last executing test programs: 8.865729212s ago: executing program 4 (id=5306): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.603659514s ago: executing program 4 (id=5309): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r2) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x1, r2}) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4]}}, 0x0}, 0x0) 6.492368037s ago: executing program 3 (id=5331): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fffffffffffffff, 0x200}) write(r1, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) 6.492229867s ago: executing program 3 (id=5332): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f00000002c0)="46ae7af010d407abdfb67f78c6ce1de64f335771ef55cd38c413ed7ff222ad68af549d80d22e847701016c7e958438d308ddbf433af4149bd8cd26e0b32458c58b5f3c90a0ba2eafc8d60d7be9bbc1bac4b50f3f4c7b8d4403229638a3eb6d7148e7c585ce9740fcb219def132c8a97a4d7c48872d5d3349", 0x78}], 0x3, 0x0, 0x0, 0x20014041}}], 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b24020106"], 0x0) 5.498014099s ago: executing program 4 (id=5336): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 4.602647502s ago: executing program 1 (id=5342): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) read$FUSE(r0, &(0x7f0000006800)={0x2020}, 0x2020) 4.545998597s ago: executing program 1 (id=5343): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRES8, @ANYRES32, @ANYBLOB="b3c5ee93dd96b9481086a576921ce13d2aca669c68e8bfcc191f03a19d0dd5ea812aee7808d3a98cecc1d70946fab90ef3e3ca6da90d6b7b3393ddf46a7d521e5b95721a097e9842c923465cddbe869689cb536f4986d9ea56ff4473c38155b50942f304d89aa805dc9966c2080dab87e86c01638b94b4dfba6912dc6984f9e41ba1a436ba9cc1c5058e", @ANYRES16, @ANYRESOCT, @ANYBLOB="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"/531, @ANYRES16], 0x2, 0x1cb, &(0x7f0000000300)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="c0210200001e"], 0x20) 4.545639967s ago: executing program 1 (id=5344): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1e5, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xf8000, 0x0, 0x3) 4.537087708s ago: executing program 1 (id=5345): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)=@ethtool_eeprom={0x19}}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000224000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f000068b000/0x2000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r5) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x1, r5}) syz_usb_control_io(r0, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0xc018480d, &(0x7f0000000000)) 4.213970634s ago: executing program 3 (id=5347): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x10f0c2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9"], 0x0}, 0x0) 2.243339566s ago: executing program 3 (id=5364): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3a280a05a59fc768d5b4db0f1a9c98277afe8d9338364ba7a2b3d18b221b24ecb4e1df6dad2e34905f0101d1be5fc322de3b576b708510054635e0d93924b8b4", "6a588528551db5d9ac7718bb76b2137f2dc09faca249808f541ba51d8e68d45a5e2457be5c13d221b580e1d93e09c8cd04f287d17f5b791ef68c406003f20814", "79da99b7cefddf6d76277bd44f7b742daf84f5d07d391a3c169dc6e96507d14a"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x8, &(0x7f0000000680)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) ftruncate(r0, 0x20cf01) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x468c2, 0x24) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300), 0x16) dup3(0xffffffffffffffff, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xef84) 2.150024414s ago: executing program 1 (id=5366): sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x8004587d, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 2.147860644s ago: executing program 4 (id=5368): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x4, [@restrict, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @func, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}, @volatile, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x7}]}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0xd4}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xa, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.147743984s ago: executing program 1 (id=5369): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000046af5a06e53f070c0000000a0000070900be0083000000000b09007a"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000000)='B') close_range(r0, 0xffffffffffffffff, 0x0) 2.07588137s ago: executing program 3 (id=5374): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002100)="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", 0x57d}], 0x1}}], 0x3, 0x4001c00) 2.07555547s ago: executing program 4 (id=5375): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 2.040204863s ago: executing program 3 (id=5376): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)=@ethtool_eeprom={0x19}}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f0000224000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f000068b000/0x2000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af00, &(0x7f00000000c0)) r6 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r6) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x1, r6}) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)) 2.040003193s ago: executing program 2 (id=5377): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x10f0c2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9"], 0x0}, 0x0) 2.039794063s ago: executing program 4 (id=5378): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 341.043362ms ago: executing program 0 (id=5383): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b\xba\xdf//\xdc/\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') flistxattr(0xffffffffffffffff, 0x0, 0x0) fsync(r4) 322.943944ms ago: executing program 0 (id=5384): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r2 = dup3(r0, r1, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 233.058181ms ago: executing program 0 (id=5385): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3a280a05a59fc768d5b4db0f1a9c98277afe8d9338364ba7a2b3d18b221b24ecb4e1df6dad2e34905f0101d1be5fc322de3b576b708510054635e0d93924b8b4", "6a588528551db5d9ac7718bb76b2137f2dc09faca249808f541ba51d8e68d45a5e2457be5c13d221b580e1d93e09c8cd04f287d17f5b791ef68c406003f20814", "79da99b7cefddf6d76277bd44f7b742daf84f5d07d391a3c169dc6e96507d14a"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x8, &(0x7f0000000680)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f614d2a6093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae"], 0x1, 0x11f4, &(0x7f0000001280)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) ftruncate(r0, 0x20cf01) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x468c2, 0x24) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$P9_RREADLINK(r2, &(0x7f0000000300), 0x16) dup3(r2, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xef84) 232.369881ms ago: executing program 2 (id=5386): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x4, [@restrict, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @func, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}, @volatile, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x7}]}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0xd4}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xa, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 184.684035ms ago: executing program 2 (id=5387): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002100)="1985e0af627220548aeb0cfc49fbac531c269552e219552e6a14fa29e4419c16659f17f332349b4c955f1ac32d31beac9d4f7dbf0665bea30fa4879eb5b2261229275bfc3d8a66c14fcf9349f07a68fc4bd49c142fe77911430460bd5b3416ba691fae3be1d91617e58635ec666fdda181565d87ac958b3a08d10b4e75804d8e87e548a09fbac34212817cf9bc53befb1a6339f0b0fb7fc26d3fd1fb71151165d31a57b521b5c41cade50810b625e9d42f36cf2b5b308b4a50eb88af87aef2922c7e783ca605ec69963320be86e61065d5f28b0587b4a99b7f9987ec5c92b926bf32958d1b3b1d55d200198992024e1df62a3b2a39f740dce85f9a538c1236c7cdf9567f6aad6a0fa130484f314c2baea626d96ac70279fc33558bd6d7cc956bda5f9cdc5aaa4666f79e89c3bd4fb382d1e25b7fdf39f5bc1f91268c99a34d29eced2f84c5447dcc51248cff3e997712498917da1cd948a5361d483c2720b39af59776006970e0894ec8f6864a170816b0417cb0b68e3534e62b9ef4463df7b49bbe17e23e3bd6dcc1122b83b0ff694e0b921d817f563706571114c98ac96122520f524943719f6a34d1ef7f4b4a24bb0e1eae5829a86afd1cabd3911ec5f0e18e29e8e9f5a39e565844e6ba147a598086f34b2919a333eca8a98cc08d315bac231678e0ec0878ccdaf2766ec5e72ce8a1167f3e1c8903d10300d50bdd3e04f8ad0d674fa148e7c4e824c17de1d4f17e74bad2eed52a6fce3d7faf605003fdd3ce5b5b85e1df96ef42635ff27f9271cb6a07957484d2f5b3ba3c67fa61151b691a59ab3feb660f4893f68c350a98d6c8745340c99b060c87b59794c649c3e590982a39794c3c2dd39042199137d374cfc08aea591abe9e4b9d49f1dbc7e62d6db6c835afe452dacb9401efcc2605e99503187d1e47fddfe68048b0e035d7119275678f5b0be51887d6ea5a0444f3c5adf7ef238130bd83e36e958f4bb461058ddbbd5a90313fc0508352983a00fb667238ecb0957f80dda72863935b3a6208e066ce93ebe3dce5456d24a349134c2d750f5c0629dc6bcbe60bacede783d74cff02f8cca1f3e1a6b1b60c118c31c613332e7c38c3802d9338af70d4492bd3661dfdedf679f4c19405015e3d35476069d3c55a60e2398b7a1689ca50bb8439b931fe0095b0b0a128c7b3d4c6f9fdaf3211945584e4362b42f7a82d4919474160a4c2cbd2aa760615aeb8fee6c51375718bb67194017bc63961291c19f15ecd3f4f2f5d674503612596e9270caf2a7b68ff50114714e8da0efa5cba8d8970732ed682339d4362c5c9300a0c48ef79adea5b1c8c41ab35548b4ea51e268224f78dbb456def8cf11146d1ab651bd963bc78b5cf586d101e6774a77b2146de77f8af02314fceefd1555d9eb953e7445ba4b01472845012421be33c5781ee2d12756e808561a54a9b7cd6ffb8fb2c3932a8935b1eb151f5495edec25c8a9d2f5121a7a25d17662e661f83eb7d952ae8c38454ec1048160f1c27ad3caf8e1ecb67a20c8ce93e3b4debb2575508ff3915a2b0215a477d3eb23ab4722bc889e0a33801a7e01efca5252d1eef2a1b69aa2bed39bfd55e94b9a7d5e6d4532d675e36c9104840e611f675e111b57bc5880e9883cf98a956c4d1eb17f814e0d351216ec446e58258fc50327bf822a1f0e9ef9822463ca229c2fc384a6e4d7fc89ed391b25f3d828556058ee763281b91beb05e5699c74e4530c60a4b905ce31a9d40e3c0902a2e7d04075262f93208a86bed6ce3608db31aae6d16ecb03cdee76a341d1b6c36267b02df5bf85aa3b927b2853321d823656fa8e3d6071e5f44944746e09b37356e19784183350aae6114f5c49d2bb894e08e0eace5ae43c6ac4e10f1654bcc64babba433faec026d1b6152d7321794181be9ef6717b9b7986202f6e7bcedefb02453131e3293e0652938d915116a4b34d65c57bf2652c0569f9bf0b2d6fe", 0x57d}], 0x1}}], 0x3, 0x4001c00) 153.278408ms ago: executing program 2 (id=5388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004b40)={0x0, &(0x7f0000000000)={0x18, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="65217d09d9"], 0xffdd) 96.940312ms ago: executing program 0 (id=5389): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 96.805273ms ago: executing program 0 (id=5390): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) 37.987427ms ago: executing program 2 (id=5391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800c001a80080002"], 0x60}}, 0x0) 6.784059ms ago: executing program 0 (id=5392): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) removexattr(0x0, 0x0) 0s ago: executing program 2 (id=5393): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in=@local}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) kernel console output (not intermixed with test programs): 13: 0000000000000010 R14: 00005555557154b0 R15: 000000000000001d [ 481.779630][T13414] [ 481.795911][T13414] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 481.803464][T13414] CPU: 1 PID: 13414 Comm: syz-executor Tainted: G W 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 481.814833][T13414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 481.824726][T13414] Call Trace: [ 481.827854][T13414] [ 481.830631][T13414] dump_stack_lvl+0x151/0x1b7 [ 481.832809][T13653] loop3: detected capacity change from 0 to 512 [ 481.835140][T13414] ? io_uring_drop_tctx_refs+0x190/0x190 [ 481.835165][T13414] dump_stack+0x15/0x17 [ 481.835180][T13414] f2fs_is_valid_blkaddr+0xc87/0x12d0 [ 481.855884][T13414] f2fs_get_read_data_page+0x4be/0x7e0 [ 481.861206][T13414] ? f2fs_get_block+0x1b0/0x1b0 [ 481.865863][T13414] ? force_page_cache_ra+0x420/0x420 [ 481.870984][T13414] f2fs_find_data_page+0x19c/0x420 [ 481.875931][T13414] f2fs_readdir+0x53a/0xba0 [ 481.880272][T13414] ? f2fs_fill_dentries+0xd50/0xd50 [ 481.885304][T13414] ? avc_policy_seqno+0x1b/0x70 [ 481.889989][T13414] ? __kasan_check_read+0x11/0x20 [ 481.894850][T13414] ? fsnotify_perm+0x470/0x5d0 [ 481.896253][ T296] usb 3-1: Using ep0 maxpacket: 16 [ 481.899453][T13414] ? security_file_permission+0x86/0xb0 [ 481.909780][T13414] iterate_dir+0x265/0x610 [ 481.914031][T13414] ? f2fs_fill_dentries+0xd50/0xd50 [ 481.919065][T13414] __se_sys_getdents64+0x1c1/0x460 [ 481.924012][T13414] ? __x64_sys_getdents64+0x90/0x90 [ 481.929046][T13414] ? filldir+0x680/0x680 [ 481.933124][T13414] __x64_sys_getdents64+0x7b/0x90 [ 481.938117][T13414] do_syscall_64+0x3d/0xb0 [ 481.942369][T13414] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 481.948097][T13414] RIP: 0033:0x7f67f65d8c73 [ 481.952350][T13414] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 d2 44 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 481.971790][T13414] RSP: 002b:00007fff81afa5b8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 481.980035][T13414] RAX: ffffffffffffffda RBX: 00005555557154e0 RCX: 00007f67f65d8c73 [ 481.987848][T13414] RDX: 0000000000008000 RSI: 00005555557154e0 RDI: 0000000000000005 [ 481.995659][T13414] RBP: 00005555557154b4 R08: 0000000000000000 R09: 0000000000000000 [ 482.003469][T13414] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 482.011279][T13414] R13: 0000000000000010 R14: 00005555557154b0 R15: 000000000000001d [ 482.019094][T13414] [ 482.036121][T13601] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 482.049160][T13601] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 482.049536][T13653] EXT4-fs (loop3): inodes count not valid: 1 vs 32 [ 482.057393][ T354] attempt to access beyond end of device [ 482.057393][ T354] loop4: rw=2049, want=40992, limit=40427 [ 482.074895][T13601] usb 2-1: Manufacturer: syz [ 482.080120][T13601] usb 2-1: config 0 descriptor?? [ 482.115772][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.126945][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.152810][ T296] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 482.185123][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.201241][ T296] usb 3-1: config 0 descriptor?? [ 482.585499][T13601] appleir 0003:05AC:8243.008A: unknown main item tag 0x0 [ 482.627962][T13601] appleir 0003:05AC:8243.008A: No inputs registered, leaving [ 482.669280][T13664] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.682704][T13664] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.688910][T13601] appleir 0003:05AC:8243.008A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 482.696618][T13664] device bridge_slave_0 entered promiscuous mode [ 482.769041][T13664] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.776134][T13664] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.783427][T13664] device bridge_slave_1 entered promiscuous mode [ 482.796280][T13636] UDC core: couldn't find an available UDC or it's busy: -16 [ 482.803482][T13636] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 