last executing test programs: 11.835786802s ago: executing program 2 (id=1629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "b53a25"}}, 0x0, 0x0, 0x0}, 0x0) 10.756343017s ago: executing program 2 (id=1638): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) close(0x3) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.703181673s ago: executing program 2 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 10.702910293s ago: executing program 2 (id=1648): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000107000000003ec1fd6de3c70000", @ANYRES32=r3, @ANYBLOB="000000fb00000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x71d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff3}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10.702679413s ago: executing program 2 (id=1649): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) dup2(r1, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60006019}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000040)={0xf}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x6000200f}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x300, 0x0) 10.700597674s ago: executing program 2 (id=1650): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = gettid() ptrace(0x10, 0x1) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 7.620710779s ago: executing program 1 (id=1692): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.244167834s ago: executing program 1 (id=1727): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000004080)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f00000003c0)=""/80, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001040)=0x1) 5.166078293s ago: executing program 3 (id=1731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x2, 0x7]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611185000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@remote, @multicast2}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.165679653s ago: executing program 1 (id=1732): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = dup(r1) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r5}}]}, {0xffffffffffffff35}, {0x6d}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 5.043512427s ago: executing program 1 (id=1733): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e69df786c6174653d302c73686f72746e616d653d77696e39352c00"], 0x6, 0x2a6, &(0x7f0000000440)="$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") syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.033621079s ago: executing program 3 (id=1735): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x100, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000100)={0x20000001}) poll(&(0x7f0000000140)=[{r4}], 0x1, 0x0) 1.619148753s ago: executing program 0 (id=1756): open(&(0x7f0000000100)='./file0\x00', 0x121bff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1.618697163s ago: executing program 1 (id=1757): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8243, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x5, {0x5, 0x0, "588438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.618277243s ago: executing program 4 (id=1758): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000048000000000000000000850000000e000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 945.092441ms ago: executing program 0 (id=1759): socket$nl_route(0x10, 0x3, 0x0) brk(0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x4, 0x787, &(0x7f0000001000)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100003"], 0x1c}}, 0x0) 944.633131ms ago: executing program 4 (id=1760): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r0, 0x680}], 0x1, 0x800) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 136.272744ms ago: executing program 0 (id=1761): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@user_xattr}]}, 0xff, 0x49e, &(0x7f0000000540)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)='./cgroup/cgroup.procs\x00') 34.343466ms ago: executing program 0 (id=1763): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 26.617267ms ago: executing program 4 (id=1764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x12, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 0s ago: executing program 4 (id=1765): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000000000000000800000000001f00040000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x0, 0x0) kernel console output (not intermixed with test programs): ed forwarding state [ 131.450787][ T3698] usb usb8: usbfs: process 3698 (syz.3.1239) did not claim interface 0 before use [ 131.460560][ T322] usb 4-1: USB disconnect, device number 14 [ 131.473158][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.481035][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.488535][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.497453][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.506259][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.513122][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.527468][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.535505][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.542390][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.560456][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.568619][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.578461][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.591321][ T3727] device veth0_vlan entered promiscuous mode [ 131.600623][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.608537][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.615736][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.627457][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.635712][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.643529][ T321] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 131.652417][ T3727] device veth1_macvtap entered promiscuous mode [ 131.666496][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.674422][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.682524][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.690842][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.699406][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.778904][ T3743] device bridge0 entered promiscuous mode [ 131.784907][ T3743] device bridge0 left promiscuous mode [ 131.802607][ T3745] loop1: detected capacity change from 0 to 512 [ 131.809995][ T351] device bridge_slave_1 left promiscuous mode [ 131.816013][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.816868][ T3745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.832764][ T351] device bridge_slave_0 left promiscuous mode [ 131.839090][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.839700][ T3745] EXT4-fs (loop1): 1 truncate cleaned up [ 131.851517][ T3745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.860161][ T351] device veth1_macvtap left promiscuous mode [ 131.866056][ T351] device veth0_vlan left promiscuous mode [ 131.882277][ T3745] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 132.015367][ T3757] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 132.023281][ T3757] tun0: tun_chr_ioctl cmd 1074025692 [ 132.038237][ T321] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 132.050454][ T3727] EXT4-fs (loop1): unmounting filesystem. [ 132.051305][ T321] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 132.067409][ T321] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 132.076496][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.108195][ T3734] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.123609][ T28] audit: type=1400 audit(1729571586.341:494): avc: denied { create } for pid=3763 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 132.169364][ T28] audit: type=1400 audit(1729571586.361:495): avc: denied { write } for pid=3763 comm="syz.2.1266" path="socket:[41075]" dev="sockfs" ino=41075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 132.194918][ T28] audit: type=1400 audit(1729571586.361:496): avc: denied { nlmsg_read } for pid=3763 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 132.263017][ T3770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.270111][ T3770] IPv6: NLM_F_CREATE should be set when creating new route [ 132.364074][ T3775] device pim6reg1 entered promiscuous mode [ 132.383604][ T3771] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.390730][ T3771] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.412090][ T3771] device bridge_slave_0 entered promiscuous mode [ 132.425170][ T3780] loop2: detected capacity change from 0 to 512 [ 132.431408][ T3771] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.438408][ T3771] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.445763][ T3771] device bridge_slave_1 entered promiscuous mode [ 132.457075][ T3780] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1273: attempt to clear invalid blocks 1 len 1 [ 132.470532][ T3780] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1273: bg 0: block 343: padding at end of block bitmap is not set [ 132.485646][ T3780] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 132.499356][ T3780] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1273: invalid indirect mapped block 1819239214 (level 0) [ 132.514225][ T3780] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1273: invalid indirect mapped block 1819239214 (level 1) [ 132.529400][ T3780] EXT4-fs (loop2): 1 truncate cleaned up [ 132.534916][ T3780] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.553416][ T3780] syz.2.1273[3780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.553575][ T3780] syz.2.1273[3780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.560430][ T3787] loop3: detected capacity change from 0 to 512 [ 132.593090][ T3787] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1276: bg 0: block 393: padding at end of block bitmap is not set [ 132.607617][ T3787] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 132.616751][ T3787] EXT4-fs (loop3): 2 truncates cleaned up [ 132.619230][ T3460] EXT4-fs (loop2): unmounting filesystem. [ 132.622497][ T3787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.655841][ T3790] loop2: detected capacity change from 0 to 2048 [ 132.679484][ T3790] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.684272][ T3683] EXT4-fs (loop3): unmounting filesystem. [ 132.713964][ T3790] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.731394][ T3794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1278'. [ 132.741456][ T3460] EXT4-fs (loop2): unmounting filesystem. [ 132.807321][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.814890][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.827837][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.839411][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.847480][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.854369][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.861913][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.870388][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.879121][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.885980][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.906981][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.914512][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.922795][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.926271][ T3808] loop2: detected capacity change from 0 to 512 [ 132.931494][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.944838][ T3808] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.949449][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.959901][ T3808] EXT4-fs (loop2): 1 truncate cleaned up [ 132.967594][ T3808] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.986686][ T3805] device pim6reg1 entered promiscuous mode [ 132.995541][ T3460] EXT4-fs (loop2): unmounting filesystem. [ 133.006203][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.015135][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.027681][ T351] device bridge_slave_1 left promiscuous mode [ 133.034437][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.042061][ T351] device bridge_slave_0 left promiscuous mode [ 133.048688][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.064059][ T351] device veth1_macvtap left promiscuous mode [ 133.070032][ T351] device veth0_vlan left promiscuous mode [ 133.172991][ T3813] device ip6_vti0 entered promiscuous mode [ 133.178660][ T3813] device vlan2 entered promiscuous mode [ 133.184604][ T3813] device ip6_vti0 left promiscuous mode [ 133.195182][ T3771] device veth0_vlan entered promiscuous mode [ 133.202264][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.210290][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.218207][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.225536][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.238642][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.248579][ T3771] device veth1_macvtap entered promiscuous mode [ 133.268212][ T321] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 133.275788][ T321] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input44 [ 133.286013][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.294212][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.304798][ T321] usb 1-1: USB disconnect, device number 24 [ 133.311274][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.319106][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 133.328856][ T3414] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 133.337177][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.383992][ T3825] loop1: detected capacity change from 0 to 128 [ 133.392830][ T3825] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 133.401386][ T3825] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 133.421478][ T3771] EXT4-fs (loop1): unmounting filesystem. [ 133.473252][ T3834] binder: BINDER_SET_CONTEXT_MGR already set [ 133.479666][ T3834] binder: 3833:3834 ioctl 4018620d 20000040 returned -16 [ 133.502288][ T3838] device pim6reg1 entered promiscuous mode [ 133.698794][ T3414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.714544][ T3840] loop1: detected capacity change from 0 to 40427 [ 133.721011][ T3414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.737061][ T3840] F2FS-fs (loop1): fault_injection options not supported [ 133.747264][ T3414] usb 4-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 133.748944][ T3840] F2FS-fs (loop1): invalid crc value [ 133.756246][ T3414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.777556][ T3414] usb 4-1: config 0 descriptor?? [ 133.785238][ T3840] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.836245][ T3840] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.855743][ T3840] syz.1.1296: attempt to access beyond end of device [ 133.855743][ T3840] loop1: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 133.870412][ T3840] syz.1.1296: attempt to access beyond end of device [ 133.870412][ T3840] loop1: rw=2049, sector=45192, nr_sectors = 40 limit=40427 [ 133.890151][ T3840] syz.1.1296: attempt to access beyond end of device [ 133.890151][ T3840] loop1: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 133.921801][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 133.921817][ T28] audit: type=1400 audit(1729571588.141:498): avc: denied { create } for pid=3856 comm="syz.0.