last executing test programs: 2.291395784s ago: executing program 1 (id=3460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xffffffff}}]}}, 0x0, 0x3e}, 0x20) 1.427375144s ago: executing program 1 (id=3481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[@ANYRESHEX], 0x240) 1.348562421s ago: executing program 1 (id=3484): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) syncfs(r1) unlink(&(0x7f0000000000)='./file1\x00') sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 1.262177238s ago: executing program 4 (id=3488): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) unshare(0x20000400) unshare(0x68020080) 1.254948728s ago: executing program 4 (id=3489): r0 = socket$inet(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010200)={0x0, 0x0, &(0x7f00000101c0)={0x0}}, 0x4000800) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000007060102000000000000e1ff0000000005000100070000000800064000000004"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\b\x00', @ANYRES32=r3, @ANYBLOB="0a00060008021100000000002c0050800400050011000100ca"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r7, &(0x7f00000bd000), 0x80, 0x0) write$binfmt_elf64(r6, 0x0, 0x0) close(r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x28}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r5) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x0, 0x10000, 0x808}, 0x48) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1.002482628s ago: executing program 4 (id=3490): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 1.002152919s ago: executing program 4 (id=3491): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf974a457bb636ff6}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x0, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 989.14877ms ago: executing program 4 (id=3492): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r2, 0x8910, 0x20001114) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) 922.741175ms ago: executing program 3 (id=3493): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) 922.500165ms ago: executing program 3 (id=3494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[@ANYRESHEX], 0x240) 902.289667ms ago: executing program 3 (id=3495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 833.590702ms ago: executing program 3 (id=3498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}, @CTA_ZONE={0x6}]}, 0x20}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 833.269782ms ago: executing program 3 (id=3500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xffffffff}}]}}, 0x0, 0x3e}, 0x20) 831.714793ms ago: executing program 2 (id=3502): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 785.979966ms ago: executing program 4 (id=3503): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000002) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='btrfs_setup_cluster\x00', r0}, 0x3c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000001380)={0x3, 'vlan1\x00'}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 745.935929ms ago: executing program 2 (id=3505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[@ANYRESHEX], 0x240) 725.100341ms ago: executing program 3 (id=3507): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) socket$packet(0x11, 0x3, 0x300) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@perf_event}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x22eb}, @val={0x2, 0x3, 0x1f, 0x3, 0x1}, @arp=@generic={0x103, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @local}}, 0x22) close_range(r1, 0xffffffffffffffff, 0x0) 647.315247ms ago: executing program 2 (id=3513): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder-control\x00', 0x93223395ccca2fa7, 0x0) 577.221923ms ago: executing program 0 (id=3515): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x127842, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) setreuid(0x0, 0xee01) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x1000000201005) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 526.325767ms ago: executing program 0 (id=3516): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 468.285842ms ago: executing program 1 (id=3517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf974a457bb636ff6}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x0, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 455.577623ms ago: executing program 1 (id=3518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xffffffff}}]}}, 0x0, 0x3e}, 0x20) 394.773978ms ago: executing program 0 (id=3519): open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r1 = open(&(0x7f0000000100)='./bus\x00', 0x107502, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x3f, 0x0, 0x4) 333.582783ms ago: executing program 1 (id=3520): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) 262.530068ms ago: executing program 0 (id=3521): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r0}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) unshare(0x8040480) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000240)) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a00), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x144000, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000180), 0x20000000}, 0x20) 86.867673ms ago: executing program 0 (id=3522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x0, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) setgroups(0x0, 0x0) 86.643903ms ago: executing program 0 (id=3523): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x2700000000000000, &(0x7f00000002c0), 0x1, 0x240, &(0x7f0000000300)="$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") 47.106736ms ago: executing program 2 (id=3524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[@ANYRESHEX], 0x240) 8.614919ms ago: executing program 2 (id=3525): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 2 (id=3526): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0xfe5e0000, "bfd8a5dd2002c02142c4391145badd28fd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r3) sendmsg$inet6(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r9, @ANYBLOB='.'], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001400010400000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000100fe"], 0x2c}}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r10 = dup(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000008", @ANYRES16, @ANYBLOB="00022cbd7000fbdbdf250100000000000000014100000018001700000009000000067564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x8015}, 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r10, &(0x7f0000000d00)={&(0x7f0000000280), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4) write$uinput_user_dev(r10, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [], [0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$USBDEVFS_REAPURB(r10, 0x4008550c, &(0x7f0000000000)) write$uinput_user_dev(r10, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) kernel console output (not intermixed with test programs): 1097] device veth0_vlan entered promiscuous mode [ 628.847569][ T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.855383][ T354] usb 3-1: Product: ࡉ [ 628.866206][T11097] device veth1_macvtap entered promiscuous mode [ 628.874738][ T354] usb 3-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 628.907321][ T30] audit: type=1326 audit(1721437428.135:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.4.3068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d88c5b59 code=0x7ffc0000 [ 628.938313][ T30] audit: type=1326 audit(1721437428.135:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.4.3068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe0d88c5b59 code=0x7ffc0000 [ 628.957331][ T354] usb 3-1: SerialNumber: ఁ [ 628.961994][ T30] audit: type=1326 audit(1721437428.135:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.4.3068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0d88c5b93 code=0x7ffc0000 [ 629.005842][T11115] loop1: detected capacity change from 0 to 256 [ 629.171613][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.181142][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.189582][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.197176][ T30] audit: type=1326 audit(1721437428.175:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76276adb59 code=0x7ffc0000 [ 629.232470][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 629.247066][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 629.262864][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 629.282143][ T30] audit: type=1326 audit(1721437428.225:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f76276adb59 code=0x7ffc0000 [ 629.336726][ T30] audit: type=1326 audit(1721437428.225:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76276adb93 code=0x7ffc0000 [ 629.403747][T11119] loop3: detected capacity change from 0 to 512 [ 629.478404][T11119] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 629.568235][T11119] EXT4-fs (loop3): 1 orphan inode deleted [ 629.573832][T11119] EXT4-fs (loop3): 1 truncate cleaned up [ 629.579302][T11119] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 629.617880][ T354] usb 3-1: 0:2 : does not exist [ 629.627778][ T354] usb 3-1: USB disconnect, device number 102 [ 629.664433][ T30] audit: type=1326 audit(1721437429.005:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f76276ac6df code=0x7ffc0000 [ 630.019727][ T30] audit: type=1326 audit(1721437429.365:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.4.3068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0d88c46df code=0x7ffc0000 [ 630.126234][T11130] loop3: detected capacity change from 0 to 512 [ 630.178005][T10400] device bridge_slave_1 left promiscuous mode [ 630.185069][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.187012][ T30] audit: type=1326 audit(1721437429.525:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f76276adbe7 code=0x7ffc0000 [ 630.215548][T10400] device bridge_slave_0 left promiscuous mode [ 630.218140][T11113] loop0: detected capacity change from 0 to 131072 [ 630.222446][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.235256][T11130] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 630.235256][T11130] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 630.235256][T11130] [ 630.258133][T11113] F2FS-fs (loop0): Invalid log_blocksize (32), supports only 12 [ 630.268301][T10400] device veth1_macvtap left promiscuous mode [ 630.269977][T11113] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 630.280327][T10400] device veth0_vlan left promiscuous mode [ 630.284786][T11113] F2FS-fs (loop0): Found nat_bits in checkpoint [ 630.288207][T11130] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 630.308150][T11130] EXT4-fs (loop3): 1 truncate cleaned up [ 630.313618][T11130] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 630.359055][T11113] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 630.366927][T11113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 630.398782][T11111] loop4: detected capacity change from 0 to 131072 [ 630.479469][T11111] F2FS-fs (loop4): Invalid log_blocksize (32), supports only 12 [ 630.495528][T11111] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 630.561806][T11137] syz.3.3072[11137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 630.562175][T11137] syz.3.3072[11137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 630.720486][T11137] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 630.800918][T11111] F2FS-fs (loop4): Found nat_bits in checkpoint [ 630.906296][T11111] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 630.913321][T11111] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 631.057035][T11157] loop2: detected capacity change from 0 to 256 [ 631.067889][T11156] loop3: detected capacity change from 0 to 512 [ 631.173657][T11156] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 631.186963][T11156] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 631.212688][T11156] incfs: Error accessing: ./file0. [ 631.219472][T11156] incfs: mount failed -20 [ 631.299334][T11164] device wireguard0 entered promiscuous mode [ 631.398205][T11169] loop0: detected capacity change from 0 to 256 [ 631.659663][T11175] FAULT_INJECTION: forcing a failure. [ 631.659663][T11175] name failslab, interval 1, probability 0, space 0, times 0 [ 631.672192][T11175] CPU: 1 PID: 11175 Comm: syz.4.3082 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 631.681980][T11175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 631.691873][T11175] Call Trace: [ 631.694998][T11175] [ 631.697774][T11175] dump_stack_lvl+0x151/0x1b7 [ 631.702287][T11175] ? io_uring_drop_tctx_refs+0x190/0x190 [ 631.707756][T11175] dump_stack+0x15/0x17 [ 631.711746][T11175] should_fail+0x3c6/0x510 [ 631.716002][T11175] __should_failslab+0xa4/0xe0 [ 631.720602][T11175] should_failslab+0x9/0x20 [ 631.724939][T11175] slab_pre_alloc_hook+0x37/0xd0 [ 631.729717][T11175] ? __se_sys_mount+0x9b/0x3b0 [ 631.734312][T11175] __kmalloc_track_caller+0x6c/0x260 [ 631.739434][T11175] ? __se_sys_mount+0x9b/0x3b0 [ 631.744034][T11175] strndup_user+0x76/0x150 [ 631.748286][T11175] __se_sys_mount+0x9b/0x3b0 [ 631.752712][T11175] ? fput+0x1a/0x20 [ 631.756360][T11175] ? ksys_write+0x260/0x2c0 [ 631.760698][T11175] ? __x64_sys_mount+0xd0/0xd0 [ 631.765298][T11175] ? debug_smp_processor_id+0x17/0x20 [ 631.770505][T11175] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 631.776408][T11175] __x64_sys_mount+0xbf/0xd0 [ 631.780836][T11175] do_syscall_64+0x3d/0xb0 [ 631.785089][T11175] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 631.790816][T11175] RIP: 0033:0x7fe0d88c5b59 [ 631.795070][T11175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.814510][T11175] RSP: 002b:00007fe0d7b26048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 631.822754][T11175] RAX: ffffffffffffffda RBX: 00007fe0d8a56038 RCX: 00007fe0d88c5b59 [ 631.830568][T11175] RDX: 00000000200001c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 631.838380][T11175] RBP: 