483.036154][T13678] syz.2.4696[13678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.053099][T13678] syz.2.4696[13678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.264897][T13677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4694'. [ 483.311282][ T8] device bridge_slave_1 left promiscuous mode [ 483.328515][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.385224][ T8] device bridge_slave_0 left promiscuous mode [ 483.429178][ T296] konepure 0003:1E7D:2DB4.008B: report_id 0 is invalid [ 483.438118][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.440224][ T296] konepure 0003:1E7D:2DB4.008B: item 0 0 1 8 parsing failed [ 483.455461][ T8] device veth1_macvtap left promiscuous mode [ 483.461658][ T296] konepure 0003:1E7D:2DB4.008B: parse failed [ 483.470673][ T296] konepure: probe of 0003:1E7D:2DB4.008B failed with error -22 [ 483.473541][ T8] device veth0_vlan left promiscuous mode [ 483.563923][T13682] loop3: detected capacity change from 0 to 256 [ 483.615005][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 483.624534][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 483.636567][T13682] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 483.637710][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 483.659432][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 483.667600][ T875] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.674440][ T875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.695270][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 483.696598][T13620] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 483.703501][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 483.718495][T13620] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 483.718572][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 483.733883][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.740736][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.748127][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.763090][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 483.775993][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 483.787493][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 483.795189][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 483.802608][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 483.810811][T13664] device veth0_vlan entered promiscuous mode [ 483.821797][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 483.832978][T13664] device veth1_macvtap entered promiscuous mode [ 483.842518][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 483.850902][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 483.870696][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 483.878923][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 483.935273][T13687] loop4: detected capacity change from 0 to 512 [ 483.959200][T13687] EXT4-fs (loop4): 1 orphan inode deleted [ 483.964764][T13687] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 483.985814][T13687] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 483.986118][T13685] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.005178][T13685] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.012975][T13685] device bridge_slave_0 entered promiscuous mode [ 484.026443][T13685] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.033396][T13685] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.040802][T13685] device bridge_slave_1 entered promiscuous mode [ 484.102920][T13685] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.109796][T13685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.116888][T13685] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.123670][T13685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.385567][ T5646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.392975][ T5646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.401499][ T5646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.416343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 484.426640][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.440117][ T5646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 484.458805][T13685] device veth0_vlan entered promiscuous mode [ 484.467288][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 484.475378][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 484.482715][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 484.523132][T13701] syz.2.4712[13701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.523195][T13701] syz.2.4712[13701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.529666][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 484.554605][T13685] device veth1_macvtap entered promiscuous mode [ 484.562841][ T5646] usb 3-1: USB disconnect, device number 67 [ 484.576622][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 484.589769][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 484.597821][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 484.637928][ T8] device bridge_slave_1 left promiscuous mode [ 484.644112][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.653363][ T8] device bridge_slave_0 left promiscuous mode [ 484.659442][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.667764][ T8] device veth1_macvtap left promiscuous mode [ 484.673634][ T8] device veth0_vlan left promiscuous mode [ 484.694392][T13713] loop2: detected capacity change from 0 to 16 [ 484.748053][T13713] erofs: (device loop2): mounted with root inode @ nid 36. [ 484.798506][T13713] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 484.815537][T13713] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 484.815717][ T1769] usb 2-1: reset high-speed USB device number 68 using dummy_hcd [ 484.833168][T13713] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 484.843102][T13664] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 484.847137][T13706] loop3: detected capacity change from 0 to 40427 [ 484.861223][T13664] EXT4-fs (loop4): Remounting filesystem read-only [ 484.862427][T13713] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 484.867775][T13664] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 484.906514][T13706] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 484.914090][T13706] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 484.930593][T13716] loop2: detected capacity change from 0 to 256 [ 484.945813][T13706] F2FS-fs (loop3): Found nat_bits in checkpoint [ 484.966023][T13716] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 484.976063][T13706] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 484.985911][T13706] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 485.022108][T13706] syz.3.4710[13706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.022177][T13706] syz.3.4710[13706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.043336][T13465] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 485.063633][T13465] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 485.111666][T13723] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.118597][T13723] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.125846][ T1769] usb 2-1: device firmware changed [ 485.130773][T13723] device bridge_slave_0 entered promiscuous mode [ 485.137293][ T296] usb 2-1: USB disconnect, device number 68 [ 485.138570][T13706] syz.3.4710[13706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.143129][T13706] syz.3.4710[13706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.156509][T13723] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.185747][T13723] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.195604][T13723] device bridge_slave_1 entered promiscuous mode [ 485.298699][T13723] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.305576][T13723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.312680][T13723] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.319456][T13723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.335742][ T296] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 485.349841][T13732] loop3: detected capacity change from 0 to 512 [ 485.368360][T13730] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.375201][T13730] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.382460][T13730] device bridge_slave_0 entered promiscuous mode [ 485.388374][T13732] EXT4-fs (loop3): bad s_min_extra_isize: 65528 [ 485.390516][T13730] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.401663][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.410052][T13730] device bridge_slave_1 entered promiscuous mode [ 485.463659][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.472396][T13601] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.480112][T13601] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.504352][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.512897][ T1769] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.519768][ T1769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.527293][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.535298][ T1769] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.542165][ T1769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.566331][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.584836][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.635523][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.644475][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.664163][T13723] device veth0_vlan entered promiscuous mode [ 485.685960][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.695324][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.713922][ T296] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.726598][ T296] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.743840][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 485.752054][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 485.770806][T13723] device veth1_macvtap entered promiscuous mode [ 485.782450][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 485.794762][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 485.803802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 485.815832][ T296] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 485.841280][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 485.904226][ T296] usb 2-1: SerialNumber: syz [ 485.921384][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 485.929739][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 485.938198][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.946540][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 485.964231][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 485.972449][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.984087][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.993521][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 486.063929][T13744] syz.4.4729[13744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.064005][T13744] syz.4.4729[13744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.241827][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.259893][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.275790][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 486.283984][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 486.292517][ T296] usb 2-1: 0:2 : does not exist [ 486.298693][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.305532][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.315328][T13747] loop3: detected capacity change from 0 to 512 [ 486.327019][T13747] EXT4-fs (loop3): 1 truncate cleaned up [ 486.329940][ T296] usb 2-1: USB disconnect, device number 69 [ 486.332590][T13747] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 486.352938][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 486.364149][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.372155][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.380156][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.406677][ T8] device bridge_slave_1 left promiscuous mode [ 486.412715][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.420309][ T8] device bridge_slave_0 left promiscuous mode [ 486.428756][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.436903][ T8] device veth1_macvtap left promiscuous mode [ 486.442754][ T8] device veth0_vlan left promiscuous mode [ 486.609280][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 486.616840][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 486.625004][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 486.664203][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 486.680336][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.690654][T13730] device veth0_vlan entered promiscuous mode [ 486.697432][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.704619][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.717773][T13730] device veth1_macvtap entered promiscuous mode [ 486.724830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 486.736244][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.744969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 486.800328][T13759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4727'. [ 487.033327][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 487.034929][T13761] loop1: detected capacity change from 0 to 16 [ 487.041484][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 487.058168][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 487.066406][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 487.102105][T13761] erofs: (device loop1): mounted with root inode @ nid 36. [ 487.329519][T13768] loop1: detected capacity change from 0 to 512 [ 487.349053][T13768] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 487.358714][T13772] loop4: detected capacity change from 0 to 512 [ 487.369331][T13772] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 487.396693][T13772] EXT4-fs (loop4): 1 truncate cleaned up [ 487.402204][T13772] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,commit=0x0000000000000000,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 487.437410][T13768] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 487.452405][T13768] EXT4-fs (loop1): 1 truncate cleaned up [ 487.458597][T13768] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 487.600060][T13768] fuse: blksize only supported for fuseblk [ 487.606165][ T39] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 487.966075][T13787] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4734'. [ 488.015867][ T39] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 488.045913][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.059566][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.069468][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 488.155787][ T39] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 488.168858][ T39] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 488.185012][ T39] usb 3-1: Manufacturer: syz [ 488.230283][ T8] device bridge_slave_1 left promiscuous mode [ 488.237724][ T39] usb 3-1: config 0 descriptor?? [ 488.245782][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.257019][ T8] device bridge_slave_0 left promiscuous mode [ 488.265777][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.277588][ T8] device veth1_macvtap