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.955645][ T3848] f2fs_ckpt-7:1: attempt to access beyond end of device [ 133.955645][ T3848] loop1: rw=2049, sector=45232, nr_sectors = 16 limit=40427 [ 133.969632][ T28] audit: type=1400 audit(1729571588.141:499): avc: denied { remount } for pid=3839 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.000060][ T28] audit: type=1400 audit(1729571588.171:500): avc: denied { setopt } for pid=3856 comm="syz.0.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.160460][ T3873] loop4: detected capacity change from 0 to 512 [ 134.198707][ T3873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.238360][ T3414] hid (null): report_id 0 is invalid [ 134.246455][ T3873] EXT4-fs (loop4): 1 orphan inode deleted [ 134.252726][ T3414] lenovo 0003:04B3:3108.0030: report_id 0 is invalid [ 134.268135][ T3873] EXT4-fs (loop4): 1 truncate cleaned up [ 134.268132][ T3414] lenovo 0003:04B3:3108.0030: item 0 0 1 8 parsing failed [ 134.268362][ T3414] lenovo 0003:04B3:3108.0030: hid_parse failed [ 134.274314][ T3873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 134.296089][ T3414] lenovo: probe of 0003:04B3:3108.0030 failed with error -22 [ 134.360336][ T3471] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 524051: comm syz-executor: invalid block [ 134.404230][ T3471] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 524051: comm syz-executor: invalid block [ 134.436394][ T3876] loop1: detected capacity change from 0 to 40427 [ 134.443025][ T327] usb 4-1: USB disconnect, device number 15 [ 134.459236][ T3876] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 134.471119][ T3876] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 134.490051][ T3876] F2FS-fs (loop1): invalid crc value [ 134.509007][ T3876] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.520728][ T3471] EXT4-fs (loop4): unmounting filesystem. [ 134.524342][ T3894] device syzkaller0 entered promiscuous mode [ 134.617887][ T3876] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 134.628113][ T3876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.681695][ T28] audit: type=1326 audit(1729571588.901:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 134.725194][ T28] audit: type=1326 audit(1729571588.931:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 134.751759][ T28] audit: type=1326 audit(1729571588.931:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 134.827469][ T28] audit: type=1326 audit(1729571588.931:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 134.887229][ T3911] syz.0.1326[3911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.887302][ T3911] syz.0.1326[3911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.903436][ T3902] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.908249][ T28] audit: type=1326 audit(1729571588.931:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 134.914691][ T3902] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.952209][ T3902] device bridge_slave_0 entered promiscuous mode [ 134.959187][ T3902] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.966135][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.973553][ T3902] device bridge_slave_1 entered promiscuous mode [ 134.980195][ T28] audit: type=1326 audit(1729571588.931:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 135.005417][ T28] audit: type=1326 audit(1729571588.931:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 135.134932][ T3919] loop1: detected capacity change from 0 to 512 [ 135.173887][ T3919] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1322: attempt to clear invalid blocks 1 len 1 [ 135.181945][ T3902] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.193373][ T3902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.200601][ T3902] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.207359][ T3902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.215755][ T3919] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1322: bg 0: block 343: padding at end of block bitmap is not set [ 135.232672][ T3919] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 135.241604][ T3919] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1322: invalid indirect mapped block 1819239214 (level 0) [ 135.255789][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.255956][ T3919] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1322: invalid indirect mapped block 1819239214 (level 1) [ 135.276802][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.284343][ T3919] EXT4-fs (loop1): 1 truncate cleaned up [ 135.289946][ T3919] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.290006][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.310985][ T3919] syz.1.1322[3919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.311068][ T3919] syz.1.1322[3919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.333497][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.354372][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.361256][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.368918][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.377102][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.384004][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.405068][ T10] device bridge_slave_1 left promiscuous mode [ 135.411401][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.411688][ T3771] EXT4-fs (loop1): unmounting filesystem. [ 135.425038][ T10] device bridge_slave_0 left promiscuous mode [ 135.438276][ T327] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 135.455022][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.466970][ T10] device veth1_macvtap left promiscuous mode [ 135.477409][ T10] device veth0_vlan left promiscuous mode [ 135.599244][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.607190][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.626917][ T3902] device veth0_vlan entered promiscuous mode [ 135.635515][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.644320][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.652692][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.660400][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.675657][ T3902] device veth1_macvtap entered promiscuous mode [ 135.683836][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.698386][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.707012][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.736054][ T3847] loop2: detected capacity change from 0 to 262144 [ 135.765878][ T3847] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.798194][ T327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.809113][ T327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.813959][ T3847] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.818814][ T327] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.818843][ T327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.822915][ T327] usb 1-1: config 0 descriptor?? [ 135.847792][ T40] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 135.874733][ T3938] loop3: detected capacity change from 0 to 512 [ 135.886352][ T3938] EXT4-fs: Ignoring removed orlov option [ 135.900465][ T3938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.909529][ T3938] ext4 filesystem being mounted at /17/bus supports timestamps until 2038 (0x7fffffff) [ 135.938881][ T3683] EXT4-fs (loop3): unmounting filesystem. [ 136.068652][ T3949] picdev_read: 112 callbacks suppressed [ 136.068672][ T3949] kvm: pic: non byte read [ 136.238429][ T40] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 136.253038][ T40] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.335989][ T3955] loop3: detected capacity change from 0 to 40427 [ 136.342345][ T40] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.351582][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.359791][ T40] usb 2-1: SerialNumber: syz [ 136.366256][ T3955] F2FS-fs (loop3): invalid crc value [ 136.371865][ T327] hid (null): bogus close delimiter [ 136.373438][ T3955] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.412475][ T3955] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 136.492507][ T3683] syz-executor: attempt to access beyond end of device [ 136.492507][ T3683] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 136.619020][ T40] usb 2-1: 0:2 : does not exist [ 136.619353][ T3971] loop4: detected capacity change from 0 to 512 [ 136.641055][ T3971] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.1344: iget: bad extended attribute block 128 [ 136.653885][ T3971] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1344: couldn't read orphan inode 16 (err -117) [ 136.666130][ T3971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.666142][ T3976] loop3: detected capacity change from 0 to 512 [ 136.681201][ T3968] process 'syz.2.1343' launched './file0' with NULL argv: empty string added [ 136.681431][ T3971] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 136.692701][ T3976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.709186][ T3971] EXT4-fs error (device loop4): ext4_lookup:1855: inode #16: comm syz.4.1344: iget: bad extended attribute block 128 [ 136.712484][ T3976] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 136.737755][ T3902] EXT4-fs (loop4): unmounting filesystem. [ 136.752355][ T3976] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.1341: corrupted inode contents [ 136.764605][ T3976] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.1341: mark_inode_dirty error [ 136.776420][ T3976] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.1341: corrupted inode contents [ 136.789890][ T3976] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1341: mark_inode_dirty error [ 136.807553][ T3683] EXT4-fs (loop3): unmounting filesystem. [ 136.822232][ T3984] syz.3.1347[3984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.822295][ T3984] syz.3.1347[3984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.834405][ T3984] syz.3.1347[3984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.845804][ T3984] syz.3.1347[3984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.058248][ T327] uclogic 0003:256C:006D.0031: interface is invalid, ignoring [ 137.076762][ T313] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 137.119809][ T40] usb 2-1: USB disconnect, device number 25 [ 137.260197][ T322] usb 1-1: USB disconnect, device number 25 [ 137.318130][ T313] usb 5-1: Using ep0 maxpacket: 16 [ 137.328923][ T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.438175][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.449128][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.458739][ T313] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 137.467596][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.476342][ T313] usb 5-1: config 0 descriptor?? [ 137.648101][ T3414] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 137.898110][ T3414] usb 3-1: Using ep0 maxpacket: 16 [ 137.945426][ T4013] syz.3.1359[4013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.945507][ T4013] syz.3.1359[4013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.959060][ T313] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 137.987116][ T313] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 137.997203][ T313] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 138.017411][ T313] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 138.024425][ T313] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 138.038190][ T3414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.058753][ T3414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.061735][ T313] cp2112 