.403978][ T2765] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.411401][ T2765] device bridge_slave_1 entered promiscuous mode [ 103.478578][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.485442][ T2765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.492538][ T2765] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.499305][ T2765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.521779][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.529301][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.536919][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.545856][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.554421][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.561265][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.570544][ T313] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 103.582701][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.591037][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.598964][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.605822][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.617669][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.625961][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.630399][ T319] usb 4-1: Using ep0 maxpacket: 32 [ 103.640986][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.648777][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.666195][ T2765] device veth0_vlan entered promiscuous mode [ 103.672585][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.680765][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.688801][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.696679][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.707649][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.715007][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.722060][ T2265] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 103.734402][ T2765] device veth1_macvtap entered promiscuous mode [ 103.741193][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.749107][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.757492][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.760524][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 103.775871][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 103.786879][ T319] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 103.795856][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.814622][ T319] usb 4-1: config 0 descriptor?? [ 103.818277][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.831065][ T2757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.838721][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.851013][ T319] hub 4-1:0.0: USB hub found [ 103.870533][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.878660][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.950568][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.961667][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.971272][ T313] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 103.980093][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.988796][ T2777] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.992040][ T313] usb 2-1: config 0 descriptor?? [ 103.996197][ T2777] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.008698][ T2777] device bridge_slave_0 entered promiscuous mode [ 104.017854][ T2777] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.024846][ T2777] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.032198][ T2777] device bridge_slave_1 entered promiscuous mode [ 104.086547][ T2777] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.093404][ T2777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.100526][ T2777] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.107275][ T2777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.120599][ T2265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.131546][ T2265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.139690][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.141539][ T319] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 104.156001][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.156158][ T2265] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 104.171842][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.172383][ T2265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.187492][ T2265] usb 3-1: config 0 descriptor?? [ 104.195217][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.203231][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.210054][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.217348][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.225293][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.232131][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.251624][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.259428][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.267641][ T8] device bridge_slave_1 left promiscuous mode [ 104.274056][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.281637][ T8] device bridge_slave_0 left promiscuous mode [ 104.287587][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.295441][ T8] device veth1_macvtap left promiscuous mode [ 104.301319][ T8] device veth0_vlan left promiscuous mode [ 104.371742][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.382107][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.390297][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.397785][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.408970][ T2777] device veth0_vlan entered promiscuous mode [ 104.419420][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.428539][ T2777] device veth1_macvtap entered promiscuous mode [ 104.438113][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.448119][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.457129][ T319] hid-generic 0003:046D:C314.001D: unknown main item tag 0x0 [ 104.465988][ T319] hid-generic 0003:046D:C314.001D: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0 [ 104.482453][ T313] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.001E/input/input27 [ 104.494867][ T313] sony 0003:054C:03D5.001E: input,hidraw1: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 104.683114][ T24] usb 2-1: USB disconnect, device number 15 [ 104.820417][ T319] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 104.882112][ T2114] usb 4-1: USB disconnect, device number 13 [ 105.100599][ T2265] hid-led: probe of 0003:27B8:01ED.001F failed with error -71 [ 105.109152][ T2265] usb 3-1: USB disconnect, device number 14 [ 105.151261][ T8] device bridge_slave_1 left promiscuous mode [ 105.157194][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.164641][ T8] device bridge_slave_0 left promiscuous mode [ 105.170735][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.178495][ T8] device veth1_macvtap left promiscuous mode [ 105.184658][ T8] device veth0_vlan left promiscuous mode [ 105.190454][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 105.212698][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 105.226757][ T2791] loop1: detected capacity change from 0 to 512 [ 105.245293][ T2791] EXT4-fs (loop1): 1 truncate cleaned up [ 105.259383][ T2791] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.307071][ T2791] EXT4-fs warning (device loop1): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 105.323752][ T2734] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 105.338204][ T2734] EXT4-fs (loop1): Remounting filesystem read-only [ 105.359203][ T2734] EXT4-fs (loop1): unmounting filesystem. [ 105.440528][ T319] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 105.449598][ T319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.457721][ T319] usb 5-1: Product: syz [ 105.462055][ T319] usb 5-1: Manufacturer: syz [ 105.470600][ T319] usb 5-1: SerialNumber: syz [ 105.476197][ T319] usb 5-1: config 0 descriptor?? [ 105.510503][ T2787] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 105.608774][ T2812] loop0: detected capacity change from 0 to 256 [ 105.615950][ T2805] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.627244][ T2812] FAT-fs (loop0): Directory bread(block 64) failed [ 105.633126][ T2805] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.640681][ T2812] FAT-fs (loop0): Directory bread(block 65) failed [ 105.643066][ T2805] device bridge_slave_0 entered promiscuous mode [ 105.647424][ T2812] FAT-fs (loop0): Directory bread(block 66) failed [ 105.654593][ T2805] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.666661][ T2805] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.674325][ T2812] FAT-fs (loop0): Directory bread(block 67) failed [ 105.674656][ T2805] device bridge_slave_1 entered promiscuous mode [ 105.687469][ T2812] FAT-fs (loop0): Directory bread(block 68) failed [ 105.694047][ T2812] FAT-fs (loop0): Directory bread(block 69) failed [ 105.708949][ T2812] FAT-fs (loop0): Directory bread(block 70) failed [ 105.720041][ T2812] FAT-fs (loop0): Directory bread(block 71) failed [ 105.726611][ T2812] FAT-fs (loop0): Directory bread(block 72) failed [ 105.735350][ T2812] FAT-fs (loop0): Directory bread(block 73) failed [ 105.740548][ T6] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 105.745694][ T319] usb 5-1: USB disconnect, device number 15 [ 105.821951][ T2819] loop2: detected capacity change from 0 to 512 [ 105.853736][ T2819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.862681][ T2805] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.869567][ T2805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.869777][ T2819] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 105.876925][ T2805] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.876946][ T2805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.900721][ T2114] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.919829][ T2114] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.927892][ T2819] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #2: comm syz.2.948: corrupted inode contents [ 105.940183][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.940592][ T2819] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz.2.948: mark_inode_dirty error [ 105.952200][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.958751][ T2819] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #2: comm syz.2.948: corrupted inode contents [ 105.981321][ T1586] udevd[1586]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.001558][ T2819] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.948: mark_inode_dirty error [ 106.014662][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.027201][ T2265] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.034089][ T2265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.042500][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.050667][ T2265] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.057530][ T2265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.064807][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.072717][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.097508][ T2805] device veth0_vlan entered promiscuous mode [ 106.100446][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.104110][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.118950][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.124540][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.139569][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.140959][ T2295] EXT4-fs (loop2): unmounting filesystem. [ 106.147224][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.152972][ T6] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 106.168058][ T2805] device veth1_macvtap entered promiscuous mode [ 106.174604][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.175188][ T2828] syz.0.960[2828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.183282][ T2828] syz.0.960[2828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.189829][ T6] usb 4-1: config 0 descriptor?? [ 106.211346][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.224077][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.247887][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.291013][ T2832] loop4: detected capacity change from 0 to 512 [ 106.305425][ T2832] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 106.314368][ T2832] EXT4-fs (loop4): invalid journal inode [ 106.319844][ T2832] EXT4-fs (loop4): can't get journal size [ 106.327073][ T2832] EXT4-fs (loop4): 1 truncate cleaned up [ 106.333057][ T2832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.368927][ T2777] EXT4-fs (loop4): unmounting filesystem. [ 106.431592][ T8] device bridge_slave_1 left promiscuous mode [ 106.444492][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.454401][ T8] device bridge_slave_0 left promiscuous mode [ 106.463780][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.481470][ T8] device veth1_macvtap left promiscuous mode [ 106.488455][ T8] device veth0_vlan left promiscuous mode [ 106.550764][ T314] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 106.670389][ T19] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 106.688183][ T2842] loop0: detected capacity change from 0 to 40427 [ 106.692262][ T6] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 106.705507][ T2842] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 106.711972][ T6] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 106.718035][ T2842] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 106.719945][ T6] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 106.735312][ T6] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 106.742530][ T6] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 106.754309][ T6] wacom 0003:056A:5000.0020: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.3-1/input0 [ 106.766187][ T2842] F2FS-fs (loop0): Found nat_bits in checkpoint [ 106.816877][ T2842] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 106.824095][ T2842] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.903647][ T2265] usb 4-1: USB disconnect, device number 14 [ 106.917552][ T2765] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 106.917574][ T2765] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 106.925571][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.940538][ T2765] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 106.943769][ T2765] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 106.952774][ T2765] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 106.960355][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.960922][ T2765] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 106.973647][ T314] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 106.977641][ T2765] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 106.992117][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.010576][ T314] usb 2-1: config 0 descriptor?? [ 107.030538][ T19] usb 5-1: config 1 interface 0 has no altsetting 0 [ 107.190596][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.199463][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.220387][ T19] usb 5-1: Product: syz [ 107.260574][ T19] usb 5-1: Manufacturer: syz [ 107.265101][ T19] usb 5-1: SerialNumber: syz [ 112.330393][ T19] usb 5-1: can't set config #1, error -110 [ 114.853628][ T19] usb 5-1: USB disconnect, device number 16 [ 114.912486][ T2872] loop4: detected capacity change from 0 to 4096 [ 114.934111][ T2879] loop0: detected capacity change from 0 to 512 [ 114.940902][ T2872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.955387][ T2879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.970455][ T314] usbhid 2-1:0.0: can't add hid device: -71 [ 114.980521][ T314] usbhid: probe of 2-1:0.0 failed with error -71 [ 114.987472][ T2872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.997380][ T2879] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.963: invalid indirect mapped block 4294967295 (level 1) [ 115.011736][ T2886] loop1: detected capacity change from 0 to 256 [ 115.024937][ T314] usb 2-1: USB disconnect, device number 16 [ 115.045147][ T2872] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.959: corrupted inode contents [ 115.058721][ T2886] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 115.074351][ T2872] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #15: comm syz.4.959: mark_inode_dirty error [ 115.100591][ T2879] EXT4-fs (loop0): Remounting filesystem read-only [ 115.113197][ T2872] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.959: corrupted inode contents [ 115.126571][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 115.126586][ T28] audit: type=1400 audit(1728017121.794:395): avc: denied { append } for pid=2884 comm="syz.1.965" path="/3/bus/blkio.throttle.io_service_bytes" dev="loop1" ino=1048763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.134888][ T2873] loop2: detected capacity change from 0 to 40427 [ 115.161576][ T2879] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.963: invalid indirect mapped block 4294967295 (level 1) [ 115.164358][ T2114] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 115.185624][ T2873] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 115.192741][ T2873] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.201645][ T28] audit: type=1400 audit(1728017121.824:396): avc: denied { map } for pid=2884 comm="syz.1.965" path="/3/bus/blkio.throttle.io_service_bytes" dev="loop1" ino=1048763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.202097][ T2872] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.959: mark_inode_dirty error [ 115.229695][ T28] audit: type=1400 audit(1728017121.824:397): avc: denied { execute } for pid=2884 comm="syz.1.965" path="/3/bus/blkio.throttle.io_service_bytes" dev="loop1" ino=1048763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.239017][ T2879] EXT4-fs (loop0): 2 truncates cleaned up [ 115.264902][ T2873] F2FS-fs (loop2): invalid crc value [ 115.268668][ T2879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.273894][ T2872] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.959: corrupted inode contents [ 115.292171][ T2873] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.305400][ T2872] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.959: mark_inode_dirty error [ 115.320941][ T2872] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.959: corrupted inode contents [ 115.333225][ T2872] EXT4-fs error (device loop4): ext4_truncate:4302: inode #15: comm syz.4.959: mark_inode_dirty error [ 115.344445][ T2872] EXT4-fs error (device loop4) in ext4_setattr:5613: Corrupt filesystem [ 115.353355][ T2887] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.959: corrupted inode contents [ 115.355139][ T2873] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.371947][ T2873] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.390923][ T2777] EXT4-fs (loop4): unmounting filesystem. [ 115.402642][ T2879] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.963: bg 0: block 5: invalid block bitmap [ 115.406465][ T2295] syz-executor: attempt to access beyond end of device [ 115.406465][ T2295] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 115.417626][ T2879] EXT4-fs (loop0): Remounting filesystem read-only [ 115.429326][ T2295] syz-executor: attempt to access beyond end of device [ 115.429326][ T2295] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 115.457307][ T2295] syz-executor: attempt to access beyond end of device [ 115.457307][ T2295] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.493313][ T2765] EXT4-fs (loop0): unmounting filesystem. [ 115.546472][ T2902] loop1: detected capacity change from 0 to 128 [ 115.566179][ T2902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.575296][ T2902] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 115.620437][ T2114] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 115.634659][ T2114] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.647458][ T2114] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 115.656313][ T2114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.714123][ T2805] EXT4-fs (loop1): unmounting filesystem. [ 115.738878][ T2915] loop4: detected capacity change from 0 to 128 [ 115.757574][ T2915] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.771444][ T2915] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 115.805201][ T299] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 115.879591][ T28] audit: type=1400 audit(1728017122.534:398): avc: denied { reparent } for pid=2914 comm="syz.4.979" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 115.884782][ T2924] loop1: detected capacity change from 0 to 512 [ 115.909030][ T2777] EXT4-fs (loop4): unmounting filesystem. [ 115.916867][ T2924] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.933455][ T2924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.952593][ T2924] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.982: corrupted in-inode xattr [ 115.964993][ T2924] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.982: couldn't read orphan inode 15 (err -117) [ 115.977042][ T2924] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.990868][ T2114] usb 4-1: string descriptor 0 read error: -71 [ 115.997332][ T2114] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 116.006217][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.013225][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.020993][ T2114] usb 4-1: USB disconnect, device number 15 [ 116.029019][ T2922] device bridge_slave_0 entered promiscuous mode [ 116.039129][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.047146][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.053746][ T2805] EXT4-fs (loop1): unmounting filesystem. [ 116.054543][ T2922] device bridge_slave_1 entered promiscuous mode [ 116.132298][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.139165][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.146276][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.153047][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.177756][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.180422][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.195796][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.205600][ T2265] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.205721][ T299] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 116.221903][ T299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.222832][ T2265] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.236767][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 116.241044][ T299] usb 1-1: config 0 descriptor?? [ 116.259967][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.267964][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.274912][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.284004][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.292348][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.299181][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.306519][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.314476][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.335394][ T2922] device veth0_vlan entered promiscuous mode [ 116.341655][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.349859][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.358328][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.366886][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.379402][ T2922] device veth1_macvtap entered promiscuous mode [ 116.386766][ T8] device bridge_slave_1 left promiscuous mode [ 116.392761][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.399943][ T8] device bridge_slave_0 left promiscuous mode [ 116.406081][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.414217][ T8] device veth1_macvtap left promiscuous mode [ 116.420118][ T8] device veth0_vlan left promiscuous mode [ 116.490375][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 116.503379][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.515620][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.523963][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.593287][ T28] audit: type=1400 audit(1728017123.254:399): avc: denied { bind } for pid=2940 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.630845][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.641895][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 116.651657][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 116.664560][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.673442][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.700467][ T2926] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 116.721408][ T299] samsung 0003:0419:0600.0021: unknown main item tag 0x0 [ 116.724566][ T2951] loop3: detected capacity change from 0 to 1024 [ 116.728396][ T299] samsung 0003:0419:0600.0021: unknown main item tag 0x0 [ 116.735439][ T24] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 116.742427][ T299] samsung 0003:0419:0600.0021: unknown main item tag 0x0 [ 116.756109][ T299] samsung 0003:0419:0600.0021: unknown main item tag 0x0 [ 116.763281][ T299] samsung 0003:0419:0600.0021: unknown main item tag 0x0 [ 116.771274][ T299] samsung 0003:0419:0600.0021: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.0-1/input0 [ 116.802529][ T2951] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 116.822023][ T2083] EXT4-fs (loop3): unmounting filesystem. [ 116.853963][ T2960] loop3: detected capacity change from 0 to 128 [ 116.873419][ T2960] syz.3.994: attempt to access beyond end of device [ 116.873419][ T2960] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 116.951075][ T24] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 116.961095][ T24] usb 5-1: USB disconnect, device number 17 [ 116.967561][ T1589] udevd[1589]: setting owner of /dev/ttyACM0 to uid=0, gid=18 failed: No such file or directory [ 116.988070][ T299] usb 1-1: USB disconnect, device number 19 [ 117.007256][ T2958] loop2: detected capacity change from 0 to 40427 [ 117.014456][ T2958] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 117.023389][ T2958] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.049103][ T2958] F2FS-fs (loop2): invalid crc value [ 117.067686][ T2958] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.116229][ T2958] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.123198][ T2958] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 117.131371][ T10] tipc: Left network mode [ 117.161042][ T28] audit: type=1400 audit(1728017123.824:400): avc: denied { create } for pid=2957 comm="syz.2.993" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 117.182329][ T28] audit: type=1400 audit(1728017123.844:401): avc: denied { read } for pid=2957 comm="syz.2.993" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 117.206881][ T28] audit: type=1400 audit(1728017123.844:402): avc: denied { open } for pid=2957 comm="syz.2.993" path="/6/bus/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 117.244993][ T28] audit: type=1400 audit(1728017123.874:403): avc: denied { write } for pid=2957 comm="syz.2.993" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 117.269453][ T404] kworker/u4:4: attempt to access beyond end of device [ 117.269453][ T404] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 117.285116][ T2977] VFS:Filesystem freeze failed [ 117.315274][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.322153][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.329466][ T2978] device bridge_slave_0 entered promiscuous mode [ 117.340941][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.347858][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.355534][ T2978] device bridge_slave_1 entered promiscuous mode [ 117.399109][ T2983] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 117.420375][ T641] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 117.446284][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.453479][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.460597][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.467354][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.494790][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.495061][ T2988] loop4: detected capacity change from 0 to 512 [ 117.509182][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.517413][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.520098][ T2988] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 117.530940][ T2988] EXT4-fs (loop4): mount failed [ 117.549070][ T28] audit: type=1400 audit(1728017124.204:404): avc: denied { unlink } for pid=2984 comm="syz.2.1004" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 117.560687][ T2993] syz.0.1006[2993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.572745][ T2993] syz.0.1006[2993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.584542][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.619106][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.626003][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.633669][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.641766][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.648621][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.648855][ T2993] loop0: detected capacity change from 0 to 2048 [ 117.673098][ T2996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 117.680363][ T641] usb 2-1: Using ep0 maxpacket: 32 [ 117.695108][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.708986][ T2993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.717657][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.753960][ T2765] EXT4-fs (loop0): unmounting filesystem. [ 117.783019][ T3012] loop4: detected capacity change from 0 to 128 [ 117.787240][ T2978] device veth0_vlan entered promiscuous mode [ 117.795265][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.804003][ T641] usb 2-1: config 0 has no interfaces? [ 117.807744][ T3012] EXT4-fs: Ignoring removed nobh option [ 117.815294][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.823658][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.832177][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.835167][ T3012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.840642][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.855425][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.869876][ T2978] device veth1_macvtap entered promiscuous mode [ 117.877943][ T3012] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038 (0x7fffffff) [ 117.887537][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.901291][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.909504][ T2265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.941244][ T10] device bridge_slave_1 left promiscuous mode [ 117.947208][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.954827][ T10] device bridge_slave_0 left promiscuous mode [ 117.960908][ T3012] loop4: detected capacity change from 128 to 0 [ 117.968350][ C1] I/O error, dev loop4, sector 40 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 117.968685][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.985332][ C1] I/O error, dev loop4, sector 40 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 117.989286][ T641] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 118.010797][ T641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.014896][ C1] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 118.019536][ T641] usb 2-1: Product: syz [ 118.028955][ T3020] loop2: detected capacity change from 0 to 1024 [ 118.032082][ T2777] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 