left promiscuous mode [ 488.285746][ T8] device veth0_vlan left promiscuous mode [ 488.418787][T13792] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4736'. [ 488.428453][T13792] tipc: Enabling of bearer rejected, failed to enable media [ 488.505797][ T5646] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 488.740064][ T39] appleir 0003:05AC:8243.008C: unknown main item tag 0x0 [ 488.768048][ T39] appleir 0003:05AC:8243.008C: No inputs registered, leaving [ 488.802537][ T5968] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 488.824786][ T39] appleir 0003:05AC:8243.008C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 488.926426][ T5646] usb 4-1: Using ep0 maxpacket: 8 [ 489.065793][ T5968] usb 2-1: Using ep0 maxpacket: 16 [ 489.136831][ T5646] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.185074][ T5646] usb 4-1: config 1 interface 0 has no altsetting 0 [ 489.208963][T13802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4722'. [ 489.232056][ T5646] usb 4-1: language id specifier not provided by device, defaulting to English [ 489.355967][ T5646] usb 4-1: New USB device found, idVendor=046d, idProduct=4101, bcdDevice= 0.40 [ 489.365215][ T5646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.375772][ T5968] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 489.386692][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.396045][ T5646] usb 4-1: Product: 䥯繦យꗧ罭ꈧ镂阑殺褤㛠塿㮓Ҳ䅎厹㯷飅곒員㛑怨뢊趆謊â¯ë†µâœ¨à´’꧇뉯ਜ਼ﬞî‡âŽé ¥æ€®å•‰ [ 489.413724][ T5968] usb 2-1: Product: syz [ 489.417850][ T5968] usb 2-1: Manufacturer: syz [ 489.422294][ T5968] usb 2-1: SerialNumber: syz [ 489.426871][ T5646] usb 4-1: Manufacturer: Ñ„ [ 489.432261][ T5968] r8152-cfgselector 2-1: config 0 descriptor?? [ 489.438464][ T5646] usb 4-1: SerialNumber: à°Š [ 490.095831][ T5646] usbhid 4-1:1.0: can't add hid device: -71 [ 490.101609][ T5646] usbhid: probe of 4-1:1.0 failed with error -71 [ 490.117417][ T5646] usb 4-1: USB disconnect, device number 71 [ 490.426862][T13809] loop3: detected capacity change from 0 to 16 [ 490.496257][T13809] erofs: (device loop3): mounted with root inode @ nid 36. [ 490.621631][T13811] loop3: detected capacity change from 0 to 512 [ 490.634048][T13813] loop2: detected capacity change from 0 to 512 [ 490.689851][T13813] EXT4-fs (loop2): Ignoring removed orlov option [ 490.719753][T13813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002] [ 490.728089][T13811] EXT4-fs (loop3): 1 truncate cleaned up [ 490.733533][T13811] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 490.745099][T13813] System zones: 1-12 [ 490.752586][T13813] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4743: casefold flag without casefold feature [ 490.809715][T13813] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.4743: missing EA_INODE flag [ 490.824295][T13813] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.4743: error while reading EA inode 12 err=-117 [ 490.837280][T13813] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.4743: missing EA_INODE flag [ 490.852118][T13813] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.4743: error while reading EA inode 12 err=-117 [ 490.864853][T13813] EXT4-fs (loop2): 1 orphan inode deleted [ 490.870981][T13813] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,abort,debug_want_extra_isize=0x000000000000005c,debug,noinit_itable,errors=continue,usrjquota=,orlov,minixdf,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 490.871042][ T907] usb 3-1: USB disconnect, device number 68 [ 491.018011][T13813] EXT4-fs (loop2): shut down requested (0) [ 491.095773][ T5968] r8152-cfgselector 2-1: Unknown version 0x0000 [ 491.115752][ T5968] r8152-cfgselector 2-1: Unknown version 0x0000 [ 491.135776][ T5968] r8152-cfgselector 2-1: bad CDC descriptors [ 491.167300][ T5968] r8152-cfgselector 2-1: Unknown version 0x0000 [ 491.184098][ T5968] r8152-cfgselector 2-1: USB disconnect, device number 70 [ 491.189314][T13830] loop1: detected capacity change from 0 to 1024 [ 491.228391][T13830] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 491.248771][T13830] EXT4-fs (loop1): write access will be enabled during recovery [ 491.261405][T13830] JBD2: no valid journal superblock found [ 491.271148][T13830] EXT4-fs (loop1): error loading journal [ 491.371534][T13830] tmpfs: Bad value for 'size' [ 491.378170][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4747'. [ 491.401703][T13830] loop1: detected capacity change from 0 to 512 [ 491.466109][T13831] loop2: detected capacity change from 0 to 40427 [ 491.485894][T13830] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 491.496173][T13830] EXT4-fs (loop1): Ignoring removed nobh option [ 491.505785][T13830] EXT4-fs (loop1): Unrecognized mount option "obj_user=‘*å¤Xr:ƒšŸ­p8¬" or missing value [ 491.566524][T13831] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 491.576558][T13831] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 491.626527][T13831] F2FS-fs (loop2): Found nat_bits in checkpoint [ 491.683377][T13831] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 491.693239][T13831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 492.056473][ T30] audit: type=1400 audit(2000000074.152:1614): avc: denied { setopt } for pid=13848 comm="syz.1.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 492.107353][T13831] syz.2.4748[13831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.107434][T13831] syz.2.4748[13831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.375727][ T5968] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 492.430273][T13865] device syzkaller0 entered promiscuous mode [ 492.730126][T13875] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 492.886662][ T5968] usb 2-1: Using ep0 maxpacket: 8 [ 493.005813][ T5968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 493.032466][T13888] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4768'. [ 493.034504][ T5968] usb 2-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 493.072321][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.096302][ T5968] usb 2-1: config 0 descriptor?? [ 493.115914][ T30] audit: type=1400 audit(2000000075.202:1615): avc: denied { getopt } for pid=13891 comm="syz.2.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 493.136209][ T5968] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 493.203103][T13896] device syzkaller0 entered promiscuous mode [ 493.342306][ T875] usb 2-1: USB disconnect, device number 71 [ 493.438570][T13910] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4779'. [ 493.517963][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4782'. [ 493.535747][T13928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4785'. [ 493.775711][ T907] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 494.086546][T13935] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 494.329545][T13939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4791'. [ 494.342581][T13939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4791'. [ 494.375744][ T907] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 494.395707][ T907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.406474][ T907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.415961][ T907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 494.505764][ T907] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 494.516203][ T907] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 494.529208][ T907] usb 3-1: Manufacturer: syz [ 494.536532][ T907] usb 3-1: config 0 descriptor?? [ 494.826199][T13949] loop1: detected capacity change from 0 to 2048 [ 494.912954][T13949] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 494.957771][T13949] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 495.026731][ T907] appleir 0003:05AC:8243.008D: unknown main item tag 0x0 [ 495.034920][ T907] appleir 0003:05AC:8243.008D: No inputs registered, leaving [ 495.053389][ T907] appleir 0003:05AC:8243.008D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 495.291019][T13967] loop3: detected capacity change from 0 to 256 [ 495.383056][T13967] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 495.555695][ T5646] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 495.597558][T13972] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.604454][T13972] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.611782][T13972] device bridge_slave_0 entered promiscuous mode [ 495.628392][T13972] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.635230][T13972] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.647648][T13972] device bridge_slave_1 entered promiscuous mode [ 495.747397][T13972] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.754269][T13972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.761378][T13972] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.768161][T13972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.805721][ T5646] usb 2-1: Using ep0 maxpacket: 8 [ 495.814351][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.821983][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.829328][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.849264][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.857567][ T1769] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.864400][ T1769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.872547][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.880541][ T1769] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.887393][ T1769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.894698][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 495.919485][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.934968][T13972] device veth0_vlan entered promiscuous mode [ 495.935838][ T5646] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 495.946277][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.958288][ T5646] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 495.966007][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 495.974997][ T5646] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 495.986015][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 495.993920][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.002268][ T5646] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.011722][T13972] device veth1_macvtap entered promiscuous mode [ 496.028480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.029434][ T5646] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 496.049786][ T5646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.065567][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.081747][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 496.206313][ T8] device bridge_slave_1 left promiscuous mode [ 496.213391][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.237167][ T8] device bridge_slave_0 left promiscuous mode [ 496.249628][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.262140][ T8] device veth1_macvtap left promiscuous mode [ 496.270463][ T8] device veth0_vlan left promiscuous mode [ 496.697472][T13994] loop3: detected capacity change from 0 to 256 [ 496.798030][T13994] exFAT-fs (loop3): failed to load alloc-bitmap [ 496.805718][T13994] exFAT-fs (loop3): failed to recognize exfat type [ 496.989484][T14001] binder: BINDER_SET_CONTEXT_MGR already set [ 497.007666][T14001] binder: 13996:14001 ioctl 4018620d 20000040 returned -16 [ 497.166014][ T907] usb 3-1: USB disconnect, device number 69 [ 497.206425][T14017] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14017 comm=syz.3.4818 [ 497.490776][T14022] loop3: detected capacity change from 0 to 512 [ 497.565309][T14022] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 497.580539][T14024] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.590567][T14024] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.596471][T14022] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 497.600916][T14024] device bridge_slave_0 entered promiscuous mode [ 497.614046][T14024] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.614113][T14039] binder: BINDER_SET_CONTEXT_MGR already set [ 497.621019][T14024] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.633833][T14039] binder: 14035:14039 ioctl 4018620d 20000040 returned -16 [ 497.644919][T14024] device bridge_slave_1 entered promiscuous mode [ 497.835514][T14024] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.842410][T14024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.849527][T14024] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.856376][T14024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.908246][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.916561][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.985022][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 497.992426][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.011229][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.021175][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.028041][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.035463][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.043475][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.050328][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.061583][T14055] loop2: detected capacity change from 0 to 512 [ 498.067760][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.075526][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.097610][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 498.106080][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 498.113939][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 498.122134][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 498.129545][T14024] device veth0_vlan entered promiscuous mode [ 498.142650][T14024] device veth1_macvtap entered promiscuous mode [ 498.151301][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.166499][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.167524][T14055] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nobarrier,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 498.174886][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.208378][T14055] ext4 filesystem being mounted at /28/bus supports timestamps until 2038 (0x7fffffff) [ 498.296985][ T907] usb 2-1: USB disconnect, device number 72 [ 498.412373][T14067] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4836'. [ 498.719304][T14088] overlayfs: statfs failed on './file0' [ 500.586557][T14102] loop2: detected capacity change from 0 to 512 [ 500.635519][T14098] loop3: detected capacity change from 0 to 8192 [ 500.673085][T14102] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 500.686108][T14102] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4851: invalid indirect mapped block 8 (level 2) [ 500.728070][T14102] EXT4-fs (loop2): 1 truncate cleaned up [ 500.733536][T14102] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,journal_dev=0x0000000000009676,barrier=0x0000000000000004,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4,errors=continue. Quota mode: writeback. [ 500.853240][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4854'. [ 500.966552][ T30] audit: type=1400 audit(2000000083.061:1616): avc: denied { read } for pid=14132 comm="syz.1.