0003:10C4:EA90.0032: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 138.077171][ T3414] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 138.108105][ T3414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.126809][ T3414] usb 3-1: config 0 descriptor?? [ 138.198245][ T313] cp2112 0003:10C4:EA90.0032: Part Number: 0x00 Device Version: 0x00 [ 138.367745][ T4023] device pim6reg1 entered promiscuous mode [ 138.561772][ T4027] loop3: detected capacity change from 0 to 128 [ 138.609178][ T3414] samsung 0003:0419:0001.0033: unknown main item tag 0x0 [ 138.616152][ T3414] samsung 0003:0419:0001.0033: unknown main item tag 0x0 [ 138.626830][ T4027] syz.3.1364: attempt to access beyond end of device [ 138.626830][ T4027] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 138.643402][ T3414] samsung 0003:0419:0001.0033: unknown main item tag 0x0 [ 138.650346][ T3414] samsung 0003:0419:0001.0033: unknown main item tag 0x0 [ 138.667285][ T3414] samsung 0003:0419:0001.0033: unknown main item tag 0x0 [ 138.678184][ T3414] samsung 0003:0419:0001.0033: hidraw1: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 138.773966][ T351] kworker/u4:5: attempt to access beyond end of device [ 138.773966][ T351] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 138.816049][ T4029] syz.1.1366[4029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.816132][ T4029] syz.1.1366[4029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.829228][ T40] usb 3-1: USB disconnect, device number 23 [ 138.904247][ T4034] loop1: detected capacity change from 0 to 1024 [ 138.916871][ T4038] Invalid ELF header magic: != ELF [ 138.930138][ T4034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 138.950201][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 138.950218][ T28] audit: type=1400 audit(1729571593.171:517): avc: denied { unmount } for pid=3683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.958445][ T337] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 138.996228][ T337] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 139.008416][ T337] EXT4-fs (loop1): This should not happen!! Data will be lost [ 139.008416][ T337] [ 139.010625][ T4045] loop3: detected capacity change from 0 to 256 [ 139.017968][ T337] EXT4-fs (loop1): Total free blocks count 0 [ 139.029908][ T337] EXT4-fs (loop1): Free/Dirty block details [ 139.035677][ T337] EXT4-fs (loop1): free_blocks=68451041280 [ 139.041825][ T337] EXT4-fs (loop1): dirty_blocks=64 [ 139.046761][ T337] EXT4-fs (loop1): Block reservation details [ 139.052771][ T337] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 139.059430][ T4045] exfat: Deprecated parameter 'namecase' [ 139.062349][ T3771] EXT4-fs (loop1): unmounting filesystem. [ 139.073937][ T4045] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 139.075020][ T322] usb 5-1: USB disconnect, device number 24 [ 139.097648][ T28] audit: type=1400 audit(1729571593.311:518): avc: denied { mounton } for pid=4044 comm="syz.3.1372" path="/35/file0/bus" dev="loop3" ino=1048847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.115618][ T4045] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 139.137281][ T3683] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 139.146604][ T3683] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 139.328568][ T4057] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.335480][ T4057] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.347353][ T4057] device bridge_slave_0 entered promiscuous mode [ 139.353672][ T4062] loop2: detected capacity change from 0 to 512 [ 139.354546][ T4057] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.367142][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.376739][ T4057] device bridge_slave_1 entered promiscuous mode [ 139.379139][ T4062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.392085][ T4062] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff) [ 139.415120][ T4062] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #12: comm syz.2.1378: No space for directory leaf checksum. Please run e2fsck -D. [ 139.430606][ T4062] EXT4-fs error (device loop2): ext4_readdir:220: inode #12: comm syz.2.1378: path /42/file0/file0: directory fails checksum at offset 0 [ 139.444848][ T4062] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 139.448238][ T40] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 139.454550][ T4062] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #12: comm syz.2.1378: mark_inode_dirty error [ 139.480978][ T3460] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /42/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 139.501804][ T3460] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 139.514780][ T3460] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 139.533680][ T3460] EXT4-fs (loop2): unmounting filesystem. [ 139.539935][ T3460] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 139.549285][ T3460] EXT4-fs error (device loop2): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 139.560837][ T3460] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 139.569900][ T3460] EXT4-fs error (device loop2): ext4_quota_off:7053: inode #4: comm syz-executor: mark_inode_dirty error [ 139.670650][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.680899][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.703182][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.712479][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.721347][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.728298][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.736423][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.745616][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.753979][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.760892][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.769411][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.789877][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.805420][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.818151][ T40] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 139.830071][ T40] usb 1-1: config 0 has no interface number 0 [ 139.837616][ T40] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.847012][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.848750][ T40] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.872181][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.880681][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.888627][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.896990][ T4057] device veth0_vlan entered promiscuous mode [ 139.907591][ T351] device bridge_slave_1 left promiscuous mode [ 139.913722][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.921739][ T351] device bridge_slave_0 left promiscuous mode [ 139.927755][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.936571][ T351] device veth1_macvtap left promiscuous mode [ 139.938237][ T40] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 139.942557][ T351] device veth0_vlan left promiscuous mode [ 139.951755][ T40] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 139.964849][ T40] usb 1-1: Manufacturer: syz [ 139.975891][ T40] usb 1-1: config 0 descriptor?? [ 140.076180][ T4071] kvm: pic: non byte write [ 140.171040][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.192941][ T4069] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.200010][ T4069] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.207777][ T4069] device bridge_slave_0 entered promiscuous mode [ 140.214929][ T4069] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.221888][ T4069] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.229139][ T4069] device bridge_slave_1 entered promiscuous mode [ 140.235755][ T4057] device veth1_macvtap entered promiscuous mode [ 140.259424][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.276341][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.309260][ T28] audit: type=1400 audit(1729571594.531:519): avc: denied { mount } for pid=4057 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.342729][ T28] audit: type=1400 audit(1729571594.561:520): avc: denied { read } for pid=4081 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.371223][ T4069] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.378117][ T4069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.385161][ T4069] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.391985][ T4069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.398123][ T28] audit: type=1400 audit(1729571594.611:521): avc: denied { setopt } for pid=4081 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.418283][ T327] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 140.426702][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.438357][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.461951][ T40] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0034/input/input46 [ 140.489927][ T40] sony 0003:054C:03D5.0034: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 140.505260][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.513016][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.528183][ T322] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 140.537336][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.545823][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.554257][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.561135][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.568858][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.577195][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.585927][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.592799][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.608359][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.616670][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.624558][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.633176][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.657117][ T4069] device veth0_vlan entered promiscuous mode [ 140.663368][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.672537][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.681285][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.687490][ T313] usb 1-1: USB disconnect, device number 26 [ 140.689149][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.711237][ T4069] device veth1_macvtap entered promiscuous mode [ 140.719696][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.726888][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.734734][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.743328][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.751553][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.768183][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.776564][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.785368][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.792232][ T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.794021][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.808543][ T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.846469][ T327] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 140.855681][ T327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.864451][ T327] usb 5-1: config 0 descriptor?? [ 140.872306][ T4093] kvm: apic: phys broadcast and lowest prio [ 140.898474][ T322] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 140.909850][ T322] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 140.920969][ T322] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 140.930012][ T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.958236][ T4080] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 141.109997][ T351] device bridge_slave_1 left promiscuous mode [ 141.116067][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.123916][ T351] device bridge_slave_0 left promiscuous mode [ 141.130368][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.139050][ T351] device veth1_macvtap left promiscuous mode [ 141.145011][ T351] device veth0_vlan left promiscuous mode [ 141.154307][ T4108] loop3: detected capacity change from 0 to 512 [ 141.160808][ T4108] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.167443][ T4108] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.179873][ T4108] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.1393: corrupted in-inode xattr [ 141.192006][ T4108] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1393: couldn't read orphan inode 15 (err -117) [ 141.204229][ T4108] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.235461][ T4057] EXT4-fs (loop3): unmounting filesystem. [ 141.349829][ T327] hid-multitouch 0003:1FD2:6007.0035: unknown main item tag 0x0 [ 141.357931][ T327] hid-multitouch 0003:1FD2:6007.0035: unknown main item tag 0x0 [ 141.371775][ T327] hid-multitouch 0003:1FD2:6007.0035: unknown main item tag 0x0 [ 141.381181][ T327] hid-multitouch 0003:1FD2:6007.0035: unknown main item tag 0x0 [ 141.389150][ T327] hid-multitouch 0003:1FD2:6007.0035: unknown main item tag 0x0 [ 141.405256][ T327] hid-multitouch 0003:1FD2:6007.0035: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 141.440903][ T4124] loop3: detected capacity change from 0 to 2048 [ 141.459811][ T4124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.477738][ T4124] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.492758][ T4124] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 141.505676][ T4124] EXT4-fs (loop3): This should not happen!! Data will be lost [ 141.505676][ T4124] [ 141.515444][ T4124] EXT4-fs (loop3): Total