last executing test programs: 5.602380146s ago: executing program 2 (id=670): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1000000000000024, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.027639282s ago: executing program 2 (id=674): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.509226102s ago: executing program 2 (id=680): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) syz_usb_disconnect(0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.61190439s ago: executing program 2 (id=702): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 2.379211017s ago: executing program 3 (id=707): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2.34335813s ago: executing program 0 (id=710): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r1) r2 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 2.26377685s ago: executing program 4 (id=722): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2001004, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.257615741s ago: executing program 3 (id=713): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="3daa0000000000007910", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x10) 2.25740239s ago: executing program 4 (id=714): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB='P'], 0x150) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) 2.235311023s ago: executing program 0 (id=715): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0xfffffffffffffc01, 0x0) 2.124082816s ago: executing program 4 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff25, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.035720776s ago: executing program 4 (id=719): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000340), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="71eced8e46f62a572261adcf0e51", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r5, 0x305, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) copy_file_range(r0, &(0x7f00000001c0)=0x9100000000000000, 0xffffffffffffffff, 0x0, 0x0, 0x700000000000000) 1.631530063s ago: executing program 2 (id=720): socket$nl_xfrm(0x10, 0x3, 0x6) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) close(r1) close(r2) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 1.583748988s ago: executing program 2 (id=721): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000001300)={0x2c, 0x0, &(0x7f0000001200)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0ff51c318db6d425b1b3"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003260000000003"], 0x0, 0x0}, 0x0) 1.583101858s ago: executing program 3 (id=723): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000500)={r2, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwritev2(r3, 0x0, 0x0, 0x1800, 0x0, 0x3) 1.525728685s ago: executing program 4 (id=724): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f00000002c0)={[{@dots}, {@fat=@gid}, {@nodots}, {@fat=@flush}, {@fat=@time_offset={'time_offset', 0x3d, 0x2db}}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@quiet}, {@dots}, {@nodots}, {@nodots}, {@fat=@tz_utc}, {@fat=@sys_immutable}, {@fat=@errors_continue}, {@dots}, {@fat=@showexec}, {@nodots}, {@fat=@usefree}, {@fat=@check_strict}, {@fat=@discard}]}, 0xfd, 0x207, &(0x7f0000000780)="$eJzs3b2OElEUAOADsjAYi+1MTEzGWGi1UZ9gjVkTI4nJGgrtTLSSamlgm93H8BV8JSsLKyuzFY25Bmf4EVlcSWB09/sKODPnXu69MzDQcCZF4cvND5Fltajvx36MarEb9Zg4DQDgMhmlFN9SYbrzc6VTAgA2bOn3/1Q2fvhewbQAgA16+er188edzsFhnmcRZ6eD7qBbPBf5p886Bw/yn3Znvc4Gg+61af5hvvjbYZzfietl/lHRP5+mmxHRbcb9u0V+nHvyopP/2r8Vbze8dgAAAAAAAAAAAAAAAAAAAAAAqMrtyCeW1vfZ21vMt8t8sTVXH2ihfk8jbjXKzVl5oHSyjUUBAAAAAAAAAAAAAAAAAADAf6Y/PH7/ptd7dzQLWhExv6expM35Qa184Qs1rj6of/pazPcvu7fLZa4xaK08RJtdYHv5yb1IEI1/5eysG+RbGKu98vCmNA7mPwVp+m6ZlMU4t3szIlaPfu9w3cmPUkq9j3eO+sNIKxvPrhGt7V2OAAAAAAAAAAAAAAAAAADgSusPa5N/ff8mq2JCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCB/vC4vP//GsFJRNyIPzaejLUTWbWLBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NL6EQAA//+0XiJG") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open(0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8001) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r2, 0x0, 0x80000000) 1.48102609s ago: executing program 3 (id=725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.183388164s ago: executing program 3 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000240)="652ef20f320f017afcf3660f2092b800008ec8b8580c8ec026643ef30f5dcb67d0dd813ab9b266b9bf090000660f38823866ba000000000f3066b9800000c00f326635010000000f30", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000000), 0x0}) 1.178705185s ago: executing program 0 (id=729): recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x64000600) unshare(0x20000400) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@errors_continue}, {@abort}, {@errors_remount}, {@norecovery}, {@minixdf}, {@nolazytime}, {@noquota}, {@norecovery}, {@usrquota}, {@user_xattr}]}, 0x1, 0x476, &(0x7f0000000700)="$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") 979.916268ms ago: executing program 1 (id=731): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) 979.573668ms ago: executing program 0 (id=732): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}}) 917.903555ms ago: executing program 1 (id=733): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) write$binfmt_script(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRESHEX, @ANYBLOB="00000000002730000000240012800c0001006d6163766c616e000400028008000100020000000800030000000000e667a3c0335d1d5108221b28791ca05b013aeb871a9978108a00bb9bc46d1925a77e9a497ef8e7914467991c14329e3d3989746c2f9e80f1b644303897eb21ce8c40f73cd5ba95519b67672dc3801ce8ef22155fb306faf16fc9705b00b57bd9cd6cff4428c9a796d0e2ae82e65b972966649f2c63d96373be290d5864ff17bdf5ab48b0268be87c8cf031ad18c82e19c2dfde0f106357525231bf5ef0b2b6"], 0x44}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2604c8d5, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(0xffffffffffffffff, 0x0, 0x102) shutdown(0xffffffffffffffff, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) 902.725036ms ago: executing program 0 (id=734): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="3daa0000000000007910", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x10) 744.049925ms ago: executing program 1 (id=735): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000340), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="71eced8e46f62a572261adcf0e51", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r5, 0x305, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) copy_file_range(r0, &(0x7f00000001c0)=0x9100000000000000, 0xffffffffffffffff, 0x0, 0x0, 0x700000000000000) 440.968549ms ago: executing program 1 (id=736): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000500)={r2, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwritev2(r3, 0x0, 0x0, 0x1800, 0x0, 0x3) 437.89276ms ago: executing program 0 (id=745): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 347.14026ms ago: executing program 3 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 243.764682ms ago: executing program 1 (id=738): openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00007bc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000604000/0x3000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000d04000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000168000/0x1000)=nil) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f0000e3b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mremap(&(0x7f000070b000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00004d1000/0x3000)=nil) mremap(&(0x7f0000ccc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000b0e000/0x2000)=nil) mremap(&(0x7f00007f5000/0x4000)=nil, 0x52e000, 0x4000, 0x3, &(0x7f0000ec0000/0x4000)=nil) 82.934831ms ago: executing program 1 (id=739): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvTLf8VFoRf4AkVtHY+KOlBZSDHjSaeNBEowc81rYQZKGG1kQI0WIMHg2Jd+PRxL/Akyejnky8eNC7ISFKTAAvrpndmba77lT6cxf380kW3tt5M+99++btvr632wB61lD2TxJxR0T8EhEDjWxzgaHGfzeuXZi8ee3CZBK12hu/J/Vy169dmCyKFuftzDPDaUT6cZJX0mz23PlTE9Xq9Nk8Pzp3+t3R2XPnnzp5euLE9InpM+NHjx4+NPbM0+NHms47sso4s/iu7/tgZv/el9+6/Orksctvf/9V1t40P740jvUylAX+R62u9dij611Zh/1dW4wzqXS6NdyqvojIuqu/Pv4Hoi8WO28gXvqoo40DNlT2mr21/PB8DfgfS6LTLQA6o3ijz37/zR/9mzT16ApXn2/8ApTFfiN/NI5UFtYGNvIHMhQRx+b/+jx7RMs6RK3NugEAwFp9k81/nmya/+XzjzTuXVJuV743NBgRd0XE7oi4OyL2RMQ9EfWy90XE/Susv3Vr6N/7MOmVVQV2i7L537P53lbz/K+Y/cVgX567sx5/f3L8ZHX6YP4zGY7+rVl+rN3Fi0u8+NOnZfUvnf9lj6z+Yi6YX+RKpWWBbmpibmK9JqVXL0bsq7SLP1nYCUgiYm9E7FvZpXcViZOPf7m/rNB/x7+Mddhnqn0R8Vij/+ejJf5Csvz+5Oi2qE4fHG3cFX1t6vjhx0uvldW/pvjXQdb/O5rv/5YSA38mS/drZ1dex6VfPyndW62s8v7fkrxZ39Pdkj/3/sTc3NmxiC3JK/V80/Pji+cW+aJ8Fv/wgfbjf3d+Thb/AxGxP+LnYtg9mPfdQxHxcEQcWCb+71545J2yY93Q/1NtX/8W7v/B5v5feaLv1Ldfl9XfGn+S5xdLZP1/uJ4azp+pv/7ltpdct7w52/ISq72bAQAA4PaT1j8bn6QjC+k0HRlpfIZ/T+xIqzOzc08cn3nvzFTjM/SD0Z8W658DS9ZDx5L5/IqN/Hi+VlwcP5SvG3/Wtz1Jojo9MjlTnepw7NDrdpaM/8xv7RazI+K5TW0hsKF8Xwt6V+v4TzvUDmDzef+H3mX8Q+8y/qF3FeP/9SXPfdhSpmQvALjNef+H3mX8Q+9aGP8XO9sOYPN5/4ee1O5L8sXfOFjDV/7XlKgs8+39Lk0Uq6Pd0p5TSURsbBWRdkekpYnI/4hFt7Rn5YmbtVWeXllmdN9qojOvRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvtnwAAAP//aP7lHQ==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r3, 0x0) ftruncate(r3, 0x9e5d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x2, &(0x7f0000001500)=""/19, &(0x7f0000000000)=0x13) 0s ago: executing program 4 (id=728): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000faffffffb703000008400000b70600000000feff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8541) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 86.082523][ T1068] EXT4-fs (loop1): unmounting filesystem. [ 86.098057][ T820] usb 4-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 86.113888][ T820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.131465][ T820] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.174420][ T1394] loop2: detected capacity change from 0 to 131072 [ 86.183080][ T1394] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 86.191046][ T1394] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 86.213073][ T1394] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.254493][ T1394] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 86.262160][ T1394] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.312225][ T820] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.329142][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.337848][ T820] usb 4-1: Product: syz [ 86.342213][ T820] usb 4-1: Manufacturer: syz [ 86.346642][ T820] usb 4-1: SerialNumber: syz [ 86.592351][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 86.592368][ T28] audit: type=1400 audit(1729572868.121:414): avc: denied { read } for pid=1389 comm="syz.3.315" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.643190][ T28] audit: type=1400 audit(1729572868.121:415): avc: denied { open } for pid=1389 comm="syz.3.315" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.658488][ T820] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 86.667142][ T315] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 86.673656][ T820] cdc_ncm 4-1:1.0: bind() failure [ 86.680942][ T28] audit: type=1400 audit(1729572868.121:416): avc: denied { ioctl } for pid=1389 comm="syz.3.315" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.708083][ T820] usb 4-1: USB disconnect, device number 14 [ 86.732648][ T28] audit: type=1400 audit(1729572868.121:417): avc: denied { set_context_mgr } for pid=1389 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 87.047999][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.058754][ T315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.071503][ T315] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.080696][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.116305][ T315] usb 5-1: config 0 descriptor?? [ 87.427942][ T820] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 87.618941][ T315] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 87.626159][ T315] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 87.634587][ T315] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 87.658141][ T315] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 87.667917][ T820] usb 4-1: Using ep0 maxpacket: 8 [ 87.767991][ T334] usb 1-1: 0:2 : does not exist [ 87.779392][ T334] usb 1-1: USB disconnect, device number 10 [ 87.798349][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.809398][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.830306][ T820] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 87.849070][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.857625][ T820] usb 4-1: config 0 descriptor?? [ 87.929501][ T28] audit: type=1400 audit(1729572869.461:418): avc: denied { accept } for pid=1428 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 87.931534][ T39] usb 5-1: USB disconnect, device number 17 [ 88.263429][ T1452] loop2: detected capacity change from 0 to 40427 [ 88.275971][ T1452] F2FS-fs (loop2): invalid crc value [ 88.283663][ T1452] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.329645][ T820] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 88.331142][ T1452] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 88.337090][ T820] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 88.355914][ T820] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 88.363669][ T820] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 88.371139][ T820] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 88.378568][ T820] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 88.385907][ T820] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 88.394988][ T820] playstation 0003:054C:0CE6.000E: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 88.425840][ T1452] syz.2.336: attempt to access beyond end of device [ 88.425840][ T1452] loop2: rw=1, sector=53248, nr_sectors = 208 limit=40427 [ 88.480890][ T1467] loop4: detected capacity change from 0 to 512 [ 88.488030][ T334] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 88.502644][ T1467] EXT4-fs (loop4): 1 truncate cleaned up [ 88.508250][ T1467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.604561][ T820] playstation 0003:054C:0CE6.000E: Invalid reportID received, expected 9 got 0 [ 88.613473][ T820] playstation 0003:054C:0CE6.000E: Failed to retrieve DualSense pairing info: -22 [ 88.625500][ T820] playstation 0003:054C:0CE6.000E: Failed to get MAC address from DualSense [ 88.634030][ T820] playstation 0003:054C:0CE6.000E: Failed to create dualsense. [ 88.642482][ T820] playstation: probe of 0003:054C:0CE6.000E failed with error -22 [ 88.742456][ T713] syz-executor: attempt to access beyond end of device [ 88.742456][ T713] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.758898][ T820] usb 4-1: USB disconnect, device number 15 [ 88.877966][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.888850][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.898342][ T334] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 88.907454][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.916188][ T334] usb 2-1: config 0 descriptor?? [ 89.331826][ T723] EXT4-fs (loop4): unmounting filesystem. [ 89.346051][ T28] audit: type=1400 audit(1729572870.871:419): avc: denied { map } for pid=1476 comm="syz.4.344" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.370242][ T28] audit: type=1400 audit(1729572870.871:420): avc: denied { call } for pid=1476 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 89.390951][ T334] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 89.449602][ T1481] loop4: detected capacity change from 0 to 256 [ 89.464378][ T28] audit: type=1400 audit(1729572870.991:421): avc: denied { remove_name } for pid=1480 comm="syz.4.346" name="bus" dev="loop4" ino=1048658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.488887][ T28] audit: type=1400 audit(1729572870.991:422): avc: denied { rename } for pid=1480 comm="syz.4.346" name="bus" dev="loop4" ino=1048658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.516169][ T28] audit: type=1400 audit(1729572870.991:423): avc: denied { reparent } for pid=1480 comm="syz.4.346" name="file0" dev="loop4" ino=1048658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.522380][ T1483] loop4: detected capacity change from 0 to 512 [ 89.544918][ T1483] EXT4-fs: Ignoring removed i_version option [ 89.550989][ T1483] EXT4-fs: Ignoring removed nobh option [ 89.556683][ T1483] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.568416][ T1483] EXT4-fs (loop4): 1 truncate cleaned up [ 89.573897][ T1483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.591489][ T1483] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #18: comm syz.4.347: invalid indirect mapped block 2349660427 (level 0) [ 89.610008][ T723] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /44/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 89.631453][ T723] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 89.651442][ T723] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /44/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 89.672982][ T723] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 89.693305][ T723] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /44/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 89.714944][ T723] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 89.735146][ T723] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /44/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 89.735457][ T723] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 89.776049][ T723] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /44/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 89.795645][ T1488] loop2: detected capacity change from 0 to 512 [ 89.807982][ T1488] EXT4-fs: Ignoring removed bh option [ 89.813699][ T1488] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 89.823179][ T1488] EXT4-fs (loop2): 1 truncate cleaned up [ 89.829005][ T1488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.849442][ T713] EXT4-fs (loop2): unmounting filesystem. [ 89.881724][ T723] EXT4-fs (loop4): unmounting filesystem. [ 89.989226][ T1497] loop2: detected capacity change from 0 to 1024 [ 89.997025][ T1497] EXT4-fs: Ignoring removed orlov option [ 90.003289][ T1497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.019557][ T1497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.058570][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.065440][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.072764][ T1498] device bridge_slave_0 entered promiscuous mode [ 90.079543][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.086368][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.094212][ T1498] device bridge_slave_1 entered promiscuous mode [ 90.124957][ T713] EXT4-fs (loop2): unmounting filesystem. [ 90.172691][ T1509] syz.3.355[1509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.172764][ T1509] syz.3.355[1509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.195233][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.213118][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.220412][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.227258][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.247974][ T334] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 90.255188][ T334] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 90.279736][ T334] pyra: probe of 0003:1E7D:2CF6.000F failed with error -71 [ 90.290388][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.297811][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.313252][ T334] usb 2-1: USB disconnect, device number 12 [ 90.328765][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.354589][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.366842][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.394487][ T1498] device veth0_vlan entered promiscuous mode [ 90.405966][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.416028][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.424114][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.431583][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.439730][ T10] device bridge_slave_1 left promiscuous mode [ 90.446187][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.453798][ T10] device bridge_slave_0 left promiscuous mode [ 90.459825][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.467514][ T10] device veth1_macvtap left promiscuous mode [ 90.473453][ T10] device