00007fe0d7b260a0 R08: 0000000020000440 R09: 0000000000000000 [ 631.846189][T11175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.854000][T11175] R13: 000000000000006e R14: 00007fe0d8a56038 R15: 00007ffc1d943628 [ 631.861818][T11175] [ 632.145641][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.152581][T11182] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.160090][T11182] device bridge_slave_0 entered promiscuous mode [ 632.167055][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.174464][T11182] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.190027][T11182] device bridge_slave_1 entered promiscuous mode [ 632.317288][ T354] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 632.365229][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.372108][T11182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.379308][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.386141][T11182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.481323][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.491168][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.508436][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.532315][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.547513][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.554358][ T634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.577377][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.585394][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.592258][ T634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.618122][T10400] device bridge_slave_1 left promiscuous mode [ 632.624117][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.644560][T10400] device bridge_slave_0 left promiscuous mode [ 632.650538][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.670131][T11178] loop2: detected capacity change from 0 to 131072 [ 632.681053][T10400] device veth1_macvtap left promiscuous mode [ 632.686863][T10400] device veth0_vlan left promiscuous mode [ 632.717341][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.733606][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.751748][ T354] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 632.762710][T11178] F2FS-fs (loop2): Invalid log_blocksize (32), supports only 12 [ 632.777288][T11178] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 632.777350][T10121] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 632.805847][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.814944][T11178] F2FS-fs (loop2): Found nat_bits in checkpoint [ 632.842264][ T354] usb 2-1: config 0 descriptor?? [ 632.876951][T11178] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 632.884392][T11178] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 632.911050][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.920760][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.929124][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.948781][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.957196][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.966284][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 632.974143][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.982555][T11182] device veth0_vlan entered promiscuous mode [ 632.989272][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 633.007327][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 633.020693][T11182] device veth1_macvtap entered promiscuous mode [ 633.034811][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 633.042872][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 633.056966][T11199] loop0: detected capacity change from 0 to 512 [ 633.057670][T10121] usb 5-1: Using ep0 maxpacket: 32 [ 633.072584][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 633.080438][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 633.089004][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 633.108474][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 633.126795][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 633.218184][T11199] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 633.229203][T11199] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 633.277373][T10121] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.294539][T10121] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 633.295974][T11212] loop2: detected capacity change from 0 to 512 [ 633.309776][T11213] overlayfs: './file2' not a directory [ 633.418155][T11212] EXT4-fs (loop2): Test dummy encryption mode enabled [ 633.425660][T11212] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.3093: casefold flag without casefold feature [ 633.457366][T10121] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.466453][T10121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.474602][T10121] usb 5-1: Product: ࡉ [ 633.478862][T10121] usb 5-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 633.497884][T11216] loop3: detected capacity change from 0 to 256 [ 633.504818][T10121] usb 5-1: SerialNumber: ఁ [ 633.522187][T11212] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 633.531832][T11212] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 633.546972][T11212] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 633.635371][T11219] loop2: detected capacity change from 0 to 512 [ 633.688966][T11219] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 633.699888][T11219] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 633.718137][T11219] incfs: Error accessing: ./file0. [ 633.723105][T11219] incfs: mount failed -20 [ 633.781795][T11222] device wireguard0 entered promiscuous mode [ 633.867396][T10121] usb 5-1: 0:2 : does not exist [ 633.874641][T10121] usb 5-1: USB disconnect, device number 92 [ 633.904555][T11226] loop0: detected capacity change from 0 to 512 [ 633.928790][T11226] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 633.939812][T11226] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 633.962507][T11226] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 634.174710][T11232] loop3: detected capacity change from 0 to 512 [ 634.278843][T11232] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 634.290216][T11232] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 634.312434][T11232] incfs: Error accessing: ./file0. [ 634.317487][T11232] incfs: mount failed -20 [ 634.347345][ T295] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 634.377182][T11235] device wireguard0 entered promiscuous mode [ 634.491069][T11035] __quota_error: 103 callbacks suppressed [ 634.491082][T11035] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 634.507056][T11035] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 634.587303][ T295] usb 1-1: Using ep0 maxpacket: 32 [ 634.672388][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.679284][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.686391][T11238] device bridge_slave_0 entered promiscuous mode [ 634.693604][T11238] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.700465][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.707749][T11238] device bridge_slave_1 entered promiscuous mode [ 634.749029][T11238] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.755902][T11238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.763003][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.769781][T11238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.787367][ T295] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.792902][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 634.797527][ T295] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.813335][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.820624][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.833907][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 634.842032][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.848889][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.856315][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 634.864299][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.871142][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.883805][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.891595][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.908231][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 634.920213][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.928007][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 634.935229][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.946464][T11238] device veth0_vlan entered promiscuous mode [ 634.956637][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 634.965810][T11238] device veth1_macvtap entered promiscuous mode [ 634.977592][ T295] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.977661][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 635.000594][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 635.001281][ T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.019415][ T295] usb 1-1: Product: ࡉ [ 635.023518][ T295] usb 1-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 635.024445][T11182] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 635.040568][ T295] usb 1-1: SerialNumber: ఁ [ 635.069635][T11182] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 635.077342][ T354] usbhid 2-1:0.0: can't add hid device: -71 [ 635.085446][ T354] usbhid: probe of 2-1:0.0 failed with error -71 [ 635.093204][ T354] usb 2-1: USB disconnect, device number 88 [ 635.137948][T10400] device bridge_slave_1 left promiscuous mode [ 635.144012][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.151791][T10400] device bridge_slave_0 left promiscuous mode [ 635.157945][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.165949][T10400] device veth1_macvtap left promiscuous mode [ 635.172190][T10400] device veth0_vlan left promiscuous mode [ 635.304146][T11249] loop2: detected capacity change from 0 to 256 [ 635.461346][T11251] fuse: Unknown parameter 'grou00000000000000000000' [ 635.492968][T11254] loop4: detected capacity change from 0 to 512 [ 635.521323][T11254] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 635.537426][ T295] usb 1-1: 0:2 : does not exist [ 635.543746][T11254] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 635.544577][ T295] usb 1-1: USB disconnect, device number 105 [ 635.585136][T11254] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 635.597135][T11255] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.604290][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.611699][T11255] device bridge_slave_0 entered promiscuous mode [ 635.618831][T11255] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.625691][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.633300][T11255] device bridge_slave_1 entered promiscuous mode [ 635.676302][T11262] loop4: detected capacity change from 0 to 512 [ 635.695101][T11255] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.701979][T11255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.709079][T11255] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.715926][T11255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.736070][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 635.744683][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.752623][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.767306][T11262] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 635.778314][T11262] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 635.789045][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 635.798056][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.804931][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.812456][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 635.812615][T11262] incfs: Error accessing: ./file0. [ 635.820590][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.825341][T11262] incfs: mount failed -20 [ 635.832077][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.832630][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 635.851624][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 635.875667][T11262] device wireguard0 entered promiscuous mode [ 635.884520][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 635.900292][T11255] device veth0_vlan entered promiscuous mode [ 635.915564][T11270] loop1: detected capacity change from 0 to 512 [ 635.919309][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 635.941172][T11270] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 635.958251][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.965944][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 635.980589][T11255] device veth1_macvtap entered promiscuous mode [ 635.987450][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 635.999475][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 636.012847][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 636.092281][T10345] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 636.105592][T10345] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 636.120084][T11281] loop3: detected capacity change from 0 to 512 [ 636.318308][T11281] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 636.329323][T11281] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 636.351472][T11281] incfs: Error accessing: ./file0. [ 636.356426][T11281] incfs: mount failed -20 [ 636.416016][T11287] device wireguard0 entered promiscuous mode [ 636.457279][ T20] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 636.475906][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.482960][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.490325][T11289] device bridge_slave_0 entered promiscuous mode [ 636.497855][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.504685][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.512105][T11289] device bridge_slave_1 entered promiscuous mode [ 