free blocks count 0 [ 141.522022][ T4124] EXT4-fs (loop3): Free/Dirty block details [ 141.528588][ T4124] EXT4-fs (loop3): free_blocks=2415919104 [ 141.534366][ T4124] EXT4-fs (loop3): dirty_blocks=16 [ 141.539452][ T4124] EXT4-fs (loop3): Block reservation details [ 141.545270][ T4124] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 141.555501][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 141.567820][ T40] usb 5-1: USB disconnect, device number 25 [ 141.657490][ T4139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1403'. [ 141.672824][ T4139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 141.723229][ T4145] kvm: pic: non byte read [ 141.795350][ T4155] device syzkaller0 entered promiscuous mode [ 141.925125][ T28] audit: type=1400 audit(1729571596.141:522): avc: denied { ioctl } for pid=4169 comm="syz.3.1416" path="cgroup:[4026532289]" dev="nsfs" ino=4026532289 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.950227][ T322] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 141.957567][ T322] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input47 [ 141.975921][ T322] usb 2-1: USB disconnect, device number 26 [ 141.988084][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 142.118185][ T327] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 142.258167][ T19] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 142.478218][ T327] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 142.487154][ T327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.495945][ T327] usb 1-1: config 0 descriptor?? [ 142.508162][ T322] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 142.518215][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 142.553883][ T4192] fuse: Bad value for 'fd' [ 142.648181][ T19] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 142.739464][ T4164] ipt_REJECT: TCP_RESET invalid for non-tcp [ 142.748159][ T322] usb 5-1: Using ep0 maxpacket: 16 [ 142.808363][ T19] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 142.817299][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.825220][ T19] usb 3-1: Product: syz [ 142.829401][ T19] usb 3-1: Manufacturer: syz [ 142.833902][ T19] usb 3-1: SerialNumber: syz [ 142.839411][ T19] usb 3-1: config 0 descriptor?? [ 142.879044][ T19] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 142.887070][ T19] usb 3-1: Detected FT232R [ 142.918229][ T322] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.018464][ T322] usb 5-1: config 4 has an invalid interface number: 38 but max is 0 [ 143.026381][ T322] usb 5-1: config 4 has no interface number 0 [ 143.032369][ T322] usb 5-1: config 4 interface 38 has no altsetting 0 [ 143.098201][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 143.218223][ T322] usb 5-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.18 [ 143.227308][ T322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.235261][ T322] usb 5-1: Product: syz [ 143.239828][ T322] usb 5-1: Manufacturer: syz [ 143.244174][ T322] usb 5-1: SerialNumber: syz [ 143.379380][ T19] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 143.408161][ T40] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 143.579889][ T19] usb 3-1: USB disconnect, device number 24 [ 143.586632][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 143.596132][ T19] ftdi_sio 3-1:0.0: device disconnected [ 143.628246][ T322] usb 5-1: Found UVC 0.00 device syz (19ab:1000) [ 143.634617][ T322] usb 5-1: No valid video chain found. [ 143.640546][ T322] usb 5-1: USB disconnect, device number 26 [ 143.648239][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 143.768194][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.779034][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.788576][ T40] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.801222][ T40] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.810151][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.818848][ T40] usb 4-1: config 0 descriptor?? [ 143.848185][ T327] usb 1-1: Cannot set autoneg [ 143.852828][ T327] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 143.862324][ T327] usb 1-1: USB disconnect, device number 27 [ 144.049751][ T4208] kvm: vcpu 0: requested 504 ns lapic timer period limited to 200000 ns [ 144.062130][ T4208] kvm: pic: non byte write [ 144.152320][ T4212] loop4: detected capacity change from 0 to 256 [ 144.158919][ T4212] FAT-fs (loop4): bogus number of FAT sectors [ 144.164922][ T4212] FAT-fs (loop4): Can't find a valid FAT filesystem [ 144.299309][ T40] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 144.306368][ T40] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 144.313577][ T40] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 144.320801][ T40] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 144.327851][ T40] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 144.336887][ T40] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 144.344170][ T40] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 144.351274][ T40] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 144.358359][ T40] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 144.365409][ T40] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 144.379700][ T40] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0036/input/input48 [ 144.393157][ T40] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 144.437616][ T28] audit: type=1326 audit(1729571598.651:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.2.1433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe49377dff9 code=0x0 [ 144.501723][ T24] usb 4-1: USB disconnect, device number 16 [ 144.520102][ T4227] loop2: detected capacity change from 0 to 1024 [ 144.538189][ T322] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 144.542188][ T4227] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.565803][ T4069] EXT4-fs (loop2): unmounting filesystem. [ 144.774599][ T4250] device pim6reg1 entered promiscuous mode [ 144.798192][ T322] usb 5-1: Using ep0 maxpacket: 8 [ 144.851847][ T4256] overlayfs: statfs failed on './file0' [ 144.938200][ T322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.949008][ T322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.958626][ T322] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 144.967427][ T322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.976230][ T322] usb 5-1: config 0 descriptor?? [ 145.094048][ T28] audit: type=1326 audit(1729571599.311:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeef77dff9 code=0x7ffc0000 [ 145.117890][ T28] audit: type=1326 audit(1729571599.311:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeef77dff9 code=0x7ffc0000 [ 145.141547][ T19] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 145.144970][ T28] audit: type=1326 audit(1729571599.311:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7efeef77dff9 code=0x7ffc0000 [ 145.172839][ T28] audit: type=1326 audit(1729571599.311:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeef77dff9 code=0x7ffc0000 [ 145.196371][ T28] audit: type=1326 audit(1729571599.311:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeef77dff9 code=0x7ffc0000 [ 145.398132][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 145.408157][ T327] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 145.469321][ T322] saitek 0003:06A3:0CCD.0037: unknown main item tag 0x0 [ 145.476436][ T322] saitek 0003:06A3:0CCD.0037: unknown main item tag 0x0 [ 145.483157][ T322] saitek 0003:06A3:0CCD.0037: item fetching failed at offset 2/11 [ 145.491006][ T322] saitek 0003:06A3:0CCD.0037: parse failed [ 145.496647][ T322] saitek: probe of 0003:06A3:0CCD.0037 failed with error -22 [ 145.528185][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.539050][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.548886][ T19] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 145.557738][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.566266][ T19] usb 1-1: config 0 descriptor?? [ 145.648124][ T327] usb 4-1: Using ep0 maxpacket: 8 [ 145.669683][ T322] usb 5-1: USB disconnect, device number 27 [ 145.759843][ T4281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'. [ 145.768884][ T327] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.769113][ T4281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'. [ 145.948231][ T327] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.957162][ T327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.964950][ T327] usb 4-1: Product: syz [ 145.968968][ T327] usb 4-1: Manufacturer: syz [ 145.973359][ T327] usb 4-1: SerialNumber: syz [ 146.040280][ T19] greenasia 0003:0E8F:0012.0038: item fetching failed at offset 0/3 [ 146.048934][ T19] greenasia 0003:0E8F:0012.0038: parse failed [ 146.054895][ T19] greenasia: probe of 0003:0E8F:0012.0038 failed with error -22 [ 146.128159][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 146.174231][ T28] audit: type=1400 audit(1729571600.391:529): avc: denied { mount } for pid=4303 comm="syz.1.1467" name="/" dev="ramfs" ino=45155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 146.218448][ T28] audit: type=1400 audit(1729571600.391:530): avc: denied { execute } for pid=4303 comm="syz.1.1467" path="/30/file0/bus" dev="ramfs" ino=45156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 146.246028][ T313] usb 1-1: USB disconnect, device number 28 [ 146.310685][ T28] audit: type=1400 audit(1729571600.531:531): avc: denied { unmount } for pid=3771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 146.498214][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.511441][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.521332][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 146.530432][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.539511][ T24] usb 3-1: config 0 descriptor?? [ 146.543953][ T4317] loop4: detected capacity change from 0 to 128 [ 146.553145][ T4317] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.561646][ T4317] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff) [ 146.573947][ T4317] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 146.585576][ T4317] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 146.597225][ T4317] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 146.608810][ T4317] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 146.625210][ T3902] EXT4-fs (loop4): unmounting filesystem. [ 146.640094][ T4321] loop4: detected capacity change from 0 to 512 [ 146.651152][ T4321] EXT4-fs (loop4): 1 orphan inode deleted [ 146.656770][ T4321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.665780][ T4321] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 146.684492][ T3902] EXT4-fs (loop4): unmounting filesystem. [ 146.808176][ T313] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 147.108228][ T327] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 147.114546][ T327] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 147.168189][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.179484][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.189132][ T313] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 147.198180][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.206752][ T313] usb 2-1: config 0 descriptor?? [ 147.211616][ T24] usb 3-1: language id specifier not provided by device, defaulting to English [ 147.268125][ T322] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 147.319532][ T327] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 147.331801][ T327] usb 4-1: USB disconnect, device number 17 [ 147.341215][ T327] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 147.518109][ T322] usb 5-1: Using ep0 maxpacket: 16 [ 147.640282][ T24] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0039/input/input49 [ 147.653805][ T24] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0039/input/input50 [ 147.667281][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0039/input/input51 [ 147.683851][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0039/input/input52 [ 147.697531][ T24] uclogic 0003:256C:006D.0039: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 147.710227][ T313] hid (null): bogus close delimiter [ 147.833368][ T4351] loop3: detected capacity change from 0 to 512 [ 147.842050][ T19] usb 3-1: USB disconnect, device number 25 [ 147.848271][ T322] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 147.857136][ T322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.865494][ T322] usb 5-1: Product: syz [ 147.868298][ T4351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.871161][ T322] usb 5-1: Manufacturer: syz [ 147.882375][ T4351] ext4 filesystem being mounted at /28/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 147.883449][ T322] usb 5-1: SerialNumber: syz [ 147.910826][ T322] usb 5-1: config 0 descriptor?? [ 147.918216][ T313] usb 2-1: language id specifier not provided by device, defaulting to English [ 147.948780][ T322] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 147.956384][ T322] usb 5-1: Detected FT232H [ 148.023609][ T4057] EXT4-fs (loop3): unmounting filesystem. [ 148.041240][ T4358] device pim6reg1 entered promiscuous mode [ 148.168183][ T322] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 148.365288][ T4384] loop2: detected capacity change from 0 to 1024 [ 148.398219][ T313] uclogic 0003:256C:006D.003A: interface is invalid, ignoring [ 148.406274][ T4391] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.427566][ T4384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.438289][ T4384] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 148.450872][ T4384] EXT4-fs (loop2): shut down requested (2) [ 148.487285][ T4069] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 148.509126][ T313] usb 2-1: USB disconnect, device number 27 [ 148.525225][ T4069] EXT4-fs (loop2): unmounting filesystem. [ 148.572745][ T28] audit: type=1400 audit(1729571602.791:532): avc: denied { remount } for pid=4394 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 148.659970][ T322] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.699031][ T4408] device pim6reg1 entered promiscuous mode [ 148.772012][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.788080][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.796728][ T4410] device bridge_slave_0 entered promiscuous mode [ 148.804193][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.811310][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.818763][ T4410] device bridge_slave_1 entered promiscuous mode [ 148.832353][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1508'. [ 148.841196][ T4415] tipc: Started in network mode [ 148.845816][ T4415] tipc: Node identity cgroup.pn, cluster identity 8 [ 148.870902][ T40] usb 5-1: USB disconnect, device number 28 [ 148.880395][ T40] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.889629][ T4417] device pim6reg1 entered promiscuous mode [ 148.889851][ T40] ftdi_sio 5-1:0.0: device disconnected [ 148.913074][ T4419] loop3: detected capacity change from 0 to 4096 [ 148.931707][ T4419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.954366][ T4057] EXT4-fs (loop3): unmounting filesystem. [ 149.012663][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.019560][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.026647][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.033436][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.112954][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.129414][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.146733][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.174374][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.188330][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.195284][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.218175][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.226214][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.233078][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.243814][ T8] device bridge_slave_1 left promiscuous mode [ 149.250372][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.257864][ T8] device bridge_slave_0 left promiscuous mode [ 149.264444][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.272951][ T8] device veth1_macvtap left promiscuous mode [ 149.278936][ T8] device veth0_vlan left promiscuous mode [ 149.287453][ T4424] loop3: detected capacity change from 0 to 40427 [ 149.294335][ T4424] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 149.307741][ T4424] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 149.318284][ T4424] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.328449][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 149.363435][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.371414][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.392175][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.393580][ T4424] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 149.407335][ T4424] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.408786][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.435310][ T4410] device veth0_vlan entered promiscuous mode [ 149.442262][ T4424] syz.3.1512: attempt to access beyond end of device [ 149.442262][ T4424] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.442577][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.467875][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.483814][ T4410] device veth1_macvtap entered promiscuous mode [ 149.499155][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.506594][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.514070][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.522482][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.530771][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.538503][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.546582][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.559816][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.573507][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.586650][ T4453] loop1: detected capacity change from 0 to 128 [ 149.698144][ T24] usb 1-1: config 0 has no interfaces? [ 149.729993][ T4470] loop3: detected capacity change from 0 to 128 [ 149.736762][ T4469] loop2: detected capacity change from 0 to 1024 [ 149.739828][ T4466] device syzkaller0 entered promiscuous mode [ 149.748034][ T4469] EXT4-fs: Ignoring removed oldalloc option [ 149.770784][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 149.781865][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 149.791732][ T4470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.803804][ T4469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 149.806138][ T4470] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038 (0x7fffffff) [ 149.847418][ T4470] EXT4-fs error (device loop3): dx_make_map:1327: inode #2: block 20: comm syz.3.1529: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 149.858220][ T24] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 149.867214][ T4470] EXT4-fs error (device loop3) in do_split:2092: Corrupt filesystem [ 149.885727][ T4470] EXT4-fs error (device loop3): dx_make_map:1327: inode #2: block 20: comm syz.3.1529: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 149.907281][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.910403][ T4470] EXT4-fs error (device loop3) in do_split:2092: Corrupt filesystem [ 149.931001][ T4057] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=1816, inode=1633771873, rec_len=220, size=1024 fake=0 [ 149.941120][ T4410] EXT4-fs (loop2): unmounting filesystem. [ 149.956940][ T4484] loop4: detected capacity change from 0 to 2048 [ 149.964446][ T4057] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /43/file1/lost+found: directory fails checksum at offset 0 [ 149.970681][ T24] usb 1-1: Product: syz [ 149.983434][ T4057] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /43/file1/lost+found: directory fails checksum at offset 1024 [ 150.000777][ T24] usb 1-1: Manufacturer: syz [ 150.004442][ T4057] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 150.021377][ T4057] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /43/file1/lost+found: directory fails checksum at offset 3072 [ 150.022776][ T24] usb 1-1: SerialNumber: syz [ 150.037279][ T4484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 150.051133][ T4057] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /43/file1/lost+found: directory fails checksum at offset 5120 [ 150.059836][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 150.059854][ T28] audit: type=1400 audit(1729571604.281:553): avc: denied { watch } for pid=4483 comm="syz.4.1534" path="/24/file0/file0" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.067184][ T4057] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /43/file1/lost+found: directory fails checksum at offset 8192 [ 150.098332][ T24] usb 1-1: config 0 descriptor?? [ 150.110898][ T4057] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 150.131423][ T4057] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 150.148651][ T4057] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 150.157627][ T28] audit: type=1400 audit(1729571604.371:554): avc: denied { setattr } for pid=4483 comm="syz.4.1534" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.169553][ T4057] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 150.212616][ T4057] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 150.231525][ T3902] EXT4-fs (loop4): unmounting filesystem. [ 150.237872][ T4057] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 150.268589][ T4057] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 150.287363][ T4057] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 150.306088][ T4504] loop1: detected capacity change from 0 to 512 [ 150.314813][ T4504] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.330296][ T4057] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 150.352360][ T4504] EXT4-fs (loop1): 1 truncate cleaned up [ 150.359030][ T4504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.417448][ T3771] EXT4-fs (loop1): unmounting filesystem. [ 150.438827][ T4516] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1548'. [ 150.440080][ T4495] loop2: detected capacity change from 0 to 512 [ 150.456898][ T321] usb 1-1: USB disconnect, device number 29 [ 150.472456][ T4495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.484888][ T4495] EXT4-fs (loop2): Test dummy encryption mode enabled [ 150.494372][ T4495] EXT4-fs (loop2): 1 orphan inode deleted [ 150.500365][ T4495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.560132][ T4057] EXT4-fs (loop3): unmounting filesystem. [ 150.682014][ T4521] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.688179][ T313] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 150.689264][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.703748][ T4521] device bridge_slave_0 entered promiscuous mode [ 150.710920][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.717784][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.725124][ T4521] device bridge_slave_1 entered promiscuous mode [ 150.779924][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.786772][ T4521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.793914][ T4521] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.800762][ T4521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.824979][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.832467][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.840173][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.849604][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.857655][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.864522][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.889118][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.897309][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.905382][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.912741][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.920957][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.928985][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.935813][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.943073][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.950962][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.961509][ T4521] device veth0_vlan entered promiscuous mode [ 150.974303][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.986251][ T4521] device veth1_macvtap entered promiscuous mode [ 150.996500][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.006424][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.032064][ T4410] EXT4-fs (loop2): unmounting filesystem. [ 151.138710][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.153701][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.168095][ T313] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 151.177072][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.191666][ T313] usb 5-1: config 0 descriptor?? [ 151.211698][ T4538] loop3: detected capacity change from 0 to 256 [ 151.218493][ T4538] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.230823][ T4538] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 151.241810][ T4538] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 151.284087][ T4542] tipc: Started in network mode [ 151.288978][ T4542] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 151.298013][ T4542] tipc: Enabled bearer , priority 10 [ 151.307288][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.315413][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.324797][ T322] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 