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 501.255694][ T26] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 501.345750][ T650] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 501.495740][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 501.585772][ T650] usb 5-1: Using ep0 maxpacket: 8 [ 501.615742][ T26] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 501.624675][ T26] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 501.638348][ T26] usb 3-1: config 0 has an invalid interface number: 49 but max is 2 [ 501.650703][ T26] usb 3-1: config 0 has no interface number 0 [ 501.789255][T14160] loop1: detected capacity change from 0 to 512 [ 501.811549][ T26] usb 3-1: config 0 has no interface number 1 [ 501.817471][ T26] usb 3-1: config 0 has no interface number 2 [ 501.823496][ T26] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 501.832461][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.845726][ T650] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.855624][ T650] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 501.856046][ T26] usb 3-1: config 0 descriptor?? [ 501.869692][ T650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.878288][ T650] usb 5-1: config 0 descriptor?? [ 501.935308][T14160] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 501.962739][T14160] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038 (0x7fffffff) [ 502.148765][ T907] usb 3-1: USB disconnect, device number 70 [ 502.166765][ T26] usb 5-1: USB disconnect, device number 72 [ 502.562474][T14178] loop1: detected capacity change from 0 to 40427 [ 502.659337][T14178] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 502.677083][T14178] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 502.708647][T14178] F2FS-fs (loop1): invalid crc value [ 502.715170][T14184] loop3: detected capacity change from 0 to 40427 [ 502.746516][T14178] F2FS-fs (loop1): Found nat_bits in checkpoint [ 502.786794][T14184] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 502.794355][T14184] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 502.812703][T14178] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 502.820698][T14178] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 502.867167][T14184] F2FS-fs (loop3): Found nat_bits in checkpoint [ 502.872252][T14178] attempt to access beyond end of device [ 502.872252][T14178] loop1: rw=2049, want=45224, limit=40427 [ 502.894267][T14178] attempt to access beyond end of device [ 502.894267][T14178] loop1: rw=34817, want=45224, limit=40427 [ 502.915220][T14178] attempt to access beyond end of device [ 502.915220][T14178] loop1: rw=2049, want=45224, limit=40427 [ 502.947009][T14184] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 502.953878][T14184] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 502.956350][T14178] attempt to access beyond end of device [ 502.956350][T14178] loop1: rw=2049, want=78240, limit=40427 [ 503.257102][ T368] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 503.324805][ T368] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 503.656028][T14232] loop3: detected capacity change from 0 to 256 [ 503.664834][T14234] loop1: detected capacity change from 0 to 512 [ 503.745633][T14232] FAT-fs (loop3): Directory bread(block 64) failed [ 503.785697][T14232] FAT-fs (loop3): Directory bread(block 65) failed [ 503.792057][T14232] FAT-fs (loop3): Directory bread(block 66) failed [ 503.804636][T14234] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 503.856169][T14232] FAT-fs (loop3): Directory bread(block 67) failed [ 503.862562][T14232] FAT-fs (loop3): Directory bread(block 68) failed [ 503.891786][T14232] FAT-fs (loop3): Directory bread(block 69) failed [ 503.912417][T14232] FAT-fs (loop3): Directory bread(block 70) failed [ 503.918960][T14232] FAT-fs (loop3): Directory bread(block 71) failed [ 503.928317][T14232] FAT-fs (loop3): Directory bread(block 72) failed [ 503.933042][T14234] EXT4-fs (loop1): 1 truncate cleaned up [ 503.934676][T14232] FAT-fs (loop3): Directory bread(block 73) failed [ 503.942651][T14234] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 504.179549][T14260] input: syz1 as /devices/virtual/input/input87 [ 504.439242][ T30] audit: type=1326 audit(2000000086.531:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14259 comm="syz.4.4908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3591ccebd9 code=0x0 [ 504.881584][ T30] audit: type=1400 audit(2000000086.971:1618): avc: denied { shutdown } for pid=14273 comm="syz.2.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.992215][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4916'. [ 505.013207][T14258] loop1: detected capacity change from 0 to 40427 [ 505.260662][T14258] F2FS-fs (loop1): Found nat_bits in checkpoint [ 505.366560][T14258] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 505.391338][T14258] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 505.458951][T13168] attempt to access beyond end of device [ 505.458951][T13168] loop1: rw=2049, want=45104, limit=40427 [ 505.652403][T14303] loop2: detected capacity change from 0 to 512 [ 505.675731][ T5968] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 505.752358][T14303] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 505.796299][T14303] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 505.955744][ T5968] usb 5-1: Using ep0 maxpacket: 8 [ 505.969410][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4929'. [ 506.582334][ T5968] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 506.589806][ T5968] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 506.600947][ T5968] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 506.688536][ T5968] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 506.701057][ T5968] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 506.744198][ T5968] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 506.820728][T14350] loop3: detected capacity change from 0 to 8192 [ 506.855752][ T5968] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 506.865198][ T5968] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 506.881370][ T5968] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 507.095847][ T311] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 507.155805][ T5968] usb 5-1: string descriptor 0 read error: -22 [ 507.162151][ T5968] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 507.182572][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.365719][ T311] usb 2-1: device descriptor read/64, error -71 [ 507.456804][ T5968] usb 5-1: USB disconnect, device number 73 [ 507.527017][T14360] loop2: detected capacity change from 0 to 40427 [ 507.559810][T14360] F2FS-fs (loop2): Found nat_bits in checkpoint [ 507.621160][T14360] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 507.646250][T14360] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 507.755774][ T311] usb 2-1: device descriptor read/64, error -71 [ 508.222913][ T311] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 508.295707][ T520] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 508.495703][ T311] usb 2-1: device descriptor read/64, error -71 [ 508.535716][ T520] usb 3-1: Using ep0 maxpacket: 32 [ 508.655872][ T520] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.673951][ T520] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 508.714410][ T520] usb 3-1: config 1 interface 0 altsetting 60 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.734226][ T520] usb 3-1: config 1 interface 0 has no altsetting 0 [ 508.772469][T14400] netlink: 'syz.3.4955': attribute type 9 has an invalid length. [ 508.789388][T14400] netlink: 'syz.3.4955': attribute type 7 has an invalid length. [ 508.805801][T14400] netlink: 'syz.3.4955': attribute type 8 has an invalid length. [ 508.905759][ T311] usb 2-1: device descriptor read/64, error -71 [ 508.911950][ T520] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.924924][ T520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.943121][ T520] usb 3-1: Product: syz [ 508.947358][ T520] usb 3-1: Manufacturer: syz [ 508.951759][ T520] usb 3-1: SerialNumber: syz [ 509.035262][ T30] audit: type=1400 audit(2000000091.121:1619): avc: denied { shutdown } for pid=14408 comm="syz.3.4959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.055775][ T311] usb usb2-port1: attempt power cycle [ 509.467165][ T311] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 509.475945][ T520] usb 3-1: USB disconnect, device number 71 [ 509.636074][ T311] usb 2-1: device descriptor read/8, error -71 [ 509.905734][ T311] usb 2-1: device descriptor read/8, error -71 [ 510.234796][T14434] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4966'. [ 510.637530][T14459] loop2: detected capacity change from 0 to 8192 [ 511.526230][ T30] audit: type=1326 audit(2000000093.621:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac10cdbd9 code=0x7ffc0000 [ 511.560901][ T30] audit: type=1326 audit(2000000093.621:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac10cdbd9 code=0x7ffc0000 [ 511.632639][ T30] audit: type=1326 audit(2000000093.651:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f0ac10cdbd9 code=0x7ffc0000 [ 511.656851][ T30] audit: type=1326 audit(2000000093.651:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac10cdbd9 code=0x7ffc0000 [ 511.680685][ T30] audit: type=1326 audit(2000000093.651:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac10cdbd9 code=0x7ffc0000 [ 511.762528][T14497] loop1: detected capacity change from 0 to 512 [ 511.769471][T14499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 511.778332][T14496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4990'. [ 511.878228][T14497] EXT4-fs (loop1): filesystem is read-only [ 511.912164][T14501] loop3: detected capacity change from 0 to 8192 [ 512.046403][T14485] loop1: detected capacity change from 0 to 128 [ 512.117009][T14485] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 512.135844][T14485] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 512.714928][ T30] audit: type=1400 audit(2000000094.801:1625): avc: denied { getopt } for pid=14531 comm="syz.4.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 513.167869][ T30] audit: type=1400 audit(2000000095.261:1626): avc: denied { read } for pid=14545 comm="syz.2.5009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.742128][T14567] loop1: detected capacity change from 0 to 256 [ 513.920189][ T30] audit: type=1400 audit(2000000096.011:1627): avc: denied { nlmsg_write } for pid=14566 comm="syz.4.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 514.155867][T14571] loop1: detected capacity change from 0 to 1024 [ 514.182350][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5023'. [ 514.192711][T14579] device bridge_slave_1 left promiscuous mode [ 514.203913][T14585] loop3: detected capacity change from 0 to 1024 [ 514.210215][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.217324][T14571] EXT4-fs (loop1): Unrecognized mount option "fsname=errors=remount-ro" or missing value [ 514.231026][T14579] device bridge_slave_0 left promiscuous mode [ 514.245909][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.246370][T14585] EXT4-fs (loop3): Ignoring removed orlov option [ 514.265877][T14585] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 514.531183][T14585] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 514.692234][ T30] audit: type=1400 audit(2000000096.781:1628): avc: denied { rename } for pid=14583 comm="syz.3.5025" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 515.113206][T14610] loop3: detected capacity change from 0 to 512 [ 515.206707][T14610] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 515.291169][T14610] EXT4-fs (loop3): 1 truncate cleaned up [ 515.299301][T14610] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 515.337810][T14610] overlayfs: missing 'lowerdir' [ 515.785958][T14623] loop2: detected capacity change from 0 to 40427 [ 515.795588][T14633] loop1: detected capacity change from 0 to 1024 [ 515.807340][T14633] EXT4-fs (loop1): Ignoring removed orlov option [ 515.813527][T14633] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 515.831871][T14633] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 515.855163][T14623] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 515.864822][T14623] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 515.900554][T14623] F2FS-fs (loop2): Found nat_bits in checkpoint [ 515.985039][T14623] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 515.995056][T14623] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 516.732185][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.744584][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.762160][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.776600][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.790979][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.805387][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.819794][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.834183][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.849604][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.857096][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.864326][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.871736][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.879086][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.886453][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.893667][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.901066][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.908534][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.916022][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.923279][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.934566][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.944862][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.956179][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.967472][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.977746][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 516.989043][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 517.000367][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 517.023962][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 517.045709][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 517.065507][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 517.085017][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 517.115260][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 517.135408][ T907] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 517.146079][ T907] hid-generic 0000:0000:0000.008E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 517.415682][ T296] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 517.785735][ T296] usb 4-1: config 0 has no interfaces? [ 517.791089][ T296] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 517.811288][ T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.832878][ T296] usb 4-1: config 0 descriptor?? [ 517.961534][T14670] loop1: detected capacity change from 0 to 40427 [ 518.026491][T14670] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 518.035723][T14670] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 