636.572518][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.580281][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.599304][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.607624][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.615563][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.622410][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.629624][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.638705][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.646642][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.653487][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.660687][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 636.668611][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.676354][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.684286][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.693043][T10400] device bridge_slave_1 left promiscuous mode [ 636.699608][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.706955][T10400] device bridge_slave_0 left promiscuous mode [ 636.713082][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.720790][T10400] device veth1_macvtap left promiscuous mode [ 636.726689][T10400] device veth0_vlan left promiscuous mode [ 636.819349][T11289] device veth0_vlan entered promiscuous mode [ 636.827366][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.836081][T11289] device veth1_macvtap entered promiscuous mode [ 636.838337][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.853825][ T20] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 636.863003][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.878599][ T20] usb 2-1: config 0 descriptor?? [ 636.905414][ T30] audit: type=1326 audit(1721437436.245:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ad5dcb59 code=0x7ffc0000 [ 636.931465][T11297] loop2: detected capacity change from 0 to 512 [ 636.938685][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 636.947887][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 636.961815][T11255] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 636.970299][ T30] audit: type=1326 audit(1721437436.245:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f40ad5dcb59 code=0x7ffc0000 [ 636.973109][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.003620][T11255] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 637.018082][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.025547][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.034654][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.043031][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.051710][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.060059][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.071455][T11297] EXT4-fs (loop2): Test dummy encryption mode enabled [ 637.087086][T11297] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.3116: casefold flag without casefold feature [ 637.117515][T11297] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 637.138017][T11297] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 637.207664][T11300] loop0: detected capacity change from 0 to 256 [ 637.379272][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 637.385037][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 637.418773][ T20] usb 2-1: USB disconnect, device number 89 [ 637.500750][T11305] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.529075][T11305] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.582564][T11305] device bridge_slave_0 entered promiscuous mode [ 637.637501][T11305] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.657649][T11305] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.678243][T11305] device bridge_slave_1 entered promiscuous mode [ 637.754027][T11296] loop4: detected capacity change from 0 to 131072 [ 637.790424][T11296] F2FS-fs (loop4): Invalid log_blocksize (32), supports only 12 [ 637.823286][T11316] loop2: detected capacity change from 0 to 40427 [ 637.828420][T11296] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 637.842556][T11322] fuse: Unknown parameter 'grou00000000000000000000' [ 637.860830][T11296] F2FS-fs (loop4): Found nat_bits in checkpoint [ 637.954068][T11316] F2FS-fs (loop2): Unrecognized mount option "ifline_xattr" or missing value [ 637.954364][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 637.984017][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.991604][T11296] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 637.998503][T11296] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 638.365546][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 638.390340][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 638.430119][ T9210] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.436992][ T9210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.495824][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 638.520493][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 638.540079][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 638.562517][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.569384][ T9209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.600919][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 638.615091][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 638.638214][T10400] device bridge_slave_1 left promiscuous mode [ 638.645982][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.679132][T10400] device bridge_slave_0 left promiscuous mode [ 638.696611][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.728701][T10400] device bridge_slave_1 left promiscuous mode [ 638.761937][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.772333][T10400] device bridge_slave_0 left promiscuous mode [ 638.776393][T11338] loop1: detected capacity change from 0 to 512 [ 638.784395][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.798493][T10400] device veth1_macvtap left promiscuous mode [ 638.807471][T10400] device veth0_vlan left promiscuous mode [ 638.827465][T10400] device veth1_macvtap left promiscuous mode [ 638.833311][T10400] device veth0_vlan left promiscuous mode [ 638.877489][ T9210] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 638.892410][T11338] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 638.907943][T11338] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038 (0x7fffffff) [ 638.921120][T11343] loop4: detected capacity change from 0 to 512 [ 638.962050][T11338] incfs: Error accessing: ./file0. [ 638.966994][T11338] incfs: mount failed -20 [ 639.003544][T11343] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 639.014633][T11343] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 639.038666][T11343] incfs: Error accessing: ./file0. [ 639.043674][T11343] incfs: mount failed -20 [ 639.117375][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.125519][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.133285][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 639.137273][ T9210] usb 1-1: Using ep0 maxpacket: 32 [ 639.140598][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.157036][T11349] device wireguard0 entered promiscuous mode [ 639.166468][T11350] device wireguard0 entered promiscuous mode [ 639.174259][T11305] device veth0_vlan entered promiscuous mode [ 639.202901][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 639.211176][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 639.221745][T11305] device veth1_macvtap entered promiscuous mode [ 639.232703][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 639.240997][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 639.249621][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 639.270683][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 639.322307][T11356] loop3: detected capacity change from 0 to 512 [ 639.329010][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 639.349138][T11356] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 639.360092][T11356] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 639.367329][ T9210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.380020][ T9210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.439862][T11361] overlayfs: './file2' not a directory [ 639.441137][T11360] loop2: detected capacity change from 0 to 256 [ 639.633606][ T9889] __quota_error: 51 callbacks suppressed [ 639.633625][ T9889] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 639.650142][ T9889] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 639.667393][ T9210] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 639.676634][ T9210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.684515][ T9210] usb 1-1: Product: ࡉ [ 639.688526][ T9210] usb 1-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 639.704977][ T9210] usb 1-1: SerialNumber: ఁ [ 639.748321][T11289] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 639.759032][T11289] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 639.884760][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.891724][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.899505][T11363] device bridge_slave_0 entered promiscuous mode [ 639.907411][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.914270][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.921504][T11363] device bridge_slave_1 entered promiscuous mode [ 639.983332][T11368] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.990534][T11368] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.997785][T11368] device bridge_slave_0 entered promiscuous mode [ 640.005532][T11368] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.012490][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.019673][T11368] device bridge_slave_1 entered promiscuous mode [ 640.048811][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.055705][T11363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.062811][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.069558][T11363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.109515][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 640.115066][ T9210] usb 1-1: 0:2 : does not exist [ 640.121987][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.129809][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.131193][ T9210] usb 1-1: USB disconnect, device number 106 [ 640.197738][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 640.217786][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 640.225793][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.232656][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.242344][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 640.254354][T11376] loop3: detected capacity change from 0 to 512 [ 640.260653][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.267497][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.297317][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 640.305227][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 640.313118][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 640.321165][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 640.339300][T11376] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 640.357461][T11376] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 640.380797][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 640.389334][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 640.412168][T11363] device veth0_vlan entered promiscuous mode [ 640.419062][T11376] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 640.441945][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 640.454309][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 640.487773][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 640.502535][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 640.511058][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 640.519238][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 640.533221][T11363] device veth1_macvtap entered promiscuous mode [ 640.558024][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 640.565534][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 640.574779][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.597371][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 640.605132][ T30] audit: type=1326 audit(1721437439.945:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 640.630674][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 640.645650][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.662473][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.673707][ T30] audit: type=1326 audit(1721437439.975:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 640.703221][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 640.720148][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 640.737059][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.743954][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.752237][ T30] audit: type=1326 audit(1721437439.985:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 640.789815][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 640.805803][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 640.815927][ T30] audit: type=1326 audit(1721437439.985:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d32403b93 code=0x7ffc0000 [ 640.841998][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.848878][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.858987][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 640.891415][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 640.908587][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 640.917165][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 640.978763][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 641.023449][T11368] device veth0_vlan entered promiscuous mode [ 641.038505][ T30] audit: type=1326 audit(1721437440.375:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d324026df code=0x7ffc0000 [ 641.141003][T11391] loop1: detected capacity change from 0 to 512 [ 641.228216][T11391] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 641.280487][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.288745][T11391] EXT4-fs (loop1): 1 orphan inode deleted [ 641.290516][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 