151.332326][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.339665][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.347215][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.355926][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.363291][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.370930][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.378956][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.386738][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.394071][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.401341][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.408504][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.415679][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.422958][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.430110][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.437304][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.444624][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.451837][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.459190][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.466401][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.473664][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.481174][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.488338][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.495514][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.502745][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.509942][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.517119][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.524360][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.531596][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.538909][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.546153][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.553557][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.560786][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.567957][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.575203][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.582448][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.589597][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.596779][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.604095][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.611416][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.618836][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.626042][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.633315][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.640536][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.647733][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.654985][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.662536][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.669767][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.676949][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.684229][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.691390][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.698688][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.709596][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.716740][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.723962][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.733502][ T322] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 151.742455][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.749673][ T321] hid-generic 0001:0000:0000.003B: unknown main item tag 0x0 [ 151.757128][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.765123][ T321] hid-generic 0001:0000:0000.003B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 151.775504][ T322] usb 3-1: config 0 descriptor?? [ 151.804954][ T43] tipc: Left network mode [ 152.029536][ T313] logitech-hidpp-device 0003:046D:C086.003C: unknown main item tag 0x0 [ 152.037937][ T313] logitech-hidpp-device 0003:046D:C086.003C: unknown main item tag 0x0 [ 152.046410][ T313] logitech-hidpp-device 0003:046D:C086.003C: unknown main item tag 0x4 [ 152.055104][ T313] logitech-hidpp-device 0003:046D:C086.003C: unknown main item tag 0x0 [ 152.067056][ T313] logitech-hidpp-device 0003:046D:C086.003C: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 152.228186][ T313] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 152.235940][ T321] usb 5-1: USB disconnect, device number 29 [ 152.241833][ T19] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 152.250299][ T322] isku 0003:1E7D:319C.003D: unknown main item tag 0x0 [ 152.256892][ T322] isku 0003:1E7D:319C.003D: unknown main item tag 0x0 [ 152.264326][ T322] isku 0003:1E7D:319C.003D: unknown main item tag 0x0 [ 152.272068][ T322] isku 0003:1E7D:319C.003D: unknown main item tag 0x0 [ 152.279314][ T322] isku 0003:1E7D:319C.003D: unknown main item tag 0x0 [ 152.285956][ T322] isku 0003:1E7D:319C.003D: unknown main item tag 0x0 [ 152.292566][ T322] isku 0003:1E7D:319C.003D: unknown main item tag 0x0 [ 152.301302][ T322] isku 0003:1E7D:319C.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 152.348801][ T43] device bridge_slave_1 left promiscuous mode [ 152.354766][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.362109][ T43] device bridge_slave_0 left promiscuous mode [ 152.368021][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.375789][ T43] device veth1_macvtap left promiscuous mode [ 152.381872][ T43] device veth0_vlan left promiscuous mode [ 152.408158][ T24] tipc: Node number set to 4269801642 [ 152.468105][ T313] usb 2-1: Using ep0 maxpacket: 32 [ 152.588187][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 152.599509][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 152.610588][ T313] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 152.619522][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.628274][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.631513][ T313] usb 2-1: config 0 descriptor?? [ 152.646654][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.656698][ T19] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 152.664034][ T4572] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 152.666103][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.682019][ T313] hub 2-1:0.0: USB hub found [ 152.683583][ T4584] input: syz0 as /devices/virtual/input/input53 [ 152.689417][ T24] usb 3-1: USB disconnect, device number 26 [ 152.696394][ T19] usb 4-1: config 0 descriptor?? [ 152.908175][ T313] hub 2-1:0.0: 2 ports detected [ 152.954770][ T4595] loop4: detected capacity change from 0 to 40427 [ 152.962298][ T4595] F2FS-fs (loop4): fault_injection options not supported [ 152.970454][ T4595] F2FS-fs (loop4): invalid crc value [ 152.976902][ T4595] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.012050][ T4595] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.024895][ T4600] f2fs_ckpt-7:4: attempt to access beyond end of device [ 153.024895][ T4600] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 153.158196][ T313] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 153.165113][ T313] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 153.198415][ T19] hid (null): bogus close delimiter [ 153.203524][ T322] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 153.268194][ T313] usbhid 2-1:0.0: can't add hid device: -71 [ 153.274131][ T313] usbhid: probe of 2-1:0.0 failed with error -71 [ 153.308544][ T313] usb 2-1: USB disconnect, device number 28 [ 153.331840][ T4621] loop4: detected capacity change from 0 to 1024 [ 153.338500][ T4621] EXT4-fs: Ignoring removed orlov option [ 153.344452][ T4621] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.352990][ T4621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.363929][ T4621] fscrypt: AES-256-XTS using blk-crypto-fallback [ 153.408173][ T19] usb 4-1: language id specifier not provided by device, defaulting to English [ 153.423472][ T3902] EXT4-fs (loop4): unmounting filesystem. [ 153.450374][ T28] audit: type=1400 audit(1729571607.671:555): avc: denied { associate } for pid=4627 comm="syz.4.1593" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 153.498270][ T3414] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 153.588184][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.599034][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.608698][ T322] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 153.617572][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.626069][ T322] usb 1-1: config 0 descriptor?? [ 153.761507][ T4635] loop1: detected capacity change from 0 to 40427 [ 153.769580][ T4635] F2FS-fs (loop1): invalid crc value [ 153.776979][ T4635] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.811946][ T4635] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 153.825797][ T4636] f2fs_ckpt-7:1: attempt to access beyond end of device [ 153.825797][ T4636] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 153.908578][ T3414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.922575][ T3414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.934594][ T3414] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 153.943728][ T3414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.952852][ T3414] usb 3-1: config 0 descriptor?? [ 154.030010][ T4650] syz.1.1601[4650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.030064][ T4650] syz.1.1601[4650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.078330][ T19] uclogic 0003:256C:006D.003E: failed retrieving string descriptor #100: -71 [ 154.098374][ T19] uclogic 0003:256C:006D.003E: failed retrieving pen parameters: -71 [ 154.106275][ T19] uclogic 0003:256C:006D.003E: failed probing pen v1 parameters: -71 [ 154.115399][ T322] hid-led 0003:1D34:000A.003F: unknown main item tag 0x0 [ 154.122470][ T19] uclogic 0003:256C:006D.003E: failed probing parameters: -71 [ 154.130279][ T19] uclogic: probe of 0003:256C:006D.003E failed with error -71 [ 154.138791][ T19] usb 4-1: USB disconnect, device number 18 [ 154.166476][ T4656] loop1: detected capacity change from 0 to 256 [ 154.172861][ T4656] exfat: Bad value for 'fmask' [ 154.318860][ T322] hid-led 0003:1D34:000A.003F: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 154.331259][ T322] hid-led 0003:1D34:000A.003F: Dream Cheeky Webmail Notifier initialized [ 154.419219][ T3414] hid-multitouch 0003:0EEF:72D0.0040: unknown main item tag 0x0 [ 154.426701][ T3414] hid-multitouch 0003:0EEF:72D0.0040: unknown main item tag 0x0 [ 154.434228][ T3414] hid-multitouch 0003:0EEF:72D0.0040: unknown main item tag 0x0 [ 154.441673][ T3414] hid-multitouch 0003:0EEF:72D0.0040: unknown main item tag 0x0 [ 154.449308][ T3414] hid-multitouch 0003:0EEF:72D0.0040: unknown main item tag 0x0 [ 154.457446][ T3414] hid-multitouch 0003:0EEF:72D0.0040: hidraw1: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 154.539053][ T40] usb 1-1: USB disconnect, device number 30 [ 154.574159][ T3414] kernel write not supported for file /ppp (pid: 3414 comm: kworker/0:7) [ 154.620833][ T3414] usb 3-1: USB disconnect, device number 27 [ 154.668125][ T19] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 154.770557][ T4687] loop3: detected capacity change from 0 to 128 [ 154.778995][ T4687] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 154.787415][ T4687] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038 (0x7fffffff) [ 154.806404][ T4521] EXT4-fs (loop3): unmounting filesystem. [ 154.825797][ T4690] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.869985][ T4693] loop3: detected capacity change from 0 to 128 [ 154.878710][ T4693] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 154.918685][ T4693] loop3: detected capacity change from 128 to 0 [ 154.931210][ T4521] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 154.946966][ T4521] EXT4-fs error (device loop3): htree_dirblock_to_tree:1082: inode #2: comm syz-executor: Directory block failed checksum [ 154.968128][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 155.098316][ T19] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 155.108486][ T19] usb 5-1: config 0 has no interface number 0 [ 155.120944][ T19] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 155.142779][ T19] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 155.159877][ T19] usb 5-1: config 0 interface 41 has no altsetting 0 [ 155.167360][ T4705] loop2: detected capacity change from 0 to 1024 [ 155.189910][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.197947][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.205900][ T4702] device bridge_slave_0 entered promiscuous mode [ 155.206286][ T4705] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 155.219337][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.234372][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.243561][ T4705] EXT4-fs (loop2): shut down requested (2) [ 155.260292][ T4702] device bridge_slave_1 entered promiscuous mode [ 155.287311][ T4713] loop1: detected capacity change from 0 to 512 [ 155.309739][ T4705] EXT4-fs (loop2): resizing filesystem from 0 to 1 blocks [ 155.316804][ T4705] EXT4-fs (loop2): Converting file system to meta_bg [ 155.323601][ T4705] EXT4-fs warning (device loop2): ext4_resize_fs:2198: error (-5) occurred during file system resize [ 155.334364][ T4705] EXT4-fs (loop2): resized filesystem to 0 [ 155.358189][ T19] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 155.367817][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.377742][ T19] usb 5-1: Product: syz [ 155.387331][ T19] usb 5-1: Manufacturer: syz [ 155.396460][ T19] usb 5-1: SerialNumber: syz [ 155.410179][ T19] usb 5-1: config 0 descriptor?? [ 155.437304][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.444199][ T4702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.451498][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.458356][ T4702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.465543][ T4670] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 155.476784][ T4670] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 155.497514][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.505813][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.514348][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.529119][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.537212][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.544092][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.563407][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.573675][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.580589][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.608938][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.616784][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.659181][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.675012][ T4702] device veth0_vlan entered promiscuous mode [ 155.683699][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.689311][ T4670] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 155.692022][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.704464][ T4670] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 155.705545][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.729946][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.738905][ T43] device bridge_slave_1 left promiscuous mode [ 155.744883][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.752368][ T43] device bridge_slave_0 left promiscuous mode [ 155.758612][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.766742][ T43] device veth1_macvtap left promiscuous mode [ 155.772686][ T43] device veth0_vlan left promiscuous mode [ 155.826708][ T4724] loop1: detected capacity change from 0 to 40427 [ 155.833712][ T4724] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 155.842383][ T4724] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 155.853183][ T4724] F2FS-fs (loop1): invalid crc value [ 155.860402][ T4724] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.892237][ T4702] device veth1_macvtap entered promiscuous mode [ 155.900886][ T4724] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 155.907902][ T4724] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.915935][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.934218][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.946337][ T3771] syz-executor: attempt to access beyond end of device [ 155.946337][ T3771] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.996410][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.017364][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.031205][ T4725] device bridge_slave_0 entered promiscuous mode [ 156.042376][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.049377][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.056674][ T4725] device bridge_slave_1 entered promiscuous mode [ 156.127174][ T4736] loop1: detected capacity change from 0 to 2048 [ 156.211050][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.217932][ T4725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.222183][ T4750] loop1: detected capacity change from 0 to 128 [ 156.225099][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.238033][ T4725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.247476][ T4750] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 156.278820][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.287264][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.297449][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.305675][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.325009][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.333494][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.340381][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.364239][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.373069][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.379950][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.390520][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.398665][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.408209][ T19] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 156.430075][ T4725] device veth0_vlan entered promiscuous mode [ 156.438303][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.446682][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.455007][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.458451][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 156.462448][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.484665][ T4725] device veth1_macvtap entered promiscuous mode [ 156.496800][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.524799][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.546037][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.590786][ T4776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1648'. [ 156.625250][ T28] audit: type=1400 audit(1729571610.841:556): avc: denied { listen } for pid=4780 comm="syz.2.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.645640][ T28] audit: type=1400 audit(1729571610.841:557): avc: denied { accept } for pid=4780 comm="syz.2.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.718167][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 156.808154][ T313] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 156.838150][ T24] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 156.846079][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 156.855071][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.866145][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.875846][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.876434][ T43] device bridge_slave_1 left promiscuous mode [ 156.888490][ T24] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 156.888520][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.895156][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.918840][ T24] usb 1-1: config 0 descriptor?? [ 156.924039][ T43] device bridge_slave_0 left promiscuous mode [ 156.930689][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.940432][ T43] device veth1_macvtap left promiscuous mode [ 156.946419][ T43] device veth0_vlan left promiscuous mode [ 157.328193][ T313] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 157.337194][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.345219][ T313] usb 2-1: Product: syz [ 157.349379][ T313] usb 2-1: Manufacturer: syz [ 157.353760][ T313] usb 2-1: SerialNumber: syz [ 157.359397][ T313] usb 2-1: config 0 descriptor?? [ 157.399380][ T24] hid-steam 0003:28DE:1102.0041: unknown main item tag 0x0 [ 157.406654][ T24] hid-steam 0003:28DE:1102.0041: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 157.417974][ T313] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 157.427053][ T24] hid-steam 0003:28DE:1102.0042: unknown main item tag 0x0 [ 157.434871][ T24] hid-steam 0003:28DE:1102.0042: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 157.508144][ T24] hid-steam 0003:28DE:1102.0041: Steam Controller 'XXXXXXXXXX' connected [ 157.517082][ T24] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0041/input/input54 [ 157.601065][ T24] usb 2-1: USB disconnect, device number 29 [ 157.601071][ T3414] usb 1-1: USB disconnect, device number 31 [ 157.615616][ T3414] hid-steam 0003:28DE:1102.0041: Steam Controller 'XXXXXXXXXX' disconnected [ 157.888214][ T19] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 157.928141][ T19] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 157.939364][ T19] CoreChips: probe of 5-1:0.41 failed with error -71 [ 157.946667][ T19] usb 5-1: USB disconnect, device number 30 [ 158.124205][ T28] audit: type=1326 audit(1729571612.341:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.0.1658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x0 [ 158.219042][ T4808] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns [ 158.582911][ T4819] xt_bpf: check failed: parse error [ 158.633875][ T4822] loop4: detected capacity change from 0 to 512 [ 158.650935][ T4822] EXT4-fs (loop4): 1 orphan inode deleted [ 158.656628][ T4822] EXT4-fs mount: 8 callbacks suppressed [ 158.656645][ T4822] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.670896][ T4822] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff) [ 158.702789][ T3902] EXT4-fs (loop4): unmounting filesystem. [ 158.903818][ T4838] loop4: detected capacity change from 0 to 2048 [ 158.929832][ T4838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 158.973706][ T3902] EXT4-fs (loop4): unmounting filesystem. [ 159.007875][ T4849] loop4: detected capacity change from 0 to 1024 [ 159.029814][ T4849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 159.059589][ T3902] EXT4-fs (loop4): unmounting filesystem. [ 159.272603][ T4847] loop3: detected capacity change from 0 to 40427 [ 159.279668][ T4847] F2FS-fs (loop3): Invalid log blocks per segment (83886089) [ 159.287150][ T4847] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 159.296596][ T4847] F2FS-fs (loop3): invalid crc value [ 159.304255][ T4847] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.362881][ T4847] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 159.369916][ T4847] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.390533][ T4702] syz-executor: attempt to access beyond end of device [ 159.390533][ T4702] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.636323][ T4886] syz.4.1688[4886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.636397][ T4886] syz.4.1688[4886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.743301][ T4898] loop4: detected capacity change from 0 to 1024 [ 159.769348][ T4876] loop3: detected capacity change from 0 to 40427 [ 159.771854][ T4898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.779616][ T4876] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 159.792079][ T4876] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 159.801128][ T4876] F2FS-fs (loop3): invalid crc value [ 159.810013][ T4876] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.817981][ T28] audit: type=1400 audit(1729571614.031:559): avc: denied { rename } for pid=4897 comm="syz.4.1694" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.841083][ T28] audit: type=1400 audit(1729571614.061:560): avc: denied { reparent } for pid=4897 comm="syz.4.1694" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.874796][ T3902] EXT4-fs (loop4): unmounting filesystem. [ 159.896520][ T4876] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 159.898350][ T4907] device pim6reg1 entered promiscuous mode [ 159.909621][ T4876] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.935344][ T28] audit: type=1400 audit(1729571614.151:561): avc: denied { rename } for pid=4875 comm="syz.3.1682" name="file0" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 159.935518][ T4876] syz.3.1682: attempt to access beyond end of device [ 159.935518][ T4876] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.988150][ T19] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 160.184450][ T4934] IPv6: addrconf: prefix option has invalid lifetime [ 160.278258][ T24] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 160.338476][ T28] audit: type=1400 audit(1729571614.561:562): avc: denied { map } for pid=4944 comm="syz.0.1713" path="socket:[49509]" dev="sockfs" ino=49509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.358165][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.372576][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.382476][ T19] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 160.392037][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.405452][ T19] usb 2-1: config 0 descriptor?? [ 160.418195][ T474] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 160.668203][ T24] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 160.676821][ T24] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 160.686949][ T24] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 160.696007][ T24] usb 5-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 160.707437][ T474] usb 4-1: Using ep0 maxpacket: 32 [ 160.712458][ T24] usb 5-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.798204][ T24] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 160.806815][ T24] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 160.817263][ T24] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 160.826272][ T24] usb 5-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 160.836745][ T24] usb 5-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.849571][ T474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.860549][ T474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.870135][ T474] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 160.879011][ T474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.891301][ T474] usb 4-1: config 0 descriptor?? [ 160.928795][ T474] hub 4-1:0.0: USB hub found [ 160.948305][ T24] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 160.956935][ T24] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 160.967001][ T24] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 160.975970][ T24] usb 5-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 160.986476][ T24] usb 5-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.138229][ T474] hub 4-1:0.0: 1 port detected [ 161.278205][ T24] usb 5-1: string descriptor 0 read error: -22 [ 161.284228][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 161.293140][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.408196][ T474] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 161.414373][ T474] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 161.538210][ T474] usbhid 4-1:0.0: can't add hid device: -71 [ 161.544059][ T474] usbhid: probe of 4-1:0.0 failed with error -71 [ 161.588280][ T19] uclogic 0003:256C:006D.0043: failed retrieving string descriptor #100: -71 [ 161.588618][ T474] usb 4-1: USB disconnect, device number 19 [ 161.598158][ T19] uclogic 0003:256C:006D.0043: failed retrieving pen parameters: -71 [ 161.605666][ T313] usb 5-1: USB disconnect, device number 31 [ 161.615512][ T19] uclogic 0003:256C:006D.0043: failed probing pen v1 parameters: -71 [ 161.624327][ T19] uclogic 0003:256C:006D.0043: failed probing parameters: -71 [ 161.631591][ T19] uclogic: probe of 0003:256C:006D.0043 failed with error -71 [ 161.640392][ T19] usb 2-1: USB disconnect, device number 30 [ 161.962316][ T4974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.969353][ T4974] IPv6: NLM_F_CREATE