veth0_vlan left promiscuous mode [ 90.553232][ T1516] overlayfs: failed to get inode (-116) [ 90.558906][ T1516] overlayfs: failed to get inode (-116) [ 90.577989][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.588887][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.598217][ T1498] device veth1_macvtap entered promiscuous mode [ 90.622215][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.631109][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.639992][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.657936][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.666357][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.733249][ T1518] loop2: detected capacity change from 0 to 16 [ 90.749616][ T1518] erofs: (device loop2): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 90.816891][ T1530] loop1: detected capacity change from 0 to 512 [ 90.899100][ T1530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.916512][ T1530] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 90.951971][ T1522] loop4: detected capacity change from 0 to 40427 [ 90.963065][ T1522] F2FS-fs (loop4): invalid crc value [ 90.971338][ T1522] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.009492][ T1522] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 91.308004][ T850] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 91.601280][ T1068] EXT4-fs (loop1): unmounting filesystem. [ 91.627690][ T1546] loop1: detected capacity change from 0 to 512 [ 91.650145][ T1546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.659792][ T1546] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 91.682949][ T1546] EXT4-fs (loop1): shut down requested (0) [ 91.693908][ T1546] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 91.707990][ T850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.717010][ T1550] loop3: detected capacity change from 0 to 4096 [ 91.719136][ T850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.726996][ T1550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.740129][ T850] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.753943][ T850] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.754613][ T1068] EXT4-fs (loop1): unmounting filesystem. [ 91.763135][ T850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.780270][ T850] usb 5-1: config 0 descriptor?? [ 91.788585][ T1550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.804949][ T1550] EXT4-fs (loop3): unmounting filesystem. [ 91.812864][ T1553] Non-string source [ 91.829468][ T1555] loop2: detected capacity change from 0 to 2048 [ 91.836289][ T1557] loop1: detected capacity change from 0 to 128 [ 91.849580][ T1557] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.858452][ T1557] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 91.892549][ T1557] syz.1.371 (pid 1557) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 91.906045][ T1550] loop3: detected capacity change from 0 to 512 [ 91.914330][ T1068] EXT4-fs (loop1): unmounting filesystem. [ 91.924209][ T1555] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.930030][ T1550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.944569][ T1550] ext4 filesystem being mounted at /12/bus supports timestamps until 2038 (0x7fffffff) [ 91.985194][ T1296] EXT4-fs (loop3): unmounting filesystem. [ 92.041991][ T1569] device syzkaller0 entered promiscuous mode [ 92.105289][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 92.105306][ T28] audit: type=1400 audit(1729572873.631:427): avc: denied { ioctl } for pid=1565 comm="syz.1.374" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23157 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.138593][ T28] audit: type=1400 audit(1729572873.631:428): avc: denied { read } for pid=1565 comm="syz.1.374" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.167252][ T1570] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.182219][ T1570] EXT4-fs (loop2): Remounting filesystem read-only [ 92.248928][ T850] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x4 [ 92.256176][ T850] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 92.277920][ T850] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 92.285143][ T850] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 92.292768][ T850] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 92.302542][ T850] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 92.370771][ T1578] xt_CT: No such helper "snmp_trap" [ 92.665622][ T28] audit: type=1400 audit(1729572874.191:429): avc: denied { append } for pid=1521 comm="syz.4.362" name="hiddev0" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.691280][ T713] EXT4-fs (loop2): unmounting filesystem. [ 93.057794][ T28] audit: type=1400 audit(1729572874.581:430): avc: denied { getopt } for pid=1594 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.115843][ T28] audit: type=1400 audit(1729572874.641:431): avc: denied { setopt } for pid=1601 comm="syz.3.384" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.245589][ T1609] loop2: detected capacity change from 0 to 512 [ 93.252395][ T1609] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.262845][ T1609] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.269024][ T1609] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.387: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 93.286171][ T1609] EXT4-fs error (device loop2): ext4_quota_enable:6958: comm syz.2.387: Bad quota inode: 3, type: 0 [ 93.297258][ T1609] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 93.311815][ T1609] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 93.318493][ T1609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.336806][ T713] EXT4-fs (loop2): unmounting filesystem. [ 93.532998][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.539869][ T1620] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.547031][ T1620] device bridge_slave_0 entered promiscuous mode [ 93.553831][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.560820][ T1620] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.568189][ T1620] device bridge_slave_1 entered promiscuous mode [ 93.622060][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.628920][ T1620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.635994][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.642810][ T1620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.651170][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.658446][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.681188][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.688728][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.700310][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.708042][ T1522] usb 5-1: string descriptor 0 read error: -2 [ 93.709690][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.718385][ T1625] loop1: detected capacity change from 0 to 2048 [ 93.722609][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.734945][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.742100][ T19] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 93.755184][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.763566][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.776742][ T820] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.783607][ T820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.797980][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.805821][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.813874][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.821791][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.839310][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.847524][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.858013][ T1620] device veth0_vlan entered promiscuous mode [ 93.868154][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.875899][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.883928][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.891270][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.906761][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.914805][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.924164][ T1620] device veth1_macvtap entered promiscuous mode [ 93.935704][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.943253][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.951775][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.965096][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.973141][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.007889][ T1629] serio: Serial port ptm0 [ 94.108000][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.125300][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.140649][ T43] device bridge_slave_1 left promiscuous mode [ 94.146585][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.153599][ T19] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.164888][ T43] device bridge_slave_0 left promiscuous mode [ 94.172400][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.172860][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.193961][ T19] usb 3-1: config 0 descriptor?? [ 94.206368][ T43] device veth1_macvtap left promiscuous mode [ 94.212527][ T43] device veth0_vlan left promiscuous mode [ 94.412208][ T1640] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.394'. [ 94.679738][ T19] hid (null): bogus close delimiter [ 94.817903][ T850] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 94.857946][ T850] usb 5-1: device reset changed ep0 maxpacket size! [ 94.866768][ T24] usb 5-1: USB disconnect, device number 18 [ 94.897972][ T19] usb 3-1: string descriptor 0 read error: -22 [ 94.936163][ T1648] loop3: detected capacity change from 0 to 128 [ 94.984921][ T28] audit: type=1400 audit(1729572876.511:432): avc: denied { map } for pid=1647 comm="syz.3.398" path="socket:[24566]" dev="sockfs" ino=24566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.025868][ T28] audit: type=1400 audit(1729572876.511:433): avc: denied { read } for pid=1647 comm="syz.3.398" path="socket:[24566]" dev="sockfs" ino=24566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.057959][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 95.060367][ T1648] syz.3.398: attempt