518.055207][T14670] F2FS-fs (loop1): invalid crc value [ 518.087468][T14670] F2FS-fs (loop1): Found nat_bits in checkpoint [ 518.353098][T14670] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 518.363780][T14670] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 518.405317][ T368] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 518.423249][ T368] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 518.937117][ T650] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 519.295800][ T650] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 519.309866][ T650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.332971][ T650] usb 2-1: config 0 descriptor?? [ 519.737108][ T650] usb 4-1: USB disconnect, device number 72 [ 519.771699][T14713] loop3: detected capacity change from 0 to 512 [ 519.856270][T14713] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 519.896296][T14713] EXT4-fs (loop3): 1 truncate cleaned up [ 519.901851][T14713] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 520.045833][ T39] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 520.405788][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.435770][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.474766][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.493960][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.504297][ T39] usb 5-1: config 0 descriptor?? [ 520.652433][ T311] usb 2-1: USB disconnect, device number 77 [ 521.306767][ T354] device bridge_slave_1 left promiscuous mode [ 521.314932][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.359091][ T354] device bridge_slave_0 left promiscuous mode [ 521.381211][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.405868][ T354] device veth1_macvtap left promiscuous mode [ 521.424702][ T354] device veth0_vlan left promiscuous mode [ 521.597423][ T39] plantronics 0003:047F:FFFF.008F: No inputs registered, leaving [ 521.611467][ T39] plantronics 0003:047F:FFFF.008F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 521.882337][T14762] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.897924][T14762] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.917379][T14762] device bridge_slave_0 entered promiscuous mode [ 521.957285][T14762] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.964160][T14762] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.978985][T14762] device bridge_slave_1 entered promiscuous mode [ 522.031561][T14763] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.040490][T14623] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 522.042779][T14763] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.050730][T14623] attempt to access beyond end of device [ 522.050730][T14623] loop2: rw=524288, want=57352, limit=40427 [ 522.067521][T14623] attempt to access beyond end of device [ 522.067521][T14623] loop2: rw=524288, want=57360, limit=40427 [ 522.072082][T14763] device bridge_slave_0 entered promiscuous mode [ 522.078766][T14623] attempt to access beyond end of device [ 522.078766][T14623] loop2: rw=524288, want=57368, limit=40427 [ 522.096175][T14623] attempt to access beyond end of device [ 522.096175][T14623] loop2: rw=524288, want=57376, limit=40427 [ 522.107452][T14623] attempt to access beyond end of device [ 522.107452][T14623] loop2: rw=524288, want=57384, limit=40427 [ 522.118687][T14623] attempt to access beyond end of device [ 522.118687][T14623] loop2: rw=524288, want=57392, limit=40427 [ 522.129962][T14623] attempt to access beyond end of device [ 522.129962][T14623] loop2: rw=524288, want=57400, limit=40427 [ 522.134527][T14763] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.141161][T14623] attempt to access beyond end of device [ 522.141161][T14623] loop2: rw=524288, want=57408, limit=40427 [ 522.151409][T14763] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.159223][T14623] attempt to access beyond end of device [ 522.159223][T14623] loop2: rw=524288, want=57416, limit=40427 [ 522.177282][T14623] attempt to access beyond end of device [ 522.177282][T14623] loop2: rw=524288, want=57424, limit=40427 [ 522.189071][T14763] device bridge_slave_1 entered promiscuous mode [ 522.333868][ T650] usb 5-1: USB disconnect, device number 74 [ 522.379942][T14762] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.386812][T14762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.393916][T14762] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.400708][T14762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.486548][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.493935][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.504594][T14782] loop1: detected capacity change from 0 to 512 [ 522.511961][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.546345][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.554427][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.585841][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.604429][T14762] device veth0_vlan entered promiscuous mode [ 522.617294][T14782] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 522.628322][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 522.653268][T14762] device veth1_macvtap entered promiscuous mode [ 522.661167][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.668918][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 522.676191][T14782] EXT4-fs (loop1): 1 truncate cleaned up [ 522.677328][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 522.682341][T14782] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 522.689583][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 522.706775][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.714747][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.721594][ T907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.745922][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 522.755998][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 522.766077][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 522.785203][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.793378][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.800237][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.812431][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.825700][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 522.833594][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.880259][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 522.901262][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.928193][T14763] device veth0_vlan entered promiscuous mode [ 522.941364][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 522.966038][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 522.979670][T14763] device veth1_macvtap entered promiscuous mode [ 523.012231][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.026170][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.045426][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.056739][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.067549][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 523.075576][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 523.084679][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 523.093481][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 523.143129][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.498341][ T8] tipc: Disabling bearer [ 523.503531][ T8] tipc: Left network mode [ 523.647910][T14813] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 523.740865][T14816] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.845694][T14816] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.853038][T14816] device bridge_slave_0 entered promiscuous mode [ 523.952402][T14816] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.966527][T14816] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.012595][T14816] device bridge_slave_1 entered promiscuous mode [ 524.043505][T14829] loop3: detected capacity change from 0 to 512 [ 524.146069][T14829] EXT4-fs error (device loop3): ext4_fill_super:4831: inode #2: comm syz.3.5104: casefold flag without casefold feature [ 524.176837][T14829] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 524.187050][T14822] device wg2 entered promiscuous mode [ 524.196750][T14829] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 524.401472][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 524.427872][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.500404][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 524.514405][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.537231][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.544085][ T907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.575748][T13601] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 524.589118][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.618919][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 524.638499][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.661310][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.668181][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.700502][ T8] device bridge_slave_1 left promiscuous mode [ 524.709510][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.793832][ T8] device bridge_slave_0 left promiscuous mode [ 524.808700][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.828858][ T8] device veth1_macvtap left promiscuous mode [ 524.861964][ T8] device veth0_vlan left promiscuous mode [ 525.016299][T13601] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 525.335483][T13601] usb 4-1: config 0 has no interface number 0 [ 525.349667][T13601] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid maxpacket 57964, setting to 1024 [ 525.386184][T13601] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice=15.b4 [ 525.435233][T13601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.468895][T13601] usb 4-1: config 0 descriptor?? [ 525.546217][T13601] usbhid 4-1:0.32: couldn't find an input interrupt endpoint [ 525.636959][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.644727][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.701244][T14816] device veth0_vlan entered promiscuous mode [ 525.723957][T14816] device veth1_macvtap entered promiscuous mode [ 525.839037][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.857466][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.867076][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.874821][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.883147][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 525.891256][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.900028][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 525.908431][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.919252][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.929291][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 525.943830][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.981231][T14862] netlink: 'syz.3.5104': attribute type 16 has an invalid length. [ 525.989079][T14862] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.5104'. [ 526.011262][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 526.021589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 526.197452][ T30] audit: type=1326 audit(2000000108.291:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ef6c5bd9 code=0x7ffc0000 [ 526.400144][T14852] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.417396][ T30] audit: type=1326 audit(2000000108.321:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32ef6c5bd9 code=0x7ffc0000 [ 526.449674][T14852] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.462353][T14852] device bridge_slave_0 entered promiscuous mode [ 526.471849][ T30] audit: type=1326 audit(2000000108.321:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ef6c5bd9 code=0x7ffc0000 [ 526.496424][ T30] audit: type=1326 audit(2000000108.321:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32ef6c5bd9 code=0x7ffc0000 [ 526.522500][T14852] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.538177][T14852] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.548263][ T30] audit: type=1326 audit(2000000108.321:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ef6c5bd9 code=0x7ffc0000 [ 526.718302][ T30] audit: type=1326 audit(2000000108.331:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32ef6c5bd9 code=0x7ffc0000 [ 526.736144][T14852] device bridge_slave_1 entered promiscuous mode [ 526.748873][ T30] audit: type=1326 audit(2000000108.331:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ef6c5bd9 code=0x7ffc0000 [ 527.664980][T14623] handle_bad_sector: 50799 callbacks suppressed [ 527.664996][T14623] attempt to access beyond end of device [ 527.664996][T14623] loop2: rw=524288, want=58320, limit=40427 [ 527.685880][ T6] usb 4-1: USB disconnect, device number 73 [ 527.685910][T14623] attempt to access beyond end of device [ 527.685910][T14623] loop2: rw=524288, want=58328, limit=40427 [ 527.735497][ T30] audit: type=1326 audit(2000000108.331:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f32ef6c5bd9 code=0x7ffc0000 [ 527.745711][T14623] attempt to access beyond end of device [ 527.745711][T14623] loop2: rw=524288, want=58336, limit=40427 [ 527.781995][ T30] audit: type=1326 audit(2000000108.351:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ef6c5bd9 code=0x7ffc0000 [ 527.791448][T14623] attempt to access beyond end of device [ 527.791448][T14623] loop2: rw=524288, want=58344, limit=40427 [ 527.872465][T14623] attempt to access beyond end of device [ 527.872465][T14623] loop2: rw=524288, want=58352, limit=40427 [ 527.904130][T14623] attempt to access beyond end of device [ 527.904130][T14623] loop2: rw=524288, want=58360, limit=40427 [ 527.936146][ T30] audit: type=1326 audit(2000000108.351:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32ef6c5bd9 code=0x7ffc0000 [ 527.972357][T14897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5126'. [ 527.977940][T14623] attempt to access beyond end of device [ 527.977940][T14623] loop2: rw=524288, want=58368, limit=40427 [ 528.014467][T14623] attempt to access beyond end of device [ 528.014467][T14623] loop2: rw=524288, want=58376, limit=40427 [ 528.030979][T14905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5131'. [ 528.035975][T14623] attempt to access beyond end of device [ 528.035975][T14623] loop2: rw=524288, want=58384, limit=40427 [ 528.056318][T14623] attempt to access beyond end of device [ 528.056318][T14623] loop2: rw=524288, want=58392, limit=40427 [ 528.128519][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 528.146232][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 528.211542][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 528.230946][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 528.278439][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 528.343948][T13601] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.350834][T13601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.394247][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 528.424601][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 