should be set when creating new route [ 162.024887][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 162.040480][ T4980] device pim6reg1 entered promiscuous mode [ 162.064964][ T4982] Disabled LAPIC found during irq injection [ 162.130238][ T4988] loop4: detected capacity change from 0 to 1024 [ 162.160876][ T4988] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.175818][ T4988] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.188600][ T4994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1732'. [ 162.198287][ T4988] JBD2: no valid journal superblock found [ 162.204516][ T4988] EXT4-fs (loop4): error loading journal [ 162.214736][ T4994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1732'. [ 162.241354][ T5000] loop1: detected capacity change from 0 to 256 [ 162.254259][ T28] audit: type=1400 audit(1729571616.471:563): avc: denied { mount } for pid=4999 comm="syz.1.1733" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 162.339025][ T5000] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns [ 162.611368][ T5016] loop3: detected capacity change from 0 to 40427 [ 162.624077][ T5016] F2FS-fs (loop3): invalid crc value [ 162.638889][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.648481][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.649063][ T5016] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.655710][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.677804][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.685579][ T28] audit: type=1326 audit(1729571616.901:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 162.709010][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.716273][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.723960][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.727244][ T28] audit: type=1326 audit(1729571616.901:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 162.731597][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.758882][ T5016] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 162.778250][ T28] audit: type=1326 audit(1729571616.901:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 162.801749][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.809391][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.814563][ T4702] syz-executor: attempt to access beyond end of device [ 162.814563][ T4702] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 162.819623][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.830800][ T28] audit: type=1326 audit(1729571616.901:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 162.842052][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.861433][ T4702] syz-executor: attempt to access beyond end of device [ 162.861433][ T4702] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 162.869380][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.881975][ T28] audit: type=1326 audit(1729571616.901:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 162.889361][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.916964][ T28] audit: type=1326 audit(1729571616.901:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 162.919704][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.944150][ T28] audit: type=1326 audit(1729571616.901:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 162.950254][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.980178][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.987455][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 162.998844][ T28] audit: type=1326 audit(1729571616.901:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 163.000461][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.022182][ T28] audit: type=1326 audit(1729571616.901:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f191397dff9 code=0x7ffc0000 [ 163.029705][ T351] kworker/u4:5: attempt to access beyond end of device [ 163.029705][ T351] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 163.066476][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.073977][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.081245][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.088436][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.095611][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.102856][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.110068][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.117245][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.124466][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.131647][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.138837][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.146014][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.153266][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.160451][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.167700][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.174989][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.182550][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.189873][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.197101][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.204386][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.211676][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.218843][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.226017][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.233257][ T474] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 163.241064][ T474] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz0] on syz0 [ 163.271390][ T5031] device pim6reg1 entered promiscuous mode [ 163.289567][ T5036] loop4: detected capacity change from 0 to 128 [ 163.322743][ T5036] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.331820][ T5036] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 163.338599][ T314] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 163.369948][ T5036] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 163.388312][ T5036] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 163.403601][ T3902] EXT4-fs (loop4): unmounting filesystem. [ 163.505948][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.512902][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.520260][ T5044] device bridge_slave_0 entered promiscuous mode [ 163.527247][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.534655][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.542295][ T5044] device bridge_slave_1 entered promiscuous mode [ 163.609193][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.616084][ T5044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.623204][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.630063][ T5044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.651847][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.659514][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.666633][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.677692][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.686235][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.693086][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.700278][ T313] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 163.717213][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.725244][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.732130][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.739309][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.750167][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.758114][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.767678][ T314] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.777161][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.787377][ T314] usb 2-1: config 0 descriptor?? [ 163.792864][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.807748][ T5044] device veth0_vlan entered promiscuous mode [ 163.814233][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.823709][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.831824][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.839139][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.847443][ T351] device bridge_slave_1 left promiscuous mode [ 163.853420][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.860652][ T351] device bridge_slave_0 left promiscuous mode [ 163.866566][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.874602][ T351] device veth1_macvtap left promiscuous mode [ 163.880601][ T351] device veth0_vlan left promiscuous mode [ 163.986190][ T5044] device veth1_macvtap entered promiscuous mode [ 163.993028][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.004215][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.016511][ T3414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.110971][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.121817][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.131732][ T313] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 164.140829][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.149375][ T313] usb 5-1: config 0 descriptor?? [ 164.488228][ T314] usb 2-1: language id specifier not provided by device, defaulting to English [ 164.618393][ T313] hid (null): bogus close delimiter [ 164.718777][ T351] device bridge_slave_1 left promiscuous mode [ 164.724897][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.732898][ T351] device bridge_slave_0 left promiscuous mode [ 164.738904][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.746749][ T351] device veth1_macvtap left promiscuous mode [ 164.752639][ T351] device veth0_vlan left promiscuous mode [ 164.878311][ T313] usb 5-1: language id specifier not provided by device, defaulting to English [ 164.929850][ T314] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0045/input/input55 [ 164.942716][ T314] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0045/input/input56 [ 164.955375][ T314] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0045/input/input57 [ 164.969160][ T314] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0045/input/input58 [ 164.982886][ T314] uclogic 0003:256C:006D.0045: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 165.108166][ T313] uclogic 0003:256C:006D.0046: failed retrieving Huion firmware version: -71 [ 165.116776][ T313] uclogic 0003:256C:006D.0046: failed probing parameters: -71 [ 165.124759][ T313] uclogic: probe of 0003:256C:006D.0046 failed with error -71 [ 165.137330][ T313] usb 5-1: USB disconnect, device number 32 [ 165.143538][ T474] usb 2-1: USB disconnect, device number 31 [ 165.664963][ T5069] loop4: detected capacity change from 0 to 256 [ 165.672979][ T5069] FAT-fs (loop4): bogus number of FAT sectors [ 165.679223][ T5069] FAT-fs (loop4): Can't find a valid FAT filesystem [ 165.938149][ T474] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 166.298230][ T474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.308994][ T474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.318535][ T474] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 166.327343][ T474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.335899][ T474] usb 2-1: config 0 descriptor?? [ 166.808896][ T474] appleir 0003:05AC:8243.0047: report_id 0 is invalid [ 166.815482][ T474] appleir 0003:05AC:8243.0047: item 0 0 1 8 parsing failed [ 166.822919][ T474] appleir 0003:05AC:8243.0047: parse failed [ 166.828679][ T474] appleir: probe of 0003:05AC:8243.0047 failed with error -22 [ 167.009718][ T474] usb 2-1: USB disconnect, device number 32 [ 167.254391][ T8] tipc: Disabling bearer [ 167.259237][ T8] tipc: Left network mode SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=3 req=1748 state=1 status=67 (errno 9: Bad file descriptor) [ 167.838801][ T8] device bridge_slave_1 left promiscuous mode [ 167.844722][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.852080][ T8] device bridge_slave_0 left promiscuous mode [ 167.857993][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.865883][ T8] device veth1_macvtap left promiscuous mode [ 167.871837][ T8] device veth0_vlan left promiscuous mode [ 168.659091][ T8] device bridge_slave_1 left promiscuous mode [ 168.665021][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.672361][ T8] device bridge_slave_0 left promiscuous mode [ 168.678377][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.685989][ T8] device bridge_slave_1 left promiscuous mode [ 168.691993][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.699291][ T8] device bridge_slave_0 left promiscuous mode [ 168.705194][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.713040][ T8] device bridge_slave_1 left promiscuous mode [ 168.719098][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.726511][ T8] device bridge_slave_0 left promiscuous mode [ 168.732560][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.740695][ T8] device veth1_macvtap left promiscuous mode [ 168.746516][ T8] device veth0_vlan left promiscuous mode [ 168.752454][ T8] device veth1_macvtap left promiscuous mode [ 168.758305][ T8] device veth0_vlan left promiscuous mode [ 168.764191][ T8] device veth1_macvtap left promiscuous mode [ 168.770110][ T8] device veth0_vlan left promiscuous mode [ 173.248857][ T337] device bridge_slave_1 left promiscuous mode [ 173.254816][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.262232][ T337] device bridge_slave_0 left promiscuous mode [ 173.268504][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.276223][ T337] device veth1_macvtap left promiscuous mode [ 173.282240][ T337] device veth0_vlan left promiscuous mode