641.294306][T11391] EXT4-fs (loop1): 1 truncate cleaned up [ 641.306787][T11391] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 641.328233][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 641.362298][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 641.370589][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.386058][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 641.394185][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 641.403831][T11368] device veth1_macvtap entered promiscuous mode [ 641.429153][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 641.436891][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 641.445070][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 641.453357][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 641.461692][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 641.593240][T11384] loop3: detected capacity change from 0 to 131072 [ 641.606530][ T30] audit: type=1326 audit(1721437440.935:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6d32403be7 code=0x7ffc0000 [ 641.621311][T11384] F2FS-fs (loop3): Invalid log_blocksize (32), supports only 12 [ 641.870606][T11406] loop4: detected capacity change from 0 to 512 [ 641.911795][T11384] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 642.008833][T11406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 642.051527][T11406] EXT4-fs (loop4): 1 orphan inode deleted [ 642.057118][T11406] EXT4-fs (loop4): 1 truncate cleaned up [ 642.062641][T11406] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 642.099908][T11384] F2FS-fs (loop3): Found nat_bits in checkpoint [ 642.145157][T11384] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 642.152151][T11384] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 642.233706][T11416] loop1: detected capacity change from 0 to 256 [ 642.301174][T10400] device bridge_slave_1 left promiscuous mode [ 642.308269][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.317100][T10400] device bridge_slave_0 left promiscuous mode [ 642.324472][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.332948][T10400] device bridge_slave_1 left promiscuous mode [ 642.339125][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.347092][T10400] device bridge_slave_0 left promiscuous mode [ 642.353325][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.371049][T10400] device veth1_macvtap left promiscuous mode [ 642.385281][T10400] device veth0_vlan left promiscuous mode [ 642.403152][T10400] device veth1_macvtap left promiscuous mode [ 642.416374][T10400] device veth0_vlan left promiscuous mode [ 642.927541][ T9207] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 642.989084][T11435] loop2: detected capacity change from 0 to 256 [ 643.173150][T11424] loop0: detected capacity change from 0 to 40427 [ 643.207751][T11424] F2FS-fs (loop0): Unrecognized mount option "ifline_xattr" or missing value [ 643.307378][ T9207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.376013][ T9207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.385802][ T9207] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 643.394981][ T9207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.429291][ T9207] usb 5-1: config 0 descriptor?? [ 644.087330][ T295] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 644.190899][ T9210] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 644.219136][T11451] loop0: detected capacity change from 0 to 512 [ 644.259245][T11451] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 644.270132][T11451] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 644.290881][T11451] incfs: Error accessing: ./file0. [ 644.296129][T11451] incfs: mount failed -20 [ 644.497287][ T295] usb 4-1: Using ep0 maxpacket: 32 [ 644.503962][T11460] device wireguard0 entered promiscuous mode [ 644.617368][ T9210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.628244][ T9210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.637878][ T9210] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 644.646745][ T9210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.655281][ T9210] usb 2-1: config 0 descriptor?? [ 644.697356][ T295] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.707346][ T295] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.867355][ T295] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.876217][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.884051][ T295] usb 4-1: Product: ࡉ [ 644.888045][ T295] usb 4-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 644.904696][ T295] usb 4-1: SerialNumber: ఁ [ 645.019580][T11053] __quota_error: 29 callbacks suppressed [ 645.019601][T11053] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 645.035519][T11053] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 645.037319][ T9210] usbhid 2-1:0.0: can't add hid device: -71 [ 645.051724][ T9210] usbhid: probe of 2-1:0.0 failed with error -71 [ 645.061486][ T9210] usb 2-1: USB disconnect, device number 90 [ 645.085272][ T30] audit: type=1326 audit(1721437444.425:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296fa97b59 code=0x7ffc0000 [ 645.108865][ T30] audit: type=1326 audit(1721437444.425:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f296fa97b59 code=0x7ffc0000 [ 645.133852][ T30] audit: type=1326 audit(1721437444.425:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f296fa97b93 code=0x7ffc0000 [ 645.267405][ T295] usb 4-1: 0:2 : does not exist [ 645.281856][ T295] usb 4-1: USB disconnect, device number 103 [ 645.282615][ T30] audit: type=1326 audit(1721437444.625:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f296fa966df code=0x7ffc0000 [ 645.363980][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.371037][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.378870][T11466] device bridge_slave_0 entered promiscuous mode [ 645.397302][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.404149][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.411723][T11466] device bridge_slave_1 entered promiscuous mode [ 645.484808][ T30] audit: type=1326 audit(1721437444.825:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f296fa97be7 code=0x7ffc0000 [ 645.519096][T11463] loop2: detected capacity change from 0 to 131072 [ 645.521314][ T30] audit: type=1326 audit(1721437444.855:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f296fa96590 code=0x7ffc0000 [ 645.580174][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.587067][T11466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.594200][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.599306][ T30] audit: type=1326 audit(1721437444.855:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f296fa9775b code=0x7ffc0000 [ 645.601069][T11466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.624338][ T30] audit: type=1326 audit(1721437444.865:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f296fa9688a code=0x7ffc0000 [ 645.648680][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.656743][T11475] loop4: detected capacity change from 0 to 512 [ 645.667792][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.675291][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.683570][T11463] F2FS-fs (loop2): Invalid log_blocksize (32), supports only 12 [ 645.691267][T11463] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 645.702055][T11463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 645.708242][ T9207] usbhid 5-1:0.0: can't add hid device: -71 [ 645.714102][ T9207] usbhid: probe of 5-1:0.0 failed with error -71 [ 645.755984][ T9207] usb 5-1: USB disconnect, device number 93 [ 645.920970][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 645.929046][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.930991][T11475] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 645.935883][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.936075][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 645.947391][T11463] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 645.953950][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.961867][T11463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 645.968368][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.977725][T11475] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 646.005646][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.013661][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.037983][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 646.043363][T11475] incfs: Error accessing: ./file0. [ 646.051996][T11475] incfs: mount failed -20 [ 646.062392][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 646.074185][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 646.086317][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 646.095666][ T2383] device bridge_slave_1 left promiscuous mode [ 646.101941][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.109943][ T2383] device bridge_slave_0 left promiscuous mode [ 646.115972][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.124138][ T2383] device veth1_macvtap left promiscuous mode [ 646.130193][ T2383] device veth0_vlan left promiscuous mode [ 646.232889][T11484] device wireguard0 entered promiscuous mode [ 646.241616][T11466] device veth0_vlan entered promiscuous mode [ 646.254287][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 646.262696][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 646.272409][T11466] device veth1_macvtap entered promiscuous mode [ 646.283227][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 646.292323][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 646.300507][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 646.319714][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 646.336091][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 648.210567][T11519] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.226099][T11519] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.237760][T11519] device bridge_slave_0 entered promiscuous mode [ 648.247656][T11519] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.254538][T11519] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.262078][T11519] device bridge_slave_1 entered promiscuous mode [ 648.444577][T11519] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.451468][T11519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.458580][T11519] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.465322][T11519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.664661][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.679027][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.720550][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 648.730007][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 648.743192][ T2383] device bridge_slave_1 left promiscuous mode [ 648.752391][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.766960][T11505] loop3: detected capacity change from 0 to 131072 [ 648.773868][ T2383] device bridge_slave_0 left promiscuous mode [ 648.791556][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.800052][T11505] F2FS-fs (loop3): Invalid log_blocksize (32), supports only 12 [ 648.811194][T11505] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 648.820352][ T2383] device veth1_macvtap left promiscuous mode [ 648.826171][ T2383] device veth0_vlan left promiscuous mode [ 648.852953][T11505] F2FS-fs (loop3): Found nat_bits in checkpoint [ 648.910190][T11505] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 648.919998][T11505] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 648.967359][ T634] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 648.987818][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 649.004289][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 649.020667][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.027583][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.048714][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 649.065808][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 649.076373][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.083354][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.090677][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 649.098827][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 649.118664][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 649.126679][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 649.141371][T11519] device veth0_vlan entered promiscuous mode [ 649.156453][T11531] loop0: detected capacity change from 0 to 131072 [ 649.188489][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 649.196442][T11531] F2FS-fs (loop0): Invalid log_blocksize (32), supports only 12 [ 649.204811][T11531] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 649.213763][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 649.221812][ T634] usb 2-1: Using ep0 maxpacket: 32 [ 649.238353][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 649.256305][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 649.273766][T11519] device veth1_macvtap entered promiscuous mode [ 649.282410][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 649.290415][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 649.298703][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 649.307718][T11531] F2FS-fs (loop0): Found nat_bits in checkpoint [ 649.319905][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 649.341317][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 649.394874][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 649.400345][T11531] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 649.410295][T11531] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 649.410513][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 649.426110][ T634] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.437546][ T634] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.450771][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 649.470842][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 