528.453854][T13601] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.460720][T13601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.540125][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 528.567420][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 528.611485][T14927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5138'. [ 528.772510][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 528.793412][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 528.899541][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.919929][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 529.058608][T14852] device veth0_vlan entered promiscuous mode [ 529.086460][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 529.093706][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 529.101044][T14940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5142'. [ 529.148766][ T8] device bridge_slave_1 left promiscuous mode [ 529.154709][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.195827][ T8] device bridge_slave_0 left promiscuous mode [ 529.201769][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.279579][ T8] device veth1_macvtap left promiscuous mode [ 529.315951][ T8] device veth0_vlan left promiscuous mode [ 529.465258][T14934] loop3: detected capacity change from 0 to 40427 [ 529.559619][T14934] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 529.574221][T14852] device veth1_macvtap entered promiscuous mode [ 529.584720][T14934] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 529.609113][T14934] F2FS-fs (loop3): invalid crc value [ 529.611441][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5148'. [ 529.645734][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 529.669132][T14934] F2FS-fs (loop3): Found nat_bits in checkpoint [ 529.676061][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 529.684033][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 529.792076][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 529.806509][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.814644][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 529.839118][T14934] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 529.846296][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.848998][T14934] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 529.870825][T14916] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.901131][T14916] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.935163][T14916] device bridge_slave_0 entered promiscuous mode [ 529.947620][T14916] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.964571][T14916] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.972215][T14762] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 529.972234][T14762] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 529.976516][T14916] device bridge_slave_1 entered promiscuous mode [ 529.995741][T14762] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 529.995757][T14762] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 530.003135][T14762] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 530.020127][T14762] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 530.050626][T14762] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 530.229153][T14916] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.243375][T14916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.385809][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.424212][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 530.440187][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.457645][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 530.483866][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 530.514586][T13601] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.521470][T13601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.567787][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 530.575582][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 530.699280][T14966] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 530.847086][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 530.859379][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 530.889623][T14916] device veth0_vlan entered promiscuous mode [ 530.896533][T14966] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 530.908278][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 530.917112][ T875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 530.935712][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 530.945042][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 530.961861][T14916] device veth1_macvtap entered promiscuous mode [ 530.978639][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 530.999493][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 531.015936][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 531.106391][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 531.120892][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 531.180729][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 531.190937][T13601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 531.216461][ T8] device bridge_slave_1 left promiscuous mode [ 531.223470][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.248090][ T8] device bridge_slave_0 left promiscuous mode [ 531.261222][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.278414][ T8] device veth1_macvtap left promiscuous mode [ 531.291423][ T8] device veth0_vlan left promiscuous mode [ 531.361801][T14995] loop3: detected capacity change from 0 to 512 [ 531.406176][T14995] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 531.463591][T14995] EXT4-fs (loop3): 1 truncate cleaned up [ 531.473883][T14995] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 531.904805][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 531.904820][ T30] audit: type=1400 audit(2000000113.991:1695): avc: denied { checkpoint_restore } for pid=15006 comm="syz.4.5163" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 531.996488][ T30] audit: type=1400 audit(2000000114.061:1696): avc: denied { create } for pid=15018 comm="syz.2.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 532.058529][T15012] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.065376][T15012] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.080698][T15012] device bridge_slave_0 entered promiscuous mode [ 532.093336][T15012] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.107207][T15012] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.120710][T15012] device bridge_slave_1 entered promiscuous mode [ 532.246002][ T650] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 532.495718][ T650] usb 3-1: Using ep0 maxpacket: 32 [ 532.616040][ T650] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.648035][ T650] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.668671][T14623] handle_bad_sector: 31654 callbacks suppressed [ 532.668688][T14623] attempt to access beyond end of device [ 532.668688][T14623] loop2: rw=524288, want=57680, limit=40427 [ 532.674542][ T650] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 532.702362][T14623] attempt to access beyond end of device [ 532.702362][T14623] loop2: rw=524288, want=57688, limit=40427 [ 532.724759][T14623] attempt to access beyond end of device [ 532.724759][T14623] loop2: rw=524288, want=57696, limit=40427 [ 532.728029][ T650] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 532.757902][T14623] attempt to access beyond end of device [ 532.757902][T14623] loop2: rw=524288, want=57704, limit=40427 [ 532.766936][ T650] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 532.790590][T14623] attempt to access beyond end of device [ 532.790590][T14623] loop2: rw=524288, want=57712, limit=40427 [ 532.800109][ T650] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 532.815963][T14623] attempt to access beyond end of device [ 532.815963][T14623] loop2: rw=524288, want=57720, limit=40427 [ 532.885641][T15012] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.892499][T15012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.899651][T15012] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.906419][T15012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.927210][T14623] attempt to access beyond end of device [ 532.927210][T14623] loop2: rw=524288, want=57728, limit=40427 [ 532.975770][T14623] attempt to access beyond end of device [ 532.975770][T14623] loop2: rw=524288, want=57736, limit=40427 [ 532.994747][T14623] attempt to access beyond end of device [ 532.994747][T14623] loop2: rw=524288, want=57744, limit=40427 [ 533.023392][T14623] attempt to access beyond end of device [ 533.023392][T14623] loop2: rw=524288, want=57752, limit=40427 [ 533.035605][ T686] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.044998][ T686] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.107353][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 533.114621][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 533.145870][ T650] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.175729][ T650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.183533][ T650] usb 3-1: Product: syz [ 533.215694][ T650] usb 3-1: Manufacturer: syz [ 533.220108][ T650] usb 3-1: SerialNumber: syz [ 533.233231][T15012] device veth0_vlan entered promiscuous mode [ 533.241107][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 533.250231][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.257016][T15059] input: syz0 as /devices/virtual/input/input88 [ 533.264195][T14929] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.264210][T14929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.264347][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 533.297631][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 533.305774][T14929] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.312603][T14929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.331720][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 533.339674][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 533.355964][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 533.363840][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 533.371755][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.380313][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 533.395926][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 533.404819][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 533.429802][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.437321][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 533.455913][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 533.463918][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.475327][T15012] device veth1_macvtap entered promiscuous mode [ 533.483122][ T8] device bridge_slave_1 left promiscuous mode [ 533.489387][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.508999][ T8] device bridge_slave_0 left promiscuous mode [ 533.514932][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.523615][ T8] device bridge_slave_1 left promiscuous mode [ 533.535900][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.543238][ T8] device bridge_slave_0 left promiscuous mode [ 533.549769][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.563654][ T8] device bridge_slave_0 left promiscuous mode [ 533.575736][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.584150][ T8] device veth1_macvtap left promiscuous mode [ 533.595890][ T8] device veth0_vlan left promiscuous mode [ 533.606012][ T8] device veth1_macvtap left promiscuous mode [ 533.611838][ T8] device veth0_vlan left promiscuous mode [ 533.621774][ T8] device veth1_macvtap left promiscuous mode [ 533.638203][ T8] device veth0_vlan left promiscuous mode [ 534.516369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 534.526433][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 534.535906][ T650] cdc_ncm 3-1:1.0: bind() failure [ 534.543677][ T650] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 534.558609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 534.566708][ T650] cdc_ncm 3-1:1.1: bind() failure [ 534.580783][ T650] usb 3-1: USB disconnect, device number 72 [ 534.587241][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 534.595220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 534.652243][T15085] loop3: detected capacity change from 0 to 256 [ 534.674192][T15087] input: syz0 as /devices/virtual/input/input89 [ 534.741942][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5195'. [ 534.753390][T15085] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 536.441489][ T30] audit: type=1326 audit(2000000118.531:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.0.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9f69dbd9 code=0x7ffc0000 [ 536.543752][ T30] audit: type=1326 audit(2000000118.581:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.0.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e9f69dbd9 code=0x7ffc0000 [ 536.645390][ T30] audit: type=1326 audit(2000000118.581:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.0.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9f69dbd9 code=0x7ffc0000 [ 537.661748][ T30] audit: type=1326 audit(2000000118.581:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.0.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5e9f69dbd9 code=0x7ffc0000 [ 537.705613][T14623] handle_bad_sector: 36066 callbacks suppressed [ 537.705634][T14623] attempt to access beyond end of device [ 537.705634][T14623] loop2: rw=0, want=57520, limit=40427 [ 539.394606][ T30] audit: type=1326 audit(2000000118.581:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.0.