118.051949][ T10] device veth1_macvtap left promiscuous mode [ 118.058553][ T10] device veth0_vlan left promiscuous mode [ 118.063549][ T3020] EXT4-fs: Ignoring removed orlov option [ 118.064828][ T641] usb 2-1: Manufacturer: syz [ 118.076016][ T3020] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.086246][ T641] usb 2-1: SerialNumber: syz [ 118.091376][ C1] I/O error, dev loop4, sector 70 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.100786][ C1] I/O error, dev loop4, sector 72 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 118.101203][ T641] usb 2-1: config 0 descriptor?? [ 118.114946][ T335] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4620: inode #12: block 36: comm kworker/u4:3: unable to read itable block [ 118.119988][ T3020] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.129159][ T404] loop: Write error at byte offset 9223372036854776831, length 1024. [ 118.146368][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 118.148874][ T3020] fscrypt: AES-256-XTS using blk-crypto-fallback [ 118.155760][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 118.155788][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 118.156250][ T335] EXT4-fs (loop4): I/O error while writing superblock [ 118.187480][ C0] I/O error, dev loop4, sector 70 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.196926][ C0] I/O error, dev loop4, sector 72 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 118.206280][ T335] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4620: inode #13: block 36: comm kworker/u4:3: unable to read itable block [ 118.220084][ T404] loop: Write error at byte offset 9223372036854776831, length 1024. [ 118.230075][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 118.238172][ T335] EXT4-fs (loop4): I/O error while writing superblock [ 118.245892][ T2777] EXT4-fs (loop4): unmounting filesystem. [ 118.253729][ T335] loop: Write error at byte offset 9223372036854776831, length 1024. [ 118.262267][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 118.270945][ T2777] EXT4-fs (loop4): I/O error while writing superblock [ 118.281134][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.289273][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.316536][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.324670][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.343352][ T2922] EXT4-fs (loop2): unmounting filesystem. [ 118.350488][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 118.374163][ T3028] loop2: detected capacity change from 0 to 512 [ 118.386175][ T3028] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.395638][ T3028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.421129][ T3028] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.1019: corrupted in-inode xattr [ 118.445796][ T3028] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1019: couldn't read orphan inode 15 (err -117) [ 118.458073][ T3028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 118.535992][ T2922] EXT4-fs (loop2): unmounting filesystem. [ 118.551851][ T3043] syz.2.1022[3043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.551925][ T3043] syz.2.1022[3043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.574868][ T3043] loop2: detected capacity change from 0 to 2048 [ 118.622920][ T3043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 118.640358][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 118.657304][ T2922] EXT4-fs (loop2): unmounting filesystem. [ 118.780555][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.800336][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 118.814038][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=3 req=1002 state=1 status=67 (errno 9: Bad file descriptor) [ 118.834067][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.843016][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.854958][ T3083] loop2: detected capacity change from 0 to 128 [ 118.863465][ T3083] EXT4-fs: Ignoring removed nobh option [ 118.877622][ T3083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 118.886167][ T3083] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038 (0x7fffffff) [ 118.900556][ T3022] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 119.010451][ T24] usb 1-1: can't set config #1, error -71 [ 119.022647][ T24] usb 1-1: USB disconnect, device number 20 [ 119.106183][ T2265] usb 2-1: USB disconnect, device number 17 [ 119.107453][ T3082] EXT4-fs (loop2): unmounting filesystem. [ 119.241099][ T10] device bridge_slave_1 left promiscuous mode [ 119.247034][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.254368][ T10] device bridge_slave_0 left promiscuous mode [ 119.260275][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.268038][ T10] device bridge_slave_1 left promiscuous mode [ 119.274038][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.281350][ T10] device bridge_slave_0 left promiscuous mode [ 119.287260][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.295308][ T10] device veth1_macvtap left promiscuous mode [ 119.301272][ T10] device veth0_vlan left promiscuous mode [ 119.307034][ T10] device veth1_macvtap left promiscuous mode [ 119.312975][ T10] device veth0_vlan left promiscuous mode [ 120.311222][ T10] device bridge_slave_1 left promiscuous mode [ 120.317153][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.324764][ T10] device bridge_slave_0 left promiscuous mode [ 120.330872][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.338610][ T10] device bridge_slave_1 left promiscuous mode [ 120.344629][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.351941][ T10] device bridge_slave_0 left promiscuous mode [ 120.357854][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.365659][ T10] device bridge_slave_1 left promiscuous mode [ 120.371688][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.378911][ T10] device bridge_slave_0 left promiscuous mode [ 120.384931][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.394344][ T10] device veth1_macvtap left promiscuous mode [ 120.400155][ T10] device veth0_vlan left promiscuous mode [ 120.406081][ T10] device veth1_macvtap left promiscuous mode [ 120.412138][ T10] device veth0_vlan left promiscuous mode [ 120.418008][ T10] device veth1_macvtap left promiscuous mode [ 120.423873][ T10] device veth0_vlan left promiscuous mode