649.627437][ T634] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 649.637481][ T634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.645337][ T634] usb 2-1: Product: ࡉ [ 649.650787][ T634] usb 2-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 649.673048][ T634] usb 2-1: SerialNumber: ఁ [ 649.767307][ T295] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 650.017345][ T295] usb 4-1: Using ep0 maxpacket: 32 [ 650.037697][ T634] usb 2-1: 0:2 : does not exist [ 650.083920][T11554] loop4: detected capacity change from 0 to 40427 [ 650.091802][ T634] usb 2-1: USB disconnect, device number 91 [ 650.129760][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 650.148628][T11554] F2FS-fs (loop4): Unrecognized mount option "ifline_xattr" or missing value [ 650.220742][ T295] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.237267][ T295] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.347314][T11561] loop2: detected capacity change from 0 to 512 [ 650.618247][T11561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 650.724897][T11561] EXT4-fs (loop2): 1 orphan inode deleted [ 650.730730][T11561] EXT4-fs (loop2): 1 truncate cleaned up [ 650.736210][T11561] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 650.757401][ T295] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.774070][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.782193][ T295] usb 4-1: Product: ࡉ [ 650.786252][ T295] usb 4-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 650.803042][ T295] usb 4-1: SerialNumber: ఁ [ 650.976631][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 650.976647][ T30] audit: type=1326 audit(1721437450.315:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.4.3185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ed7ef7b59 code=0x0 [ 651.177365][ T295] usb 4-1: 0:2 : does not exist [ 651.192298][ T295] usb 4-1: USB disconnect, device number 104 [ 651.547283][ T7871] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 651.967374][ T7871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.978349][ T7871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.990792][ T7871] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 651.999854][ T7871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.041397][ T7871] usb 5-1: config 0 descriptor?? [ 652.286056][T11593] loop0: detected capacity change from 0 to 512 [ 652.328766][T11593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 652.339652][T11593] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 652.359139][T11593] incfs: Error accessing: ./file0. [ 652.364154][T11593] incfs: mount failed -20 [ 652.407323][ T7871] usbhid 5-1:0.0: can't add hid device: -71 [ 652.413114][ T7871] usbhid: probe of 5-1:0.0 failed with error -71 [ 652.422567][ T7871] usb 5-1: USB disconnect, device number 94 [ 652.428845][T11596] device wireguard0 entered promiscuous mode [ 652.495102][ T30] audit: type=1326 audit(1721437451.835:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.3.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 652.523679][ T30] audit: type=1326 audit(1721437451.835:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.3.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 652.552332][ T30] audit: type=1326 audit(1721437451.835:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.3.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 652.597333][ T30] audit: type=1326 audit(1721437451.835:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.3.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 652.620930][ T30] audit: type=1326 audit(1721437451.835:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.3.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 652.644304][ T30] audit: type=1326 audit(1721437451.835:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.3.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 652.667983][ T30] audit: type=1326 audit(1721437451.835:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.3.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 652.691630][ T30] audit: type=1326 audit(1721437451.835:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.3.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 652.715038][ T30] audit: type=1326 audit(1721437451.835:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.3.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 652.876817][ T9210] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 653.197346][ T9210] usb 2-1: Using ep0 maxpacket: 32 [ 654.117320][ T7871] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 654.210586][T11621] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.217525][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.224629][T11621] device bridge_slave_0 entered promiscuous mode [ 654.231437][T11621] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.238423][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.245509][T11621] device bridge_slave_1 entered promiscuous mode [ 654.257343][ T9210] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.283864][ T9210] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.357308][ T7871] usb 3-1: Using ep0 maxpacket: 32 [ 654.376911][T11621] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.383805][T11621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.390900][T11621] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.397668][T11621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.447330][ T9210] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.458847][T11552] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.460518][ T9210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.473685][T11552] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.477333][ T7871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10970, setting to 1024 [ 654.492077][T11552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.499146][ T9210] usb 2-1: Product: ࡉ [ 654.499164][ T9210] usb 2-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 654.499186][ T9210] usb 2-1: SerialNumber: ఁ [ 654.499918][ T7871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 654.517561][T11552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.519632][ T7871] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 654.549771][ T7871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.558559][ T7871] usb 3-1: config 0 descriptor?? [ 654.568621][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.577341][T11609] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 654.577533][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.590992][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.597758][ T7871] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 654.606985][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.617801][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.624663][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.632258][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.640309][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.661312][T11552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 654.672517][T11621] device veth0_vlan entered promiscuous mode [ 654.679975][T11552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 654.695673][T11621] device veth1_macvtap entered promiscuous mode [ 654.703229][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 654.712157][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 654.719735][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 654.743833][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 654.754099][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 654.805850][T11630] loop0: detected capacity change from 0 to 512 [ 654.847346][ T9210] usb 2-1: 0:2 : does not exist [ 654.855779][ T9210] usb 2-1: USB disconnect, device number 92 [ 654.878811][T11630] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 654.902356][T11630] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 655.094884][T11637] overlayfs: './file2' not a directory [ 655.277291][ T7871] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 655.378087][ T2383] device bridge_slave_1 left promiscuous mode [ 655.385328][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.400375][ T2383] device bridge_slave_0 left promiscuous mode [ 655.413045][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.427291][ T9210] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 655.435596][ T2383] device veth1_macvtap left promiscuous mode [ 655.443971][ T2383] device veth0_vlan left promiscuous mode [ 655.517297][ T7871] usb 5-1: Using ep0 maxpacket: 32 [ 655.717338][ T7871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.727746][ T7871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.787480][ T9210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.798822][ T9210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.811881][ T9210] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 655.822989][ T9210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.872147][ T9210] usb 4-1: config 0 descriptor?? [ 655.987361][ T7871] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.996275][ T7871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.004123][ T7871] usb 5-1: Product: ࡉ [ 656.008096][ T7871] usb 5-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 656.024497][ T7871] usb 5-1: SerialNumber: ఁ [ 656.237355][ T9210] usbhid 4-1:0.0: can't add hid device: -71 [ 656.243146][ T9210] usbhid: probe of 4-1:0.0 failed with error -71 [ 656.250352][ T9210] usb 4-1: USB disconnect, device number 105 [ 656.407342][ T7871] usb 5-1: 0:2 : does not exist [ 656.418560][ T7871] usb 5-1: USB disconnect, device number 95 [ 656.740952][ T295] usb 3-1: USB disconnect, device number 103 [ 656.773560][T11660] loop2: detected capacity change from 0 to 512 [ 657.094526][T11668] loop3: detected capacity change from 0 to 512 [ 657.149965][T11668] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 657.322184][T11668] EXT4-fs (loop3): 1 orphan inode deleted [ 657.327892][T11668] EXT4-fs (loop3): 1 truncate cleaned up [ 657.333425][T11668] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 657.358011][T11660] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 657.369108][T11660] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 657.400881][T11660] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 658.524921][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 658.524936][ T30] audit: type=1326 audit(1721437457.865:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 659.378375][T11695] loop4: detected capacity change from 0 to 512 [ 659.439726][ T30] audit: type=1326 audit(1721437457.895:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 659.542460][ T30] audit: type=1326 audit(1721437458.625:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 659.564036][T11705] loop2: detected capacity change from 0 to 512 [ 659.566140][ T30] audit: type=1326 audit(1721437458.625:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 659.596619][T11695] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 659.610128][ T30] audit: type=1326 audit(1721437458.625:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 659.634869][T11695] EXT4-fs (loop4): 1 orphan inode deleted [ 659.640680][T11695] EXT4-fs (loop4): 1 truncate cleaned up [ 659.646244][T11695] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 659.649225][T11709] loop3: detected capacity change from 0 to 512 [ 659.694256][ T30] audit: type=1326 audit(1721437458.625:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 659.742297][ T30] audit: type=1326 audit(1721437458.625:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 659.766061][ T30] audit: type=1326 audit(1721437458.625:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 659.817329][ T9209] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 659.837658][ T30] audit: type=1326 audit(1721437458.625:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 659.862295][T11705] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 659.876393][T11709] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 659.887723][ T30] audit: type=1326 audit(1721437458.625:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x7ffc0000 [ 659.912560][T11705] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 659.947778][T11709] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 659.993835][T11705] incfs: Error accessing: ./file0. [ 659.999760][T11705] incfs: mount failed -20 [ 660.004077][T11709] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 660.116231][ T9209] usb 1-1: Using ep0 maxpacket: 32 [ 660.215907][T11718] device wireguard0 entered promiscuous mode [ 660.247442][ T9209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10970, setting to 1024 [ 660.298795][ T9209] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 660.309075][ T9209] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 660.318669][ T9209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.324402][T11693] loop1: detected capacity change from 0 to 131072 [ 660.330107][ T9209] usb 1-1: config 0 descriptor?? [ 660.357354][T11701] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 660.378086][ T9209] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 660.397670][T11693] F2FS-fs (loop1): Invalid log_blocksize (32), supports only 12 [ 660.405233][T11693] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 660.415745][T11693] F2FS-fs (loop1): Found nat_bits in checkpoint [ 660.444940][T11693] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 660.451975][T11693] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 660.607448][ T7871] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 660.663803][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.671003][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.678552][T11728] device bridge_slave_0 entered promiscuous mode [ 660.687184][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.694366][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.703263][T11728] device