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9f69dbd9 code=0x7ffc0000 [ 539.422618][T14623] attempt to access beyond end of device [ 539.422618][T14623] loop2: rw=0, want=57528, limit=40427 [ 539.443394][T15140] sit: Dst spoofed 0.0.0.0/2002::5efe:191.216.165.221 -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:1a9a [ 539.454805][T14623] attempt to access beyond end of device [ 539.454805][T14623] loop2: rw=0, want=57536, limit=40427 [ 539.476485][T14623] attempt to access beyond end of device [ 539.476485][T14623] loop2: rw=0, want=57544, limit=40427 [ 539.488963][ T30] audit: type=1326 audit(2000000118.681:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350808abd9 code=0x7ffc0000 [ 539.548314][T14623] attempt to access beyond end of device [ 539.548314][T14623] loop2: rw=0, want=57552, limit=40427 [ 539.575833][ T30] audit: type=1326 audit(2000000118.681:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f350808abd9 code=0x7ffc0000 [ 539.640079][T14623] attempt to access beyond end of device [ 539.640079][T14623] loop2: rw=0, want=57560, limit=40427 [ 539.666850][ T30] audit: type=1326 audit(2000000118.681:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350808abd9 code=0x7ffc0000 [ 539.695705][ T296] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 539.725734][T14623] attempt to access beyond end of device [ 539.725734][T14623] loop2: rw=0, want=57568, limit=40427 [ 539.735728][ T30] audit: type=1326 audit(2000000118.681:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f350808abd9 code=0x7ffc0000 [ 539.757477][T14623] attempt to access beyond end of device [ 539.757477][T14623] loop2: rw=0, want=57576, limit=40427 [ 539.935069][ T30] audit: type=1326 audit(2000000118.681:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350808abd9 code=0x7ffc0000 [ 540.014145][ T30] audit: type=1326 audit(2000000118.681:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f350808abd9 code=0x7ffc0000 [ 540.046175][ T30] audit: type=1326 audit(2000000118.681:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350808abd9 code=0x7ffc0000 [ 540.046493][T14623] attempt to access beyond end of device [ 540.046493][T14623] loop2: rw=0, want=57584, limit=40427 [ 540.077927][ T30] audit: type=1326 audit(2000000118.681:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f350808abd9 code=0x7ffc0000 [ 540.095887][T14623] attempt to access beyond end of device [ 540.095887][T14623] loop2: rw=0, want=57592, limit=40427 [ 540.453079][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.483408][ T296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.529106][ T296] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.545358][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.586351][ T296] usb 5-1: config 0 descriptor?? [ 540.625683][T14884] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 540.795857][ T296] usbhid 5-1:0.0: can't add hid device: -71 [ 540.801683][ T296] usbhid: probe of 5-1:0.0 failed with error -71 [ 540.824247][ T296] usb 5-1: USB disconnect, device number 75 [ 540.905351][T15192] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 541.075769][T14884] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 541.088436][T14884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.109108][T14884] usb 3-1: config 0 descriptor?? [ 541.225695][ T296] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 541.357657][ T39] usb 3-1: USB disconnect, device number 73 [ 541.665845][ T296] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 541.695725][ T296] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 541.719180][ T296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 541.946141][ T296] usb 5-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 541.965114][ T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.982000][ T296] usb 5-1: Product: syz [ 541.992494][ T296] usb 5-1: Manufacturer: syz [ 542.004193][ T296] usb 5-1: SerialNumber: syz [ 542.030471][ T296] usb 5-1: config 0 descriptor?? [ 542.121258][T15213] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 542.293040][ T39] usb 5-1: USB disconnect, device number 76 [ 542.454168][ T296] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 542.710877][T14623] handle_bad_sector: 36167 callbacks suppressed [ 542.710904][T14623] attempt to access beyond end of device [ 542.710904][T14623] loop2: rw=524288, want=58168, limit=40427 [ 542.729800][T14623] attempt to access beyond end of device [ 542.729800][T14623] loop2: rw=524288, want=58176, limit=40427 [ 542.735684][T14929] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 542.748593][T14623] attempt to access beyond end of device [ 542.748593][T14623] loop2: rw=524288, want=58184, limit=40427 [ 542.762708][T14623] attempt to access beyond end of device [ 542.762708][T14623] loop2: rw=524288, want=58192, limit=40427 [ 542.774450][T14623] attempt to access beyond end of device [ 542.774450][T14623] loop2: rw=524288, want=58200, limit=40427 [ 542.836133][T14623] attempt to access beyond end of device [ 542.836133][T14623] loop2: rw=524288, want=58208, limit=40427 [ 542.863090][T14623] attempt to access beyond end of device [ 542.863090][T14623] loop2: rw=524288, want=58216, limit=40427 [ 542.885793][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.905712][ T296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.905968][T14623] attempt to access beyond end of device [ 542.905968][T14623] loop2: rw=524288, want=58224, limit=40427 [ 542.925681][ T296] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.949378][ T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.969401][ T296] usb 4-1: config 0 descriptor?? [ 542.969848][T14623] attempt to access beyond end of device [ 542.969848][T14623] loop2: rw=524288, want=58232, limit=40427 [ 542.995702][T14929] usb 2-1: Using ep0 maxpacket: 16 [ 543.011974][T14623] attempt to access beyond end of device [ 543.011974][T14623] loop2: rw=524288, want=58240, limit=40427 [ 543.275760][T14929] usb 2-1: New USB device found, idVendor=0557, idProduct=4000, bcdDevice=53.e0 [ 543.284622][T14929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.302632][T14929] usb 2-1: Product: syz [ 543.312700][T14929] usb 2-1: Manufacturer: syz [ 543.332945][T14929] usb 2-1: SerialNumber: syz [ 543.346171][T14929] usb 2-1: config 0 descriptor?? [ 543.425756][T14884] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 543.545734][ T296] usbhid 4-1:0.0: can't add hid device: -71 [ 543.551499][ T296] usbhid: probe of 4-1:0.0 failed with error -71 [ 543.575760][ T296] usb 4-1: USB disconnect, device number 74 [ 543.675723][T14884] usb 3-1: Using ep0 maxpacket: 32 [ 543.815774][T14884] usb 3-1: config 0 has no interfaces? [ 543.985798][T14884] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 543.994683][T14884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.025935][T14884] usb 3-1: Product: syz [ 544.029918][T14884] usb 3-1: Manufacturer: syz [ 544.034339][T14884] usb 3-1: SerialNumber: syz [ 544.070374][T14884] usb 3-1: config 0 descriptor?? [ 544.545704][T14884] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 544.915750][T14884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.925684][ T39] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 544.936624][T14884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.961315][T14884] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 544.988249][T14884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.008285][T14884] usb 5-1: config 0 descriptor?? [ 545.285761][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.315682][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 545.345707][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 545.356914][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.373616][ T39] usb 4-1: config 0 descriptor?? [ 545.473324][T15043] usb 2-1: USB disconnect, device number 78 [ 545.555838][T14884] usbhid 5-1:0.0: can't add hid device: -71 [ 545.561623][T14884] usbhid: probe of 5-1:0.0 failed with error -71 [ 545.582033][T14884] usb 5-1: USB disconnect, device number 77 [ 545.897655][ T39] plantronics 0003:047F:FFFF.0090: No inputs registered, leaving [ 545.909682][ T39] plantronics 0003:047F:FFFF.0090: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 546.018819][T15109] usb 3-1: USB disconnect, device number 74 [ 546.284451][T15280] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.291438][T15280] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.299080][T15280] device bridge_slave_0 entered promiscuous mode [ 546.308615][T15280] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.315495][T15280] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.336300][T15280] device bridge_slave_1 entered promiscuous mode [ 546.398615][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5266'. [ 546.434657][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5266'. [ 546.569088][T15280] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.575955][T15280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.583050][T15280] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.589844][T15280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.675619][T14884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 546.685495][T14884] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.702576][T14884] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.730094][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 546.741367][T15109] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.748223][T15109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.774793][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.792949][T15109] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.799812][T15109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.836604][T14884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.847636][T14884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.863503][ T8] device bridge_slave_1 left promiscuous mode [ 546.871829][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.894098][ T8] device bridge_slave_0 left promiscuous mode [ 546.913054][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.936909][ T8] device veth1_macvtap left promiscuous mode [ 546.952448][ T8] device veth0_vlan left promiscuous mode [ 547.218209][T14884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.231148][T15280] device veth0_vlan entered promiscuous mode [ 547.243319][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.253390][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.277007][T15280] device veth1_macvtap entered promiscuous mode [ 547.292607][T14884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.301007][T14884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.317032][T14884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 547.334069][T14884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 547.349646][T14884] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 547.377556][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 547.387796][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 547.412767][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 547.434924][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 547.556891][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5277'. [ 547.613212][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5277'. [ 547.671469][ T39] usb 4-1: USB disconnect, device number 75 [ 547.717074][T14623] handle_bad_sector: 76688 callbacks suppressed [ 547.717093][T14623] attempt to access beyond end of device [ 547.717093][T14623] loop2: rw=524288, want=57352, limit=40427 [ 547.800670][T14623] attempt to access beyond end of device [ 547.800670][T14623] loop2: rw=524288, want=57360, limit=40427 [ 547.829509][T14623] attempt to access beyond end of device [ 547.829509][T14623] loop2: rw=524288, want=57368, limit=40427 [ 547.892458][T14623] attempt to access beyond end of device [ 547.892458][T14623] loop2: rw=524288, want=57376, limit=40427 [ 547.947116][T14623] attempt to access beyond end of device [ 547.947116][T14623] loop2: rw=524288, want=57384, limit=40427 [ 547.981481][T14623] attempt to access beyond end of device [ 547.981481][T14623] loop2: rw=524288, want=57392, limit=40427 [ 547.992787][T14623] attempt to access beyond end of device [ 547.992787][T14623] loop2: rw=524288, want=57400, limit=40427 [ 548.003963][T14623] attempt to access beyond end of device [ 548.003963][T14623] loop2: rw=524288, want=57408, limit=40427 [ 548.024635][T14623] attempt to access beyond end of device [ 548.024635][T14623] loop2: rw=524288, want=57416, limit=40427 [ 548.057910][T14623] attempt to access beyond end of device [ 548.057910][T14623] loop2: rw=524288, want=57424, limit=40427 [ 548.419601][T15338] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.433728][T15338] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.451872][T15338] device bridge_slave_0 entered promiscuous mode [ 548.473852][T15338] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.501303][T15338] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.564903][T15338] device bridge_slave_1 entered promiscuous mode [ 548.706790][T15338] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.713667][T15338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.720771][T15338] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.727540][T15338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.796132][ T39] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 548.809922][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 548.818269][ T686] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.827873][ T686] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.866498][T15043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 548.874473][T15043] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.881325][T15043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.888705][T15043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 548.897228][T15043] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.904056][T15043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.948803][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 548.956930][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 548.970100][T15338] device veth0_vlan entered promiscuous mode [ 548.977975][T15043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 548.986206][T15043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 548.993432][T15043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.001395][T15043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.022310][T15338] device veth1_macvtap entered promiscuous mode [ 549.033435][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.046359][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 549.085615][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.131099][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5290'. [ 549.155817][ T39] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 549.166879][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5290'. [ 549.175923][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.188711][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.215889][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 549.237243][ T10] device bridge_slave_1 left promiscuous mode [ 549.243301][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.264930][ T10] device bridge_slave_0 left promiscuous mode [ 549.282033][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.296669][ T10] device veth1_macvtap left promiscuous mode [ 549.309619][ T10] device veth0_vlan left promiscuous mode [ 549.315859][ T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 549.332987][ T39] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 549.355706][ T39] usb 4-1: Manufacturer: syz [ 549.376312][ T39] usb 4-1: config 0 descriptor?? [ 549.531978][T15374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5295'. [ 549.615792][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 549.615809][ T30] audit: type=1400 audit(2000000131.701:1711): avc: denied { map } for pid=15372 comm="syz.0.5296" path="socket:[92480]" dev="sockfs" ino=92480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 549.755839][T15390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5301'. [ 549.782434][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5301'. [ 549.877398][ T39] appleir 0003:05AC:8243.0091: unknown main item tag 0x0 [ 549.885078][ T39] appleir 0003:05AC:8243.0091: No inputs registered, leaving [ 549.885893][T15402] EXT4-fs warning (device sda1): ext4_resize_fs:1980: can't read last block, resize aborted [ 550.019623][ T39] appleir 0003:05AC:8243.0091: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 550.313285][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5313'. [ 