bridge_slave_1 entered promiscuous mode [ 660.746158][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.753106][T11728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.760217][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.766974][T11728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.804809][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 660.837694][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.845132][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.878342][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 660.886393][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 660.894442][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.901285][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.908528][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 660.997554][ T9209] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 661.005365][ T7871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.062245][ T7871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.099828][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.106684][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.114002][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 661.121900][ T7871] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 661.131037][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 661.145848][T11728] device veth0_vlan entered promiscuous mode [ 661.151843][ T7871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.167661][T11728] device veth1_macvtap entered promiscuous mode [ 661.177645][ T7871] usb 4-1: config 0 descriptor?? [ 661.184059][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 661.192894][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 661.200550][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 661.208210][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 661.227489][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 661.235909][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 661.277386][ T9209] usb 2-1: Using ep0 maxpacket: 32 [ 661.328019][T10400] device bridge_slave_1 left promiscuous mode [ 661.334113][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.342219][T10400] device bridge_slave_0 left promiscuous mode [ 661.348345][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.356448][T10400] device veth1_macvtap left promiscuous mode [ 661.362626][T10400] device veth0_vlan left promiscuous mode [ 661.510738][T11745] loop2: detected capacity change from 0 to 256 [ 661.537509][ T9209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.548008][ T7871] usbhid 4-1:0.0: can't add hid device: -71 [ 661.554125][ T7871] usbhid: probe of 4-1:0.0 failed with error -71 [ 661.627067][ T7871] usb 4-1: USB disconnect, device number 106 [ 661.650841][ T9209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.868104][ T9209] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 661.984176][ T9209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.993425][ T9209] usb 2-1: Product: ࡉ [ 661.999482][ T9209] usb 2-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 662.016492][ T9209] usb 2-1: SerialNumber: ఁ [ 662.101142][T11756] loop3: detected capacity change from 0 to 512 [ 662.196520][T11758] loop2: detected capacity change from 0 to 512 [ 662.208996][T11758] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 662.209695][T11756] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 662.220768][T11758] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 662.231987][T11756] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 662.257540][T11758] incfs: Error accessing: ./file0. [ 662.262597][T11758] incfs: mount failed -20 [ 662.359951][T11763] device wireguard0 entered promiscuous mode [ 662.397589][ T9209] usb 2-1: 0:2 : does not exist [ 662.420064][ T9209] usb 2-1: USB disconnect, device number 93 [ 662.449299][T11766] overlayfs: './file2' not a directory [ 662.628683][ T7871] usb 1-1: USB disconnect, device number 107 [ 662.774887][T11774] loop0: detected capacity change from 0 to 512 [ 663.030519][T11774] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 663.115790][T11774] EXT4-fs (loop0): 1 orphan inode deleted [ 663.121909][T11774] EXT4-fs (loop0): 1 truncate cleaned up [ 663.127410][T11774] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 663.350983][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.357893][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.366215][T11782] device bridge_slave_0 entered promiscuous mode [ 663.373654][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.410081][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.443474][T11782] device bridge_slave_1 entered promiscuous mode [ 663.530869][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.537761][T11782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.544846][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.551634][T11782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.575673][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 663.583345][ T634] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.598090][ T634] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.631537][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 663.639615][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.646465][ T634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.654548][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 663.663095][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.669975][ T634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.700149][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.711327][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 663.735262][T11782] device veth0_vlan entered promiscuous mode [ 663.742293][T11794] loop3: detected capacity change from 0 to 256 [ 663.751102][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 663.757277][ T9207] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 663.766480][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 663.774171][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 663.782204][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 663.796665][T11782] device veth1_macvtap entered promiscuous mode [ 663.806712][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 663.819459][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 663.844555][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 663.918247][ T361] device bridge_slave_1 left promiscuous mode [ 663.925362][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.940404][ T361] device bridge_slave_0 left promiscuous mode [ 663.956397][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.972783][ T361] device veth1_macvtap left promiscuous mode [ 663.985148][ T361] device veth0_vlan left promiscuous mode [ 663.997271][ T9207] usb 1-1: Using ep0 maxpacket: 32 [ 664.197573][ T9207] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.208905][ T295] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 664.231213][ T9207] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.417361][ T9207] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.426491][ T9207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.447417][ T9207] usb 1-1: Product: ࡉ [ 664.451411][ T9207] usb 1-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 664.467865][ T9207] usb 1-1: SerialNumber: ఁ [ 664.587310][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.598042][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.607956][ T295] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 664.616933][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.626654][T11807] loop4: detected capacity change from 0 to 256 [ 664.633855][ T295] usb 2-1: config 0 descriptor?? [ 664.717274][ T634] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 664.827345][ T9207] usb 1-1: 0:2 : does not exist [ 664.860347][ T9207] usb 1-1: USB disconnect, device number 108 [ 664.893423][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 665.017401][ T634] usb 4-1: Using ep0 maxpacket: 32 [ 665.057662][ T295] usbhid 2-1:0.0: can't add hid device: -71 [ 665.064130][ T295] usbhid: probe of 2-1:0.0 failed with error -71 [ 665.096622][ T295] usb 2-1: USB disconnect, device number 94 [ 665.147445][ T634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10970, setting to 1024 [ 665.172788][ T634] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 665.183676][ T634] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 665.192872][ T634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.227041][ T634] usb 4-1: config 0 descriptor?? [ 665.257308][T11805] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 665.292609][ T634] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 665.748220][T11819] loop4: detected capacity change from 0 to 512 [ 665.918012][T11819] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 665.933199][T11819] EXT4-fs (loop4): 1 orphan inode deleted [ 665.938810][T11819] EXT4-fs (loop4): 1 truncate cleaned up [ 665.944222][T11819] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 666.555963][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 666.555978][ T30] audit: type=1326 audit(1721437465.895:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b23269b59 code=0x7ffc0000 [ 666.603878][ T30] audit: type=1326 audit(1721437465.915:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b23269b59 code=0x7ffc0000 [ 666.660044][ T30] audit: type=1326 audit(1721437465.935:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6b23269b59 code=0x7ffc0000 [ 666.683942][ T30] audit: type=1326 audit(1721437465.935:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b23269b93 code=0x7ffc0000 [ 666.928864][ T30] audit: type=1326 audit(1721437466.275:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b232686df code=0x7ffc0000 [ 667.047907][T11840] loop4: detected capacity change from 0 to 512 [ 667.120316][T11840] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 667.188448][T11840] EXT4-fs (loop4): 1 orphan inode deleted [ 667.194010][T11840] EXT4-fs (loop4): 1 truncate cleaned up [ 667.199653][T11840] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 667.247281][ T634] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 667.301304][ T30] audit: type=1326 audit(1721437466.645:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6b23269be7 code=0x7ffc0000 [ 667.303985][T11830] loop2: detected capacity change from 0 to 131072 [ 667.324682][ T30] audit: type=1326 audit(1721437466.645:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b23268590 code=0x7ffc0000 [ 667.355752][ T30] audit: type=1326 audit(1721437466.645:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b2326975b code=0x7ffc0000 [ 667.379186][ T30] audit: type=1326 audit(1721437466.685:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b2326888a code=0x7ffc0000 [ 667.402406][ T30] audit: type=1326 audit(1721437466.685:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b2326888a code=0x7ffc0000 [ 667.447599][T11830] F2FS-fs (loop2): Invalid log_blocksize (32), supports only 12 [ 667.455187][T11830] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 667.466225][T11830] F2FS-fs (loop2): Found nat_bits in checkpoint [ 667.489277][T11830] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 667.496246][T11830] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 667.505393][ T634] usb 2-1: Using ep0 maxpacket: 32 [ 667.717322][ T634] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.727439][ T634] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 667.871586][T11853] loop0: detected capacity change from 0 to 256 [ 668.821764][ T20] usb 4-1: USB disconnect, device number 107 [ 668.847663][ T634] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.876769][ T634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.915503][ T634] usb 2-1: Product: ࡉ [ 668.939595][ T634] usb 2-1: Manufacturer: 叚锠ﰰ꒠䠓罯猂咚ﱿ韒ꑯ맱僚䅸㫏쀌샦Є靡➔妉齰ꚵ瘯ꢛ搛ࢷ퍄੾䮚쐧⹍೻肇ﾁ㼮ࠉ̝௣韪Ʒ袖ﲦ娯 [ 668.976865][ T634] usb 2-1: SerialNumber: ఁ [ 668.984701][T11869] loop0: detected capacity change from 0 to 8192 [ 669.527363][ T9207] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 669.733443][T11899] loop3: detected capacity change from 0 to 128 [ 669.740965][ T634] usb 2-1: 0:2 : does not exist [ 669.748857][ T634] usb 2-1: USB disconnect, device number 95 [ 669.767280][ T9207] usb 1-1: Using ep0 maxpacket: 16 [ 669.769165][T11907] loop4: detected capacity change from 0 to 1024 [ 669.785019][T11899] attempt to access beyond end of device [ 669.785019][T11899] loop3: rw=2049, want=1041, limit=128 [ 669.800393][T11898] attempt to access beyond end of device [ 669.800393][T11898] loop3: rw=524288, want=369, limit=128 [ 669.817823][T11907] EXT4-fs (loop4): Ignoring removed orlov option [ 669.838828][T11907] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,data_err=abort,noblock_validity,jqfmt=vfsv1,norecovery,auto_da_alloc,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 669.870700][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 669.919058][ T9207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 669.967811][ T9207] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 669.978300][ T9207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.991319][ T9207] usb 1-1: config 0 descriptor?? [ 670.174634][T11916] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 670.184204][T11916] fuse: Bad value for 'group_id' [ 670.589292][T11869] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.596599][T11869] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.636951][ T9207] hid (null): global environment stack underflow [ 670.643984][ T9207] hid (null): report_id 0 is invalid [ 670.659059][ T9207] hid-generic 0003:0158:0100.0033: unknown main item tag 0x1 [ 670.666798][ T9207] hid-generic 0003:0158:0100.0033: unexpected long global item [ 670.675176][ T9207] hid-generic: probe of 0003:0158:0100.0033 failed with error -22 [ 670.904098][ T9207] usb 1-1: USB disconnect, device number 109 [ 671.237335][ T9210] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 671.260053][T11938] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.266912][T11938] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.274297][T11938] device bridge_slave_0 entered promiscuous mode [ 671.281111][T11938] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.288111][T11938] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.295220][T11938] device bridge_slave_1 entered promiscuous mode [ 671.336630][T11938] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.343488][T11938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.350599][T11938] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.357369][T11938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.383121][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 671.398786][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.406146][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.426725][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 671.435256][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.442119][ T634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.449490][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 671.471347][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.478221][ T634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.497693][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.505511][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.584396][T11938] device veth0_vlan entered promiscuous mode [ 671.630061][T11938] device veth1_macvtap entered promiscuous mode [ 671.743561][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 671.758157][ T9210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.779284][ T9210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.793230][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 671.804596][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 671.813301][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 671.821452][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 671.834069][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 671.841839][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 671.870795][ T9210] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 671.879873][ T9210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.891090][ T9210] usb 2-1: config 0 descriptor?? [ 673.095240][ T2383] device bridge_slave_1 left promiscuous mode [ 673.106516][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.115547][ T2383] device bridge_slave_0 left promiscuous mode [ 673.123321][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.167781][ T2383] device veth1_macvtap left promiscuous mode [ 673.173785][ T2383] device veth0_vlan left promiscuous mode [ 673.306082][T11976] device pim6reg1 entered promiscuous mode [ 673.314557][T11977] device pim6reg1 entered promiscuous mode [ 673.448708][T11981] loop0: detected capacity change from 0 to 8192 [ 673.463211][T11983] loop3: detected capacity change from 0 to 512 [ 673.487273][ T295] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 673.740666][T11985] loop3: detected capacity change from 0 to 256 [ 673.767375][ T7871] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 673.832219][T11985] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 674.036840][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 674.036856][ T30] audit: type=1400 audit(1721437473.375:1381): avc: denied { mount } for pid=11990 comm="syz.4.3310" name="/" dev="ramfs" ino=71904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 674.065391][ T30] audit: type=1400 audit(1721437473.395:1382): avc: denied { unmount } for pid=11938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 674.067505][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.096044][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.106298][ T295] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 674.107327][ T7871] usb 1-1: Using ep0 maxpacket: 16 [ 674.116432][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.134074][ T295] usb 3-1: config 0 descriptor?? [ 674.247348][ T7871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 674.258561][ T7871] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 674.267339][ T7871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.275940][ T7871] usb 1-1: config 0 descriptor?? [ 674.373962][ T9210] uclogic 0003:256C:006D.0034: interface is invalid, ignoring [ 674.655998][ T9210] usb 2-1: USB disconnect, device number 96 [ 674.899071][T11981] UDC core: couldn't find an available UDC or it's busy: -16 [ 674.906457][T11981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 674.946794][ T7871] hid (null): global environment stack underflow [ 674.953431][ T7871] hid (null): report_id 0 is invalid [ 674.983942][ T7871] hid-generic 0003:0158:0100.0036: unknown main item tag 0x1 [ 674.991247][ T7871] hid-generic 0003:0158:0100.0036: unexpected long global item [ 674.998972][ T7871] hid-generic: probe of 0003:0158:0100.0036 failed with error -22 [ 675.159342][ T20] usb 1-1: USB disconnect, device number 110 [ 675.221167][T12011] device pim6reg1 entered promiscuous mode [ 675.260415][T12013] device pim6reg1 entered promiscuous mode [ 675.337489][ T295] uclogic 0003:256C:006D.0035: interface is invalid, ignoring [ 675.707260][T12027] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3322'. [ 675.885921][ T9210] usb 3-1: USB disconnect, device number 104 [ 676.527312][ T7871] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 676.704243][ T30] audit: type=1400 audit(1721437476.035:1383): avc: denied { accept } for pid=12043 comm="syz.2.3328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 676.937320][ T7871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.948126][ T7871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.957711][ T7871] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 676.966576][ T7871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.974901][ T7871] usb 2-1: config 0 descriptor?? [ 677.044337][T12055] device pim6reg1 entered promiscuous mode [ 677.437970][T12064] loop2: detected capacity change from 0 to 512 [ 677.537344][ T295] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 677.656408][T12066] loop2: detected capacity change from 0 to 256 [ 677.779422][T12066] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 677.805263][T12068] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.812473][T12068] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.822147][T12068] device bridge_slave_1 left promiscuous mode [ 677.828190][T12068] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.835521][T12068] device bridge_slave_0 left promiscuous mode [ 677.841750][T12068] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.970618][T12070] loop4: detected capacity change from 0 to 8192 [ 678.077333][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.088112][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.097814][ T295] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 678.106703][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.115158][ T295] usb 1-1: config 0 descriptor?? [ 678.297879][ T7871] uclogic 0003:256C:006D.0037: interface is invalid, ignoring [ 678.307108][ T9209] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 678.553056][ T9209] usb 5-1: Using ep0 maxpacket: 16 [ 678.579231][ T7871] usb 2-1: USB disconnect, device number 97 [ 678.607570][ T295] hid (null): bogus close delimiter [ 678.697317][ T9209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 678.708381][ T9209] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 678.717260][ T9209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.725568][ T9209] usb 5-1: config 0 descriptor?? [ 678.882723][T12082] capability: warning: `syz.3.3341' uses 32-bit capabilities (legacy support in use) [ 679.067559][ T295] uclogic 0003:256C:006D.0038: failed retrieving Huion firmware version: -71 [ 679.076567][ T295] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 679.083812][ T295] uclogic: probe of 0003:256C:006D.0038 failed with error -71 [ 679.092099][ T295] usb 1-1: USB disconnect, device number 111 [ 679.201216][T12090] device pim6reg1 entered promiscuous mode [ 679.208005][T12070] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.215250][T12070] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.270070][ T9209] hid (null): global environment stack underflow [ 679.276403][ T9209] hid (null): report_id 0 is invalid [ 679.282534][ T9209] hid-generic 0003:0158:0100.0039: unknown main item tag 0x1 [ 679.290003][ T9209] hid-generic 0003:0158:0100.0039: unexpected long global item [ 679.297551][ T9209] hid-generic: probe of 0003:0158:0100.0039 failed with error -22 [ 679.529647][ T9209] usb 5-1: USB disconnect, device number 96 [ 679.539042][T12096] syz.2.3346[12096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 679.539117][T12096] syz.2.3346[12096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 679.554893][T12096] loop2: detected capacity change from 0 to 1024 [ 679.637823][T12096] EXT4-fs (loop2): Test dummy encryption mode enabled [ 679.644721][T12096] EXT4-fs (loop2): Unrecognized mount option "obj_user=ext4" or missing value [ 679.844482][T12096] loop2: detected capacity change from 0 to 40427 [ 680.504620][T12107] loop1: detected capacity change from 0 to 512 [ 680.537273][ T295] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 680.614318][T12107] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 680.644583][T12107] EXT4-fs (loop1): orphan cleanup on readonly fs [ 680.662542][T12107] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 680.677194][T12107] Quota error (device loop1): write_blk: dquota write failed [ 680.697009][T12107] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 680.719761][T12107] EXT4-fs (loop1): 1 truncate cleaned up [ 680.727959][T12107] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 680.758835][T11363] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 680.777505][T11363] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 680.927454][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.937334][ T9210] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 680.939055][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.955437][ T295] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 680.964513][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.981070][ T295] usb 1-1: config 0 descriptor?? [ 680.993870][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.001142][T12125] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.008381][T12125] device bridge_slave_0 entered promiscuous mode [ 681.016995][T12125] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.023891][T12125] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.031008][T12125] device bridge_slave_1 entered promiscuous mode [ 681.071481][T12125] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.078337][T12125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.085417][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.092231][T12125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.111630][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 681.119099][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.126161][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.137651][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.145595][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.152451][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.167592][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.175660][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.182513][ T9207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.189833][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 681.197681][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 681.214370][T12125] device veth0_vlan entered promiscuous mode [ 681.220975][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 681.229279][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 681.236966][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 681.244349][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 681.256451][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 681.267510][T12125] device veth1_macvtap entered promiscuous mode [ 681.276895][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 681.289282][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 681.337343][ T9210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.348147][ T9210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.357732][ T9210] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 681.366688][ T9210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.375464][ T9210] usb 3-1: config 0 descriptor?? [ 681.422393][T12137] loop1: detected capacity change from 0 to 8192 [ 681.438033][ T2383] device bridge_slave_1 left promiscuous mode [ 681.444009][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.452409][ T2383] device bridge_slave_0 left promiscuous mode [ 681.458420][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.466029][ T2383] device veth1_macvtap left promiscuous mode [ 681.471893][ T2383] device veth0_vlan left promiscuous mode [ 681.689961][T12144] loop4: detected capacity change from 0 to 512 [ 681.757839][T12144] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 681.787760][T12144] EXT4-fs (loop4): orphan cleanup on readonly fs [ 681.796601][T12144] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 681.826150][T12144] Quota error (device loop4): write_blk: dquota write failed [ 681.837331][ T634] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 681.842909][T12144] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 681.870459][T12144] EXT4-fs (loop4): 1 truncate cleaned up [ 681.898601][T12144] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 681.966694][T11938] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 681.984873][T11938] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 682.107271][ T634] usb 2-1: Using ep0 maxpacket: 16 [ 682.143495][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.150547][ T295] uclogic 0003:256C:006D.003A: interface is invalid, ignoring [ 682.151070][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.165191][T12147] device bridge_slave_0 entered promiscuous mode [ 682.171987][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.178921][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.185922][T12147] device bridge_slave_1 entered promiscuous mode [ 682.229513][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.236346][T12147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.243566][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.247302][ T634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 682.250343][T12147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.261937][ T634] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 682.277503][ T634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.284316][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 682.293983][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.295496][ T634] usb 2-1: config 0 descriptor?? [ 682.305716][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.321905][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 682.329988][ T4624] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.336826][ T4624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.344305][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 682.355065][ T4624] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.361939][ T4624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.383173][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 682.396508][ T4624] usb 1-1: USB disconnect, device number 112 [ 682.402501][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 682.421715][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 682.432964][T12147] device veth0_vlan entered promiscuous mode [ 682.470022][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 682.478426][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 682.486060][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 682.500304][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.509162][T12147] device veth1_macvtap entered promiscuous mode [ 682.518340][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 682.527364][ T9210] uclogic 0003:256C:006D.003B: interface is invalid, ignoring [ 682.536571][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 682.795062][ T9210] usb 3-1: USB disconnect, device number 105 [ 682.878142][ T2383] device veth1_macvtap left promiscuous mode [ 682.884073][ T2383] device veth0_vlan left promiscuous mode [ 682.915465][T12137] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.922807][T12137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.959332][ T634] hid (null): global environment stack underflow [ 682.965525][ T634] hid (null): report_id 0 is invalid [ 682.972039][ T634] hid-generic 0003:0158:0100.003C: unknown main item tag 0x1 [ 682.980123][ T634] hid-generic 0003:0158:0100.003C: unexpected long global item [ 682.987634][ T634] hid-generic: probe of 0003:0158:0100.003C failed with error -22 [ 683.163315][ T9210] usb 2-1: USB disconnect, device number 98 [ 683.936015][T12196] loop1: detected capacity change from 0 to 256 [ 684.019235][T12194] loop0: detected capacity change from 0 to 40427 [ 684.088292][T12194] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 684.096916][T12194] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 684.107338][T12194] F2FS-fs (loop0): Found nat_bits in checkpoint [ 684.131058][T12194] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 684.138090][T12194] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 684.151278][T12194] attempt to access beyond end of device [ 684.151278][T12194] loop0: rw=10241, want=45104, limit=40427 [ 684.165372][T11621] attempt to access beyond end of device [ 684.165372][T11621] loop0: rw=2049, want=45112, limit=40427 [ 684.847411][ T9210] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 685.616530][ T30] audit: type=1400 audit(1721437484.955:1384): avc: denied { read } for pid=12236 comm="syz.2.3398" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 685.661272][ T30] audit: type=1400 audit(1721437485.005:1385): avc: denied { unmount } for pid=11782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 685.817364][ T9210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.837281][ T9210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.846836][ T9210] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 685.861585][ T9210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.870270][ T9210] usb 1-1: config 0 descriptor?? [ 686.511076][ T30] audit: type=1400 audit(1721437485.855:1386): avc: denied { ioctl } for pid=12262 comm="syz.4.3408" path="socket:[72762]" dev="sockfs" ino=72762 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 686.522825][T12263] device syzkaller0 entered promiscuous mode [ 687.007484][ T9210] uclogic 0003:256C:006D.003D: failed retrieving string descriptor #200: -71 [ 687.016655][ T9210] uclogic 0003:256C:006D.003D: failed retrieving pen parameters: -71 [ 687.025010][ T9210] uclogic 0003:256C:006D.003D: failed probing pen v2 parameters: -71 [ 687.033230][ T9210] uclogic 0003:256C:006D.003D: failed probing parameters: -71 [ 687.042368][ T9210] uclogic: probe of 0003:256C:006D.003D failed with error -71 [ 687.050776][ T9210] usb 1-1: USB disconnect, device number 113 [ 687.694113][ T30] audit: type=1400 audit(1721437487.035:1387): avc: denied { listen } for pid=12335 comm="syz.1.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 687.916202][ T30] audit: type=1400 audit(1721437487.255:1388): avc: denied { getopt } for pid=12341 comm="syz.1.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 688.067267][ T295] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 688.413445][ T30] audit: type=1326 audit(1721437487.755:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12356 comm="syz.3.3449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d32403b59 code=0x0 [ 688.517463][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.530492][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.540441][ T295] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 688.549631][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.661914][ T295] usb 3-1: config 0 descriptor?? [ 688.829126][ T30] audit: type=1400 audit(1721437488.175:1390): avc: denied { create } for pid=12378 comm="syz.1.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 688.849217][ T30] audit: type=1400 audit(1721437488.175:1391): avc: denied { setopt } for pid=12378 comm="syz.1.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 688.871662][ T30] audit: type=1400 audit(1721437488.175:1392): avc: denied { getopt } for pid=12378 comm="syz.1.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 689.304600][ T30] audit: type=1400 audit(1721437488.645:1393): avc: denied { sys_module } for pid=12387 comm="syz.0.3461" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 689.306037][T12393] netlink: 'syz.0.3461': attribute type 4 has an invalid length. [ 689.398386][T12393] syz.0.3461 (12393) used greatest stack depth: 20320 bytes left [ 689.476998][ T30] audit: type=1400 audit(1721437488.815:1394): avc: denied { bind } for pid=12406 comm="syz.0.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 689.553028][ T30] audit: type=1326 audit(1721437488.895:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.0.3473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47b4b3ab59 code=0x0 [ 689.839160][ T295] uclogic 0003:256C:006D.003E: failed retrieving string descriptor #200: -71 [ 689.848618][ T295] uclogic 0003:256C:006D.003E: failed retrieving pen parameters: -71 [ 689.856542][ T295] uclogic 0003:256C:006D.003E: failed probing pen v2 parameters: -71 [ 689.865155][ T295] uclogic 0003:256C:006D.003E: failed probing parameters: -71 [ 689.872688][ T295] uclogic: probe of 0003:256C:006D.003E failed with error -71 [ 689.881510][ T295] usb 3-1: USB disconnect, device number 106 [ 690.345148][T12468] netlink: 'syz.4.3492': attribute type 4 has an invalid length. [ 690.644168][T12512] loop0: detected capacity change from 0 to 1024 [ 690.671167][T12512] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x0000000000000009,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 690.863167][T12526] loop0: detected capacity change from 0 to 1024 [ 690.958754][T12526] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 691.162326][T12538] loop0: detected capacity change from 0 to 128 [ 691.217276][ T4624] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 691.278209][T12544] BUG: unable to handle page fault for address: ffffffffff600000 [ 691.285737][T12544] #PF: supervisor read access in kernel mode [ 691.291551][T12544] #PF: error_code(0x0001) - permissions violation [ 691.297801][T12544] PGD 6812067 P4D 6812067 PUD 6814067 PMD 6816067 PTE 8000000006809165 [ 691.305876][T12544] Oops: 0001 [#1] PREEMPT SMP KASAN [ 691.310904][T12544] CPU: 1 PID: 12544 Comm: syz.2.3526 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 691.320712][T12544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 691.330608][T12544] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0 [ 691.336684][T12544] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 8b 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 691.356210][T12544] RSP: 0018:ffffc9000136fb10 EFLAGS: 00010292 [ 691.362199][T12544] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff8881181fbb40 [ 691.370009][T12544] RDX: ffff8881181fc6d0 RSI: 0000000000000008 RDI: 0000000000000007 [ 691.377825][T12544] RBP: ffffc9000136fb48 R08: ffffffff8199a975 R09: ffffed102303f769 [ 691.385635][T12544] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 691.393446][T12544] R13: 0000000000000000 R14: ffffc9000136fba8 R15: ffffc9000136fbb0 [ 691.401257][T12544] FS: 00007f6b224eb6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 691.410023][T12544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.416447][T12544] CR2: ffffffffff600000 CR3: 000000011f070000 CR4: 00000000003506a0 [ 691.424258][T12544] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 691.432067][T12544] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 691.439880][T12544] Call Trace: [ 691.443005][T12544] [ 691.445784][T12544] ? __die_body+0x62/0xb0 [ 691.449949][T12544] ? __die+0x7e/0x90 [ 691.453680][T12544] ? page_fault_oops+0x7f9/0xa90 [ 691.458456][T12544] ? kernelmode_fixup_or_oops+0x270/0x270 [ 691.464006][T12544] ? security_file_alloc+0x29/0x120 [ 691.469041][T12544] ? kmem_cache_alloc+0xf5/0x200 [ 691.473817][T12544] ? exc_page_fault+0x521/0x830 [ 691.478502][T12544] ? errseq_sample+0x44/0x70 [ 691.482934][T12544] ? asm_exc_page_fault+0x27/0x30 [ 691.487791][T12544] ? copy_from_kernel_nofault+0x75/0x2e0 [ 691.493256][T12544] ? copy_from_kernel_nofault+0x86/0x2e0 [ 691.498727][T12544] bpf_probe_read_compat+0x112/0x180 [ 691.503846][T12544] bpf_prog_baa065642a502c00+0x64/0xf88 [ 691.509229][T12544] __bpf_prog_test_run_raw_tp+0xa0/0x1d0 [ 691.514705][T12544] ? bpf_prog_test_run_raw_tp+0x4c5/0x6c0 [ 691.520251][T12544] bpf_prog_test_run_raw_tp+0x4cd/0x6c0 [ 691.525633][T12544] ? bpf_prog_test_run_tracing+0x710/0x710 [ 691.531274][T12544] ? __kasan_check_write+0x14/0x20 [ 691.536219][T12544] ? fput_many+0x160/0x1b0 [ 691.540472][T12544] ? bpf_prog_test_run_tracing+0x710/0x710 [ 691.546115][T12544] bpf_prog_test_run+0x3b0/0x630 [ 691.550889][T12544] ? bpf_prog_query+0x220/0x220 [ 691.555576][T12544] ? selinux_bpf+0xd2/0x100 [ 691.559916][T12544] ? security_bpf+0x82/0xb0 [ 691.564253][T12544] __sys_bpf+0x525/0x760 [ 691.568334][T12544] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 691.573543][T12544] ? __kasan_check_read+0x11/0x20 [ 691.578403][T12544] __x64_sys_bpf+0x7c/0x90 [ 691.582654][T12544] do_syscall_64+0x3d/0xb0 [ 691.586907][T12544] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 691.592636][T12544] RIP: 0033:0x7f6b23269b59 [ 691.596978][T12544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.616417][T12544] RSP: 002b:00007f6b224eb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.624672][T12544] RAX: ffffffffffffffda RBX: 00007f6b233f9f60 RCX: 00007f6b23269b59 [ 691.632479][T12544] RDX: 0000000000000050 RSI: 0000000020000680 RDI: 000000000000000a [ 691.640296][T12544] RBP: 00007f6b232d8e5d R08: 0000000000000000 R09: 0000000000000000 [ 691.648098][T12544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.655912][T12544] R13: 000000000000000b R14: 00007f6b233f9f60 R15: 00007ffc606f14e8 [ 691.663725][T12544] [ 691.666585][T12544] Modules linked in: [ 691.670340][T12544] CR2: ffffffffff600000 [ 691.674317][T12544] ---[ end trace ed9d0a22207b67fb ]--- [ 691.679604][T12544] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0 [ 691.685679][T12544] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 8b 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 691.705126][T12544] RSP: 0018:ffffc9000136fb10 EFLAGS: 00010292 [ 691.711022][T12544] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff8881181fbb40 [ 691.718834][T12544] RDX: ffff8881181fc6d0 RSI: 0000000000000008 RDI: 0000000000000007 [ 691.726643][T12544] RBP: ffffc9000136fb48 R08: ffffffff8199a975 R09: ffffed102303f769 [ 691.734455][T12544] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 691.742269][T12544] R13: 0000000000000000 R14: ffffc9000136fba8 R15: ffffc9000136fbb0 [ 691.750166][T12544] FS: 00007f6b224eb6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 691.759114][T12544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.765531][T12544] CR2: ffffffffff600000 CR3: 000000011f070000 CR4: 00000000003506a0 [ 691.773349][T12544] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 691.781154][T12544] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 691.788978][T12544] Kernel panic - not syncing: Fatal exception [ 691.795025][T12544] Kernel Offset: disabled [ 691.799146][T12544] Rebooting in 86400 seconds..