550.425682][T15109] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 550.805766][T15109] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 550.825684][T15109] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 550.846118][T15109] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.865106][T15109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.890674][T15109] usb 5-1: config 0 descriptor?? [ 550.936257][T15109] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 551.355702][ T686] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 551.725856][ T686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.739773][ T686] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 551.765755][ T686] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 551.794824][ T686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.805618][ T686] usb 2-1: config 0 descriptor?? [ 552.006449][T15043] usb 4-1: USB disconnect, device number 76 [ 552.355709][ T686] usbhid 2-1:0.0: can't add hid device: -71 [ 552.361522][ T686] usbhid: probe of 2-1:0.0 failed with error -71 [ 552.378280][ T686] usb 2-1: USB disconnect, device number 79 [ 552.535682][T15043] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 552.725873][T14623] handle_bad_sector: 58938 callbacks suppressed [ 552.726143][T14623] attempt to access beyond end of device [ 552.726143][T14623] loop2: rw=524288, want=57896, limit=40427 [ 552.746659][T14623] attempt to access beyond end of device [ 552.746659][T14623] loop2: rw=524288, want=57904, limit=40427 [ 552.765806][T14623] attempt to access beyond end of device [ 552.765806][T14623] loop2: rw=524288, want=57912, limit=40427 [ 552.777428][T14623] attempt to access beyond end of device [ 552.777428][T14623] loop2: rw=524288, want=57920, limit=40427 [ 552.790366][T14623] attempt to access beyond end of device [ 552.790366][T14623] loop2: rw=524288, want=57928, limit=40427 [ 552.804130][T14623] attempt to access beyond end of device [ 552.804130][T14623] loop2: rw=524288, want=57936, limit=40427 [ 552.823285][T14623] attempt to access beyond end of device [ 552.823285][T14623] loop2: rw=524288, want=57944, limit=40427 [ 552.825788][T15043] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 552.962138][T14623] attempt to access beyond end of device [ 552.962138][T14623] loop2: rw=524288, want=57952, limit=40427 [ 553.004281][T14623] attempt to access beyond end of device [ 553.004281][T14623] loop2: rw=524288, want=57960, limit=40427 [ 553.015896][T14623] attempt to access beyond end of device [ 553.015896][T14623] loop2: rw=524288, want=57968, limit=40427 [ 553.177908][ T686] usb 5-1: USB disconnect, device number 78 [ 553.605961][T15043] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 553.629402][T15043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.665743][ T686] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 553.985725][T15043] usb 4-1: string descriptor 0 read error: -71 [ 553.992792][T15043] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 554.012864][T15043] usb 4-1: No valid video chain found. [ 554.034914][T15043] usb 4-1: USB disconnect, device number 77 [ 554.040807][ T686] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 554.061542][ T686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.089625][ T686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.112520][ T686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 554.225754][ T686] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 554.240836][ T686] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 554.260031][ T686] usb 5-1: Manufacturer: syz [ 554.276918][ T686] usb 5-1: config 0 descriptor?? [ 554.485756][T15109] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 554.775194][ T686] appleir 0003:05AC:8243.0092: unknown main item tag 0x0 [ 554.785830][T14884] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 554.792615][ T686] appleir 0003:05AC:8243.0092: No inputs registered, leaving [ 554.840822][ T686] appleir 0003:05AC:8243.0092: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 554.875904][T15109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.898699][T15109] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 554.947153][T15109] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.978518][T15109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.001518][T15109] usb 2-1: config 0 descriptor?? [ 555.220442][T14884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.233347][T14884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.242970][ T30] audit: type=1400 audit(2000000137.321:1712): avc: denied { mount } for pid=15505 comm="syz.0.5348" name="/" dev="pstore" ino=12259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 555.265577][T14884] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 555.285700][ T30] audit: type=1400 audit(2000000137.341:1713): avc: denied { unmount } for pid=14763 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 555.305666][T14884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.314164][T14884] usb 4-1: config 0 descriptor?? [ 555.440505][ T30] audit: type=1400 audit(2000000137.531:1714): avc: denied { create } for pid=15515 comm="syz.0.5353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 555.474507][ T30] audit: type=1400 audit(2000000137.551:1715): avc: denied { create } for pid=15515 comm="syz.0.5353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 555.505733][ T30] audit: type=1400 audit(2000000137.571:1716): avc: denied { read write } for pid=15496 comm="syz.1.5345" name="vhost-vsock" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.559923][ T30] audit: type=1400 audit(2000000137.571:1717): avc: denied { open } for pid=15496 comm="syz.1.5345" path="/dev/vhost-vsock" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.607087][ T30] audit: type=1400 audit(2000000137.571:1718): avc: denied { ioctl } for pid=15496 comm="syz.1.5345" path="/dev/vhost-vsock" dev="devtmpfs" ino=172 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.670269][T15526] __nla_validate_parse: 1 callbacks suppressed [ 555.670285][T15526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5357'. [ 556.006030][T14884] hid-led: probe of 0003:27B8:01ED.0093 failed with error -71 [ 556.020452][T14884] usb 4-1: USB disconnect, device number 78 [ 556.085809][T15109] usbhid 2-1:0.0: can't add hid device: -71 [ 556.093606][T15109] usbhid: probe of 2-1:0.0 failed with error -71 [ 556.117471][T15109] usb 2-1: USB disconnect, device number 80 [ 556.556138][T15549] EXT4-fs (sda1): shut down requested (1) [ 556.578772][T15549] Aborting journal on device sda1-8. [ 556.865704][ T39] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 556.965683][T15043] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 556.975815][T15109] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 557.105677][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 557.117346][ T5968] usb 5-1: reset high-speed USB device number 79 using dummy_hcd [ 557.225797][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.245257][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.279654][ T39] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 557.301469][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.321084][ T39] usb 2-1: config 0 descriptor?? [ 557.335749][T15043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.352980][T15043] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 557.381862][T15043] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.396322][T15109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.400462][T15043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.415105][T15109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.429297][T15043] usb 4-1: config 0 descriptor?? [ 557.435418][T15109] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 557.465198][T15109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.487024][T15109] usb 3-1: config 0 descriptor?? [ 557.735698][T14623] handle_bad_sector: 59210 callbacks suppressed [ 557.735721][T14623] attempt to access beyond end of device [ 557.735721][T14623] loop2: rw=0, want=58568, limit=40427 [ 557.752966][T14623] attempt to access beyond end of device [ 557.752966][T14623] loop2: rw=0, want=58576, limit=40427 [ 557.764103][T14623] attempt to access beyond end of device [ 557.764103][T14623] loop2: rw=0, want=58584, limit=40427 [ 557.785119][T14623] attempt to access beyond end of device [ 557.785119][T14623] loop2: rw=0, want=58592, limit=40427 [ 557.796168][T14623] attempt to access beyond end of device [ 557.796168][T14623] loop2: rw=0, want=58600, limit=40427 [ 557.816682][ T39] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 557.823731][ T39] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 557.832783][T14623] attempt to access beyond end of device [ 557.832783][T14623] loop2: rw=0, want=58608, limit=40427 [ 557.853783][ T39] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 557.861007][T14623] attempt to access beyond end of device [ 557.861007][T14623] loop2: rw=0, want=58616, limit=40427 [ 557.871899][ T39] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 557.885732][T14623] attempt to access beyond end of device [ 557.885732][T14623] loop2: rw=0, want=58624, limit=40427 [ 557.897856][ T39] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 557.905121][ T39] microsoft 0003:045E:07DA.0094: No inputs registered, leaving [ 557.915799][T14623] attempt to access beyond end of device [ 557.915799][T14623] loop2: rw=0, want=58632, limit=40427 [ 557.934998][ T39] microsoft 0003:045E:07DA.0094: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 557.948392][T14623] attempt to access beyond end of device [ 557.948392][T14623] loop2: rw=0, want=58640, limit=40427 [ 557.948467][ T39] microsoft 0003:045E:07DA.0094: no inputs found [ 557.965356][ T39] microsoft 0003:045E:07DA.0094: could not initialize ff, continuing anyway [ 557.975035][T15043] plantronics 0003:047F:FFFF.0095: No inputs registered, leaving [ 557.998718][T15043] plantronics 0003:047F:FFFF.0095: hiddev97,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 558.075786][T15109] usbhid 3-1:0.0: can't add hid device: -71 [ 558.081637][T15109] usbhid: probe of 3-1:0.0 failed with error -71 [ 558.097279][T15109] usb 3-1: USB disconnect, device number 75 [ 558.274415][T15043] usb 2-1: USB disconnect, device number 81 SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 558.687530][T15610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5391'. [ 558.708258][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5391'. [ 559.002837][T15043] usb 4-1: USB disconnect, device number 79 [ 559.436424][ T354] device bridge_slave_1 left promiscuous mode [ 559.442388][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.466950][ T354] device bridge_slave_0 left promiscuous mode [ 559.472894][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.481267][ T354] device veth1_macvtap left promiscuous mode [ 559.487157][ T354] device veth0_vlan left promiscuous mode [ 560.426675][ T354] device bridge_slave_1 left promiscuous mode [ 560.432628][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.456100][ T354] device bridge_slave_0 left promiscuous mode [ 560.462043][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.486642][ T354] device bridge_slave_1 left promiscuous mode [ 560.492579][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.500165][ T354] device bridge_slave_0 left promiscuous mode [ 560.515881][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.524011][ T354] device veth1_macvtap left promiscuous mode [ 560.531046][ T354] device veth0_vlan left promiscuous mode [ 560.545996][ T354] device veth1_macvtap left promiscuous mode [ 560.551817][ T354] device veth0_vlan left promiscuous mode [ 562.247575][ T354] device bridge_slave_1 left promiscuous mode [ 562.253535][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.276067][ T354] device bridge_slave_0 left promiscuous mode [ 562.282008][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.318634][ T354] device veth1_macvtap left promiscuous mode [ 562.324466][ T354] device veth0_vlan left promiscuous mode [ 562.745687][T14623] handle_bad_sector: 145920 callbacks suppressed [ 562.745709][T14623] attempt to access beyond end of device [ 562.745709][T14623] loop2: rw=0, want=58648, limit=40427 [ 562.763530][T14623] attempt to access beyond end of device [ 562.763530][T14623] loop2: rw=0, want=58656, limit=40427 [ 562.774468][T14623] attempt to access beyond end of device [ 562.774468][T14623] loop2: rw=0, want=58664, limit=40427 [ 562.785418][T14623] attempt to access beyond end of device [ 562.785418][T14623] loop2: rw=0, want=58672, limit=40427 [ 562.796375][T14623] attempt to access beyond end of device [ 562.796375][T14623] loop2: rw=0, want=58680, limit=40427 [ 562.807289][T14623] attempt to access beyond end of device [ 562.807289][T14623] loop2: rw=0, want=58688, limit=40427 [ 562.818218][T14623] attempt to access beyond end of device [ 562.818218][T14623] loop2: rw=0, want=58696, limit=40427 [ 562.829207][T14623] attempt to access beyond end of device [ 562.829207][T14623] loop2: rw=0, want=58704, limit=40427 [ 562.840178][T14623] attempt to access beyond end of device [ 562.840178][T14623] loop2: rw=0, want=58712, limit=40427 [ 562.851090][T14623] attempt to access beyond end of device [ 562.851090][T14623] loop2: rw=0, want=58720, limit=40427 [ 563.035766][ T5968] usb 5-1: reset high-speed USB device number 79 using dummy_hcd [ 563.496349][ T354] device bridge_slave_1 left promiscuous mode [ 563.502316][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.526123][ T354] device bridge_slave_0 left promiscuous mode [ 563.532065][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.546686][ T354] device veth1_macvtap left promiscuous mode [ 563.552513][ T354] device veth0_vlan left promiscuous mode [ 563.916100][ T296] usb 5-1: USB disconnect, device number 79 [ 567.761965][T14623] handle_bad_sector: 171857 callbacks suppressed [ 567.761988][T14623] attempt to access beyond end of device [ 567.761988][T14623] loop2: rw=524288, want=59376, limit=40427 [ 567.779987][T14623] attempt to access beyond end of device [ 567.779987][T14623] loop2: rw=524288, want=59384, limit=40427 [ 567.791339][T14623] attempt to access beyond end of device [ 567.791339][T14623] loop2: rw=524288, want=59392, limit=40427 [ 567.802853][T14623] attempt to access beyond end of device [ 567.802853][T14623] loop2: rw=0, want=57352, limit=40427 [ 567.813801][T14623] attempt to access beyond end of device [ 567.813801][T14623] loop2: rw=0, want=57360, limit=40427 [ 567.824763][T14623] attempt to access beyond end of device [ 567.824763][T14623] loop2: rw=0, want=57368, limit=40427 [ 567.835680][T14623] attempt to access beyond end of device [ 567.835680][T14623] loop2: rw=0, want=57376, limit=40427 [ 567.846480][T14623] attempt to access beyond end of device [ 567.846480][T14623] loop2: rw=0, want=57384, limit=40427 [ 567.857435][T14623] attempt to access beyond end of device [ 567.857435][T14623] loop2: rw=0, want=57392, limit=40427 [ 567.868337][T14623] attempt to access beyond end of device [ 567.868337][T14623] loop2: rw=0, want=57400, limit=40427