to access beyond end of device [ 95.060367][ T1648] loop3: rw=0, sector=122, nr_sectors = 919 limit=128 [ 95.159170][ T19] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0011/input/input21 [ 95.179535][ T19] uclogic 0003:256C:006D.0011: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 95.277692][ T1659] loop0: detected capacity change from 0 to 512 [ 95.298889][ T1659] ext4: Unknown parameter '"' [ 95.327933][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 95.363060][ T334] usb 3-1: USB disconnect, device number 11 [ 95.467938][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.475738][ T24] usb 5-1: config 0 has no interface number 0 [ 95.482053][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.492783][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.502361][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 95.511172][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.519676][ T24] usb 5-1: config 0 descriptor?? [ 95.607927][ T19] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 95.882869][ T19] usb 4-1: device descriptor read/64, error -71 [ 96.117979][ T334] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 96.135357][ T1669] fuse: Unknown parameter '0x0000000000000006' [ 96.142033][ T1669] kernel profiling enabled (shift: 0) [ 96.217955][ T24] uclogic 0003:28BD:0071.0012: failed retrieving string descriptor #100: -71 [ 96.234413][ T24] uclogic 0003:28BD:0071.0012: failed retrieving pen parameters: -71 [ 96.247953][ T24] uclogic 0003:28BD:0071.0012: pen probing failed: -71 [ 96.264397][ T24] uclogic 0003:28BD:0071.0012: failed probing parameters: -71 [ 96.274057][ T24] uclogic: probe of 0003:28BD:0071.0012 failed with error -71 [ 96.278278][ T19] usb 4-1: device descriptor read/64, error -71 [ 96.287940][ T24] usb 5-1: USB disconnect, device number 19 [ 96.478005][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.498060][ T334] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.527918][ T334] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.536804][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.558841][ T334] usb 2-1: config 0 descriptor?? [ 96.568060][ T19] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 96.839450][ T19] usb 4-1: device descriptor read/64, error -71 [ 96.971882][ T1679] device syzkaller0 entered promiscuous mode [ 97.039106][ T334] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 97.063178][ T334] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 97.129280][ T28] audit: type=1400 audit(1729572878.661:434): avc: denied { setopt } for pid=1681 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.148366][ T28] audit: type=1400 audit(1729572878.661:435): avc: denied { ioctl } for pid=1681 comm="syz.4.408" path="socket:[24619]" dev="sockfs" ino=24619 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.172965][ T28] audit: type=1400 audit(1729572878.661:436): avc: denied { bind } for pid=1681 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.238404][ T19] usb 4-1: device descriptor read/64, error -71 [ 97.358124][ T19] usb usb4-port1: attempt power cycle [ 97.767976][ T19] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 97.855802][ T28] audit: type=1400 audit(1729572879.381:437): avc: denied { ioctl } for pid=1695 comm="syz.0.413" path="socket:[25652]" dev="sockfs" ino=25652 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.881024][ T28] audit: type=1400 audit(1729572879.391:438): avc: denied { connect } for pid=1695 comm="syz.0.413" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.925181][ T1700] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.932202][ T1700] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.939484][ T19] usb 4-1: device descriptor read/8, error -71 [ 97.945998][ T1700] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.952859][ T1700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.959952][ T1700] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.966830][ T1700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.974203][ T1700] device bridge0 entered promiscuous mode [ 97.981995][ T370] usb 2-1: USB disconnect, device number 13 [ 98.000566][ T28] audit: type=1400 audit(1729572879.531:439): avc: denied { bind } for pid=1702 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.032507][ T1705] binder_alloc: 1704: pid 1704 spamming oneway? 1 buffers allocated for a total size of 4096 [ 98.122047][ T1710] loop4: detected capacity change from 0 to 1024 [ 98.131055][ T1710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.161405][ T1714] loop2: detected capacity change from 0 to 2048 [ 98.177745][ T1498] EXT4-fs (loop4): unmounting filesystem. [ 98.179730][ T1714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.207958][ T19] usb 4-1: device descriptor read/8, error -71 [ 98.225786][ T713] EXT4-fs (loop2): unmounting filesystem. [ 98.271015][ T1725] input: syz0 as /devices/virtual/input/input23 [ 98.286999][ T28] audit: type=1400 audit(1729572879.811:440): avc: denied { read } for pid=1726 comm="syz.4.424" name="file0" dev="incremental-fs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.309613][ T28] audit: type=1400 audit(1729572879.811:441): avc: denied { open } for pid=1726 comm="syz.4.424" path="/11/file0/file0" dev="incremental-fs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.322889][ T1730] binder: 1729:1730 ioctl c0306201 20000140 returned -14 [ 98.347449][ T28] audit: type=1400 audit(1729572879.811:442): avc: denied { write } for pid=1726 comm="syz.4.424" path="/file0" dev="incremental-fs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.487926][ T19] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 98.637929][ T370] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 98.667955][ T19] usb 4-1: device descriptor read/8, error -71 [ 98.937967][ T19] usb 4-1: device descriptor read/8, error -71 [ 98.967923][ T850] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 99.027948][ T370] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.037920][ T370] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.046686][ T370] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 99.057974][ T19] usb usb4-port1: unable to enumerate USB device [ 99.249759][ T370] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.259332][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.267221][ T370] usb 3-1: Product: syz [ 99.271391][ T370] usb 3-1: Manufacturer: ä Š [ 99.275838][ T370] usb 3-1: SerialNumber: syz [ 99.347973][ T850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.359918][ T850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.370958][ T1758] loop4: detected capacity change from 0 to 256 [ 99.408157][ T874] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.447999][ T850] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.456950][ T850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.471445][ T850] usb 2-1: SerialNumber: syz [ 99.748567][ T850] usb 2-1: 0:2 : does not exist [ 99.952653][ T1751] loop1: detected capacity change from 0 to 512 [ 99.964419][ T1751] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.434: corrupted in-inode xattr [ 99.976506][ T1751] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.434: couldn't read orphan inode 15 (err -117) [ 99.988445][ T1751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.997690][ T1751] EXT4-fs (loop1): unmounting filesystem. [ 100.229446][ T850] usb 2-1: USB disconnect, device number 14 [ 100.476279][ T28] audit: type=1400 audit(1729572882.001:443): avc: denied { watch } for pid=1766 comm="syz.4.439" path="/19/control" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.655417][ T1786] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 102.013537][ T1796] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 102.035252][ T1796] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 102.110426][ T1799] loop0: detected capacity change from 0 to 512 [ 102.131347][ T1799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.142916][ T1799] EXT4-fs (loop0): 1 truncate cleaned up [ 102.148574][ T1799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.224316][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 102.224334][ T28] audit: type=1400 audit(1729572883.751:445): avc: denied { ioctl } for pid=1798 comm="syz.0.448" path="/dev/rtc0" dev="devtmpfs" ino=171 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.358661][ T19] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 102.522282][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.597911][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 102.668039][ T370] usb 3-1: 0:2 : does not exist [ 102.676219][ T370] usb 3-1: USB disconnect, device number 12 [ 102.684120][ T731] udevd[731]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.718034][ T19] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 102.726145][ T19] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 102.736227][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 102.744917][ T19] usb 2-1: config 1 has no interface number 0 [ 102.750936][ T19] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.917938][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.926825][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.934621][ T19] usb 2-1: Product: syz [ 102.938606][ T19] usb 2-1: Manufacturer: syz [ 102.943021][ T19] usb 2-1: SerialNumber: syz [ 102.948626][ T1620] EXT4-fs (loop0): unmounting filesystem. [ 102.988283][ T19] cdc_wdm 2-1:1.128: skipping garbage [ 102.993474][ T19] cdc_wdm 2-1:1.128: skipping garbage [ 102.999685][ T19] cdc_wdm 2-1:1.128: invalid descriptor buffer length [ 103.006253][ T19] cdc_wdm: probe of 2-1:1.128 failed with error -22 [ 103.193713][ T19] usb 2-1: USB disconnect, device number 15 [ 103.238075][ T294] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 103.477970][ T294] usb 1-1: Using ep0 maxpacket: 8 [ 103.597994][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.607600][ T294] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 103.616423][ T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.625032][ T294] usb 1-1: config 0 descriptor?? [ 103.668578][ T294] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 104.010570][ T28] audit: type=1400 audit(1729572885.541:446): avc: denied { connect } for pid=1818 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.597891][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.631935][ T1825] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 104.678465][ T1827] loop4: detected capacity change from 0 to 512 [ 104.692711][ T1827] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 104.701113][ T1827] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.707575][ T1827] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.722540][ T1827] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 104.729404][ T1827] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.457: bg 0: block 40: padding at end of block bitmap is not set [ 104.743916][ T1827] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 104.752835][ T1827] EXT4-fs (loop4): 1 truncate cleaned up [ 104.758533][ T1827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.864449][ T1498] EXT4-fs (loop4): unmounting filesystem. [ 104.888159][ T1830] loop4: detected capacity change from 0 to 512 [ 104.908222][ T1830] ext4: Unknown parameter '"' [ 105.161183][ T1842] loop1: detected capacity change from 0 to 512 [ 105.167818][ T1842] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.178719][ T1842] EXT4-fs (loop1): 1 truncate cleaned up [ 105.184219][ T1842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.532720][ T1847] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.539598][ T1847] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.546793][ T1847] device bridge_slave_0 entered promiscuous mode [ 105.553915][ T1847] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.561196][ T1847] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.568568][ T1847] device bridge_slave_1 entered promiscuous mode [ 105.623996][ T1847] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.630859][ T1847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.637970][ T1847] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.644738][ T1847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.668854][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.676340][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.683869][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.694624][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.702666][ T850] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.709513][ T850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.719196][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.727244][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.734112][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.749626][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.757526][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.775244][ T1847] device veth0_vlan entered promiscuous mode [ 105.782130][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.790841][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.798672][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.805903][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.820021][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.828126][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.837317][ T1847] device veth1_macvtap entered promiscuous mode [ 105.846833][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.854358][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.862895][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.875425][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.883452][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.995537][ T1068] EXT4-fs (loop1): unmounting filesystem. [ 106.001845][ T1857] loop4: detected capacity change from 0 to 128 [ 106.009972][ T1857] ext4: Unknown parameter 'subj_type' [ 106.065097][ T294] usb 1-1: USB disconnect, device number 11 [ 106.079034][ T1862] binder: 1860:1862 ioctl c0306201 20000140 returned -14 [ 106.138968][ T10] device bridge_slave_1 left promiscuous mode [ 106.145583][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.163447][ T10] device bridge_slave_0 left promiscuous mode [ 106.175007][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.191005][ T10] device veth1_macvtap left promiscuous mode [ 106.200469][ T10] device veth0_vlan left promiscuous mode [ 106.417937][ T19] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 106.778062][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.795210][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.805321][ T19] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.814374][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.832495][ T19] usb 5-1: config 0 descriptor?? [ 106.870010][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.537957][ T19] usb 5-1: language id specifier not provided by device, defaulting to English [ 108.007980][ T19] uclogic 0003:256C:006D.0014: interface is invalid, ignoring [ 108.500052][ T334] usb 5-1: USB disconnect, device number 20 [ 108.557992][ T1879] loop1: detected capacity change from 0 to 512 [ 108.571992][ T1879] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 108.580497][ T1879] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.586859][ T1879] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 108.601501][ T1879] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 108.609832][ T1879] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.469: bg 0: block 40: padding at end of block bitmap is not set [ 108.623996][ T1879] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 108.634021][ T1879] EXT4-fs (loop1): 1 truncate cleaned up [ 108.639527][ T1879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.639663][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.655286][ T1876] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.662692][ T1876] device bridge_slave_0 entered promiscuous mode [ 108.672617][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.679477][ T1876] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.686645][ T1876] device bridge_slave_1 entered promiscuous mode [ 108.764651][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.771524][ T1876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.778617][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.785377][ T1876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.806152][ T1068] EXT4-fs (loop1): unmounting filesystem. [ 108.816197][ T1887] loop0: detected capacity change from 0 to 512 [ 108.823649][ T1887] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.841490][ T1887] EXT4-fs (loop0): 1 truncate cleaned up [ 108.844362][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.846944][ T1887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 108.862493][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.872451][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.880128][ T1893] input: syz0 as /devices/virtual/input/input24 [ 108.903628][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.911662][ T850] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.918504][ T850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.925599][ T561] Bluetooth: hci0: command 0x1003 tx timeout [ 108.925615][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.938034][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.946175][ T850] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.953042][ T850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.960319][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.968243][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.986663][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.997505][ T1876] device veth0_vlan entered promiscuous mode [ 109.003980][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.012104][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.020338][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.039104][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.048359][ T1876] device veth1_macvtap entered promiscuous mode [ 109.058609][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.071354][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.097415][ T1902] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 109.157972][ T19] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 109.168530][ T10] device bridge_slave_1 left promiscuous mode [ 109.174599][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.182314][ T10] device bridge_slave_0 left promiscuous mode [ 109.188757][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.199197][ T10] device veth1_macvtap left promiscuous mode [ 109.205108][ T10] device veth0_vlan left promiscuous mode [ 109.228301][ T334] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 109.518083][ T294] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 109.538015][ T19] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 109.607976][ T334] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping [ 109.616752][ T334] usb 2-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 109.626838][ T334] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.635523][ T334] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 109.708008][ T19] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 109.716942][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.724948][ T19] usb 1-1: Product: syz [ 109.729044][ T19] usb 1-1: Manufacturer: syz [ 109.733451][ T19] usb 1-1: SerialNumber: syz [ 109.738550][ T19] usb 1-1: config 0 descriptor?? [ 109.767992][ T294] usb 4-1: Using ep0 maxpacket: 16 [ 109.768041][ T1887] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.828084][ T334] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.837079][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.844965][ T334] usb 2-1: Product: syz [ 109.848898][ T334] usb 2-1: Manufacturer: ä Š [ 109.853305][ T334] usb 2-1: SerialNumber: syz [ 109.928010][ T294] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 110.009945][ T19] usb 1-1: USB disconnect, device number 12 [ 110.128300][ T294] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 110.137260][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.145004][ T294] usb 4-1: Product: syz [ 110.149003][ T294] usb 4-1: Manufacturer: syz [ 110.153387][ T294] usb 4-1: SerialNumber: syz [ 110.161911][ T294] usb 4-1: config 0 descriptor?? [ 110.198537][ T294] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 110.206513][ T294] usb 4-1: Detected FT232R [ 110.407992][ T294] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 110.511435][ T1620] EXT4-fs (loop0): unmounting filesystem. [ 110.523731][ T1927] loop2: detected capacity change from 0 to 512 [ 110.530421][ T1927] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.544900][ T1927] EXT4-fs (loop2): 1 truncate cleaned up [ 110.551553][ T1927] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.568897][ T1927] EXT4-fs (loop2): unmounting filesystem. [ 110.669367][ T294] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 110.872155][ T294] usb 4-1: USB disconnect, device number 20 [ 110.887136][ T294] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 110.906659][ T294] ftdi_sio 4-1:0.0: device disconnected [ 110.917966][ T19] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 111.297939][ T19] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 111.309178][ T19] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 111.320908][ T19] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 111.330141][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.368009][ T1940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.487308][ T1950] device batadv_slave_1 entered promiscuous mode [ 111.494476][ T1950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 111.503143][ T1950] device bridge_slave_1 left promiscuous mode [ 111.509063][ T1950] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.516378][ T1950] device bridge_slave_0 left promiscuous mode [ 111.523088][ T1950] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.602539][ T1949] device batadv_slave_1 left promiscuous mode [ 111.617350][ T1954] loop3: detected capacity change from 0 to 256 [ 111.637659][ T1956] syz.4.495[1956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.637731][ T1956] syz.4.495[1956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.757951][ T19] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 111.784637][ T19] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input25 [ 111.820939][ T19] usb 1-1: USB disconnect, device number 13 [ 111.837879][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 112.108031][ T1954] syz.3.493: attempt to access beyond end of device [ 112.108031][ T1954] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 112.417904][ T294] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 112.837945][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.857876][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.867433][ T294] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 112.876726][ T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.888192][ T294] usb 3-1: config 0 descriptor?? [ 113.046076][ T1983] loop3: detected capacity change from 0 to 512 [ 113.062856][ T1983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.071676][ T1983] ext4 filesystem being mounted at /9/bus supports timestamps until 2038 (0x7fffffff) [ 113.149834][ T1847] EXT4-fs (loop3): unmounting filesystem. [ 113.165554][ T1990] loop0: detected capacity change from 0 to 256 [ 113.429621][ T294] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 113.468002][ T334] usb 2-1: 0:2 : does not exist [ 113.484152][ T334] usb 2-1: USB disconnect, device number 16 [ 113.924997][ T1997] device batadv_slave_1 entered promiscuous mode [ 113.941621][ T1997] device bridge0 entered promiscuous mode [ 113.958360][ T1997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 113.977115][ T1997] device bridge_slave_1 left promiscuous mode [ 113.993273][ T1997] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.011409][ T1997] device bridge_slave_0 left promiscuous mode [ 114.017492][ T1997] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.039417][ T1997] device bridge0 left promiscuous mode [ 114.133320][ T1996] device batadv_slave_1 left promiscuous mode [ 114.171552][ T2004] loop0: detected capacity change from 0 to 512 [ 114.180354][ T2004] EXT4-fs (loop0): 1 truncate cleaned up [ 114.185818][ T2004] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.287971][ T294] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 114.295353][ T294] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 114.302955][ T294] pyra: probe of 0003:1E7D:2CF6.0015 failed with error -71 [ 114.319867][ T294] usb 3-1: USB disconnect, device number 13 [ 114.336105][ T874] udevd[874]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.994171][ T2017] loop2: detected capacity change from 0 to 256 [ 115.061158][ T2017] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 115.208873][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 115.225816][ T1620] EXT4-fs (loop0): unmounting filesystem. [ 115.477942][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 115.792068][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.803199][ T24] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 115.812241][ T28] audit: type=1326 audit(1729572897.341:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff577dff9 code=0x7ffc0000 [ 115.857877][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.865681][ T2037] loop0: detected capacity change from 0 to 4096 [ 115.866401][ T24] usb 5-1: config 0 descriptor?? [ 115.873096][ T28] audit: type=1326 audit(1729572897.341:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff577dff9 code=0x7ffc0000 [ 115.915440][ T28] audit: type=1326 audit(1729572897.341:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3ff577dff9 code=0x7ffc0000 [ 115.918487][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 115.938652][ T28] audit: type=1326 audit(1729572897.341:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff577dff9 code=0x7ffc0000 [ 115.968699][ T28] audit: type=1326 audit(1729572897.341:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff577dff9 code=0x7ffc0000 [ 115.979393][ T2037] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.992089][ T28] audit: type=1326 audit(1729572897.341:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff577dff9 code=0x7ffc0000 [ 116.023491][ T28] audit: type=1326 audit(1729572897.341:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff577dff9 code=0x7ffc0000 [ 116.046624][ T28] audit: type=1326 audit(1729572897.341:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff577dff9 code=0x7ffc0000 [ 116.069878][ T28] audit: type=1326 audit(1729572897.341:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff577dff9 code=0x7ffc0000 [ 116.093093][ T28] audit: type=1326 audit(1729572897.341:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff577dff9 code=0x7ffc0000 [ 116.119217][ T1620] EXT4-fs (loop0): unmounting filesystem. [ 116.359725][ T2050] loop2: detected capacity change from 0 to 512 [ 116.366222][ T2050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.377139][ T2050] EXT4-fs (loop2): 1 truncate cleaned up [ 116.382665][ T2050] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 116.407928][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 116.547996][ T334] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 116.647924][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 116.657919][ T850] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 116.767955][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 116.807894][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 116.928280][ T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 116.937228][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.945152][ T24] usb 1-1: Product: syz [ 116.949139][ T24] usb 1-1: Manufacturer: syz [ 116.953542][ T24] usb 1-1: SerialNumber: syz [ 116.958738][ T24] usb 1-1: config 0 descriptor?? [ 116.963741][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 116.974754][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 116.985666][ T334] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 116.994489][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.998776][ T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 117.003688][ T334] usb 4-1: config 0 descriptor?? [ 117.014665][ T24] usb 1-1: Detected FT232R [ 117.019013][ T850] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 117.037989][ T2047] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 117.068606][ T334] hub 4-1:0.0: USB hub found [ 117.187952][ T850] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 117.196876][ T850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.205321][ T850] usb 3-1: Product: syz [ 117.209398][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 117.215925][ T850] usb 3-1: Manufacturer: syz [ 117.220363][ T850] usb 3-1: SerialNumber: syz [ 117.225319][ T850] usb 3-1: config 0 descriptor?? [ 117.248013][ T2050] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 117.287950][ T334] hub 4-1:0.0: 2 ports detected [ 117.469952][ T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.490818][ T850] usb 3-1: USB disconnect, device number 14 [ 117.672418][ T315] usb 1-1: USB disconnect, device number 14 [ 117.679447][ T315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.688896][ T315] ftdi_sio 1-1:0.0: device disconnected [ 117.698579][ T933] udevd[933]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 117.817954][ T334] hub 4-1:0.0: set hub depth failed [ 117.859078][ T334] usb 4-1: USB disconnect, device number 21 [ 117.919641][ T315] usb 5-1: USB disconnect, device number 21 [ 117.994904][ T1876] EXT4-fs (loop2): unmounting filesystem. [ 118.787908][ T315] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 118.957889][ T19] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 119.116011][ T2074] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.131996][ T2074] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.139825][ T2074] device bridge_slave_0 entered promiscuous mode [ 119.147665][ T2074] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.163184][ T2074] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.176410][ T2074] device bridge_slave_1 entered promiscuous mode [ 119.187983][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.209314][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.239410][ T315] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 119.266880][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.291143][ T315] usb 4-1: config 0 descriptor?? [ 119.328672][ T2074] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.335686][ T2074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.342794][ T2074] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.349565][ T2074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.360237][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.380640][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.389107][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.401854][ T850] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.408682][ T19] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 119.408714][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.453227][ T19] usb 1-1: config 0 descriptor?? [ 119.498134][ T850] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.515837][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.524105][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.530972][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.538313][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.546315][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.553188][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.590170][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.600536][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.628966][ T2083] loop4: detected capacity change from 0 to 256 [ 119.667345][ T2083] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 119.878989][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.896613][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.904799][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.912150][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.920274][ T2074] device veth0_vlan entered promiscuous mode [ 119.932816][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.942760][ T2074] device veth1_macvtap entered promiscuous mode [ 119.954032][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.970046][ T2069] loop0: detected capacity change from 0 to 256 [ 119.991458][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.991963][ T2069] FAT-fs (loop0): Directory bread(block 64) failed [ 120.006189][ T2069] FAT-fs (loop0): Directory bread(block 65) failed [ 120.012926][ T2069] FAT-fs (loop0): Directory bread(block 66) failed [ 120.019640][ T2069] FAT-fs (loop0): Directory bread(block 67) failed [ 120.026261][ T2069] FAT-fs (loop0): Directory bread(block 68) failed [ 120.032842][ T2069] FAT-fs (loop0): Directory bread(block 69) failed [ 120.033237][ T358] device bridge_slave_1 left promiscuous mode [ 120.039700][ T2069] FAT-fs (loop0): Directory bread(block 70) failed [ 120.052706][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.069128][ T358] device bridge_slave_0 left promiscuous mode [ 120.070541][ T2069] FAT-fs (loop0): Directory bread(block 71) failed [ 120.080199][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.081939][ T2069] FAT-fs (loop0): Directory bread(block 72) failed [ 120.095621][ T2069] FAT-fs (loop0): Directory bread(block 73) failed [ 120.102767][ T358] device veth1_macvtap left promiscuous mode [ 120.108747][ T315] usb 4-1: string descriptor 0 read error: -22 [ 120.118109][ T358] device veth0_vlan left promiscuous mode [ 120.188397][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 120.195309][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 120.211765][ T19] usb 1-1: USB disconnect, device number 15 [ 120.338588][ T2093] input: syz0 as /devices/virtual/input/input26 [ 120.369305][ T315] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0016/input/input27 [ 120.388188][ T315] uclogic 0003:256C:006D.0016: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 120.574467][ T19] usb 4-1: USB disconnect, device number 22 [ 120.678660][ T315] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 120.827605][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 120.827621][ T28] audit: type=1326 audit(1729572902.351:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10cbd7c990 code=0x7ffc0000 [ 120.883233][ T28] audit: type=1326 audit(1729572902.391:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f10cbd7f827 code=0x7ffc0000 [ 120.934160][ T28] audit: type=1326 audit(1729572902.391:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10cbd7dff9 code=0x7ffc0000 [ 120.982733][ T28] audit: type=1326 audit(1729572902.391:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f10cbd7f827 code=0x7ffc0000 [ 121.016237][ T28] audit: type=1326 audit(1729572902.391:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f10cbd7cc8a code=0x7ffc0000 [ 121.047726][ T28] audit: type=1326 audit(1729572902.391:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cbd7dff9 code=0x7ffc0000 [ 121.106792][ T28] audit: type=1326 audit(1729572902.391:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cbd7dff9 code=0x7ffc0000 [ 121.148894][ T28] audit: type=1326 audit(1729572902.391:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10cbd7dff9 code=0x7ffc0000 [ 121.178764][ T315] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping [ 121.194186][ T315] usb 2-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 121.197907][ T28] audit: type=1326 audit(1729572902.391:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cbd7dff9 code=0x7ffc0000 [ 121.214661][ T315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.260407][ T315] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 121.264751][ T28] audit: type=1326 audit(1729572902.391:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cbd7dff9 code=0x7ffc0000 [ 121.445708][ T2126] loop3: detected capacity change from 0 to 1024 [ 121.452351][ T294] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 121.460109][ T315] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.469125][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.477042][ T315] usb 2-1: Product: syz [ 121.489137][ T315] usb 2-1: Manufacturer: ä Š [ 121.493649][ T315] usb 2-1: SerialNumber: syz [ 121.498833][ T2126] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 121.512286][ T2126] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.535270][ T2126] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.548: bg 0: block 10: padding at end of block bitmap is not set [ 121.572597][ T2126] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.548: Failed to acquire dquot type 0 [ 121.593496][ T2126] EXT4-fs error (device loop3): ext4_free_blocks:6213: comm syz.3.548: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.607494][ T2126] EXT4-fs (loop3): 1 truncate cleaned up [ 121.613531][ T2126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.649566][ T2126] EXT4-fs error (device loop3): __ext4_remount:6412: comm syz.3.548: Abort forced by user [ 121.664515][ T2126] syz.3.548 (2126) used greatest stack depth: 19080 bytes left [ 121.672403][ T1847] EXT4-fs (loop3): unmounting filesystem. [ 121.704704][ T2129] loop0: detected capacity change from 0 to 512 [ 121.721092][ T2129] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.550: bg 0: block 393: padding at end of block bitmap is not set [ 121.735410][ T2129] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 121.743980][ T294] usb 3-1: Using ep0 maxpacket: 8 [ 121.744378][ T2129] EXT4-fs (loop0): 2 truncates cleaned up [ 121.755040][ T2129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.862791][ T1620] EXT4-fs (loop0): unmounting filesystem. [ 121.888192][ T294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.898231][ T294] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 121.997995][ T294] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 122.013660][ T294] usb 3-1: New USB device strings: Mfr=0, Product=242, SerialNumber=0 [ 122.021775][ T294] usb 3-1: Product: syz [ 122.048212][ T294] usb 3-1: config 0 descriptor?? [ 122.332338][ T370] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 122.587946][ T370] usb 5-1: Using ep0 maxpacket: 16 [ 122.599113][ T294] usb 3-1: USB disconnect, device number 15 [ 122.707981][ T370] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 122.868005][ T370] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 122.876928][ T370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.884741][ T370] usb 5-1: Product: syz [ 122.888697][ T370] usb 5-1: Manufacturer: syz [ 122.893101][ T370] usb 5-1: SerialNumber: syz [ 122.898171][ T370] usb 5-1: config 0 descriptor?? [ 122.938512][ T370] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 122.946050][ T370] usb 5-1: Detected FT232R [ 123.147967][ T370] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 123.235913][ T2159] loop2: detected capacity change from 0 to 256 [ 123.514362][ T370] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 123.612687][ T370] usb 5-1: USB disconnect, device number 22 [ 123.623554][ T370] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 123.634408][ T370] ftdi_sio 5-1:0.0: device disconnected [ 123.677967][ T294] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 124.157911][ T294] usb 4-1: Using ep0 maxpacket: 8 [ 124.287971][ T294] usb 4-1: config 0 has no interfaces? [ 124.478022][ T294] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 124.487048][ T294] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 124.495738][ T294] usb 4-1: Product: syz [ 124.500095][ T294] usb 4-1: Manufacturer: syz [ 124.506085][ T294] usb 4-1: SerialNumber: syz [ 124.511613][ T294] usb 4-1: config 0 descriptor?? [ 124.817973][ T820] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 124.826774][ T294] usb 4-1: USB disconnect, device number 23 [ 124.927988][ T315] usb 2-1: 0:2 : does not exist [ 124.934702][ T315] usb 2-1: USB disconnect, device number 17 [ 125.178350][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.189098][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.198643][ T820] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 125.207453][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.215869][ T820] usb 1-1: config 0 descriptor?? [ 125.343379][ T2183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 125.608412][ T2193] netlink: 64 bytes leftover after parsing attributes in process `syz.3.565'. [ 125.917895][ T315] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 126.017955][ T820] usb 1-1: string descriptor 0 read error: -71 [ 126.038093][ T820] uclogic 0003:5543:006E.0017: failed retrieving string descriptor #200: -71 [ 126.046702][ T820] uclogic 0003:5543:006E.0017: failed retrieving pen parameters: -71 [ 126.055117][ T820] uclogic 0003:5543:006E.0017: failed probing pen v2 parameters: -71 [ 126.063065][ T820] uclogic 0003:5543:006E.0017: failed probing parameters: -71 [ 126.070373][ T820] uclogic: probe of 0003:5543:006E.0017 failed with error -71 [ 126.078684][ T820] usb 1-1: USB disconnect, device number 16 [ 126.217905][ T315] usb 5-1: device descriptor read/64, error -71 [ 126.330493][ T2199] loop2: detected capacity change from 0 to 512 [ 126.351932][ T2199] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.569: bad orphan inode 17 [ 126.362617][ T2199] ext4_test_bit(bit=16, block=4) = 1 [ 126.367736][ T2199] is_bad_inode(inode)=0 [ 126.371772][ T2199] NEXT_ORPHAN(inode)=0 [ 126.375689][ T2199] max_ino=32 [ 126.378678][ T2199] i_nlink=1 [ 126.381896][ T2199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.392955][ T2199] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.569: bg 0: block 7: invalid block bitmap [ 126.406006][ T2199] syz.2.569[2199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.406059][ T2199] syz.2.569[2199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.857972][ T370] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 127.157186][ T370] usb 3-1: Using ep0 maxpacket: 16 [ 127.217930][ T315] usb 5-1: device descriptor read/64, error -71 [ 127.277975][ T370] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 127.437991][ T370] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 127.446848][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.454677][ T370] usb 3-1: Product: syz [ 127.458657][ T370] usb 3-1: Manufacturer: syz [ 127.463238][ T370] usb 3-1: SerialNumber: syz [ 127.468625][ T370] usb 3-1: config 0 descriptor?? [ 127.497912][ T315] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 127.508581][ T370] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 127.516138][ T370] usb 3-1: Detected FT232R [ 127.717961][ T370] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 127.778000][ T315] usb 5-1: device descriptor read/64, error -71 [ 127.977988][ T370] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 127.985090][ T370] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 128.177939][ T315] usb 5-1: device descriptor read/64, error -71 [ 128.186610][ T19] usb 3-1: USB disconnect, device number 16 [ 128.193858][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 128.203215][ T19] ftdi_sio 3-1:0.0: device disconnected [ 128.298182][ T315] usb usb5-port1: attempt power cycle [ 128.698950][ T1876] EXT4-fs (loop2): unmounting filesystem. [ 128.708748][ T315] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 128.877948][ T315] usb 5-1: device descriptor read/8, error -71 [ 129.197948][ T315] usb 5-1: device descriptor read/8, error -71 [ 129.477915][ T315] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 129.647989][ T315] usb 5-1: device descriptor read/8, error -71 [ 129.967958][ T315] usb 5-1: device descriptor read/8, error -71 [ 130.087967][ T315] usb usb5-port1: unable to enumerate USB device [ 130.480885][ T2215] loop2: detected capacity change from 0 to 512 [ 130.546480][ T2215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.570640][ T2215] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 130.644074][ T2215] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #19: comm syz.2.582: corrupted inode contents [ 130.658787][ T2215] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #19: comm syz.2.582: mark_inode_dirty error [ 130.679742][ T2220] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.681238][ T2215] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #19: comm syz.2.582: corrupted inode contents [ 130.700058][ T2220] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.700404][ T2215] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2955: inode #19: comm syz.2.582: mark_inode_dirty error [ 130.713753][ T2220] device bridge_slave_0 entered promiscuous mode [ 130.723798][ T2215] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2958: inode #19: comm syz.2.582: mark inode dirty (error -117) [ 130.737161][ T2215] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 130.747094][ T2220] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.754143][ T2220] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.761507][ T2220] device bridge_slave_1 entered promiscuous mode [ 130.769497][ T1876] EXT4-fs (loop2): unmounting filesystem. [ 130.863532][ T2220] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.870422][ T2220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.877637][ T2220] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.884491][ T2220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.915654][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.924876][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.932684][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.955021][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.963409][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.970266][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.977419][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.985341][ T294] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 130.993393][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.000255][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.007393][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.023867][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.032919][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.045302][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.053404][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.060700][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.071473][ T2220] device veth0_vlan entered promiscuous mode [ 131.082253][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.091423][ T2220] device veth1_macvtap entered promiscuous mode [ 131.103475][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.115151][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.198606][ T358] device bridge_slave_1 left promiscuous mode [ 131.204651][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.212072][ T358] device bridge_slave_0 left promiscuous mode [ 131.218102][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.225810][ T358] device veth1_macvtap left promiscuous mode [ 131.231970][ T358] device veth0_vlan left promiscuous mode [ 131.247928][ T294] usb 1-1: Using ep0 maxpacket: 32 [ 131.387966][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 131.399036][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 131.407905][ T370] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 131.410379][ T294] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 131.426344][ T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.434774][ T294] usb 1-1: config 0 descriptor?? [ 131.457996][ T2225] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.488654][ T294] hub 1-1:0.0: USB hub found [ 131.566829][ T2237] loop2: detected capacity change from 0 to 1024 [ 131.580103][ T2237] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 131.588893][ T2237] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.595806][ T2237] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.576: bg 0: block 10: padding at end of block bitmap is not set [ 131.610477][ T2237] __quota_error: 24 callbacks suppressed [ 131.610492][ T2237] Quota error (device loop2): write_blk: dquota write failed [ 131.623441][ T2237] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 131.632498][ T2237] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 131.642354][ T2237] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.576: Failed to acquire dquot type 0 [ 131.647887][ T370] usb 2-1: Using ep0 maxpacket: 16 [ 131.653735][ T2237] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.576: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.671473][ T2237] EXT4-fs (loop2): 1 truncate cleaned up [ 131.677094][ T2237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.693195][ T2237] EXT4-fs error (device loop2): __ext4_remount:6412: comm syz.2.576: Abort forced by user [ 131.707453][ T1876] EXT4-fs (loop2): unmounting filesystem. [ 131.717979][ T294] hub 1-1:0.0: 2 ports detected [ 131.777953][ T370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 131.947939][ T370] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 131.956907][ T370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.964691][ T370] usb 2-1: Product: syz [ 131.968699][ T370] usb 2-1: Manufacturer: syz [ 131.973049][ T370] usb 2-1: SerialNumber: syz [ 131.978116][ T370] usb 2-1: config 0 descriptor?? [ 132.018513][ T370] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 132.026096][ T370] usb 2-1: Detected FT232R [ 132.227935][ T370] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 132.247952][ T294] hub 1-1:0.0: set hub depth failed [ 132.289042][ T294] usb 1-1: USB disconnect, device number 17 [ 132.490728][ T370] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 132.841680][ T315] usb 2-1: USB disconnect, device number 18 [ 132.848609][ T315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 132.858385][ T315] ftdi_sio 2-1:0.0: device disconnected [ 133.030939][ T2255] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.347942][ T315] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 133.490125][ T2264] loop3: detected capacity change from 0 to 128 [ 133.498596][ T2264] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.507043][ T2264] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 133.546671][ T1847] EXT4-fs (loop3): unmounting filesystem. [ 133.562777][ T2268] loop1: detected capacity change from 0 to 512 [ 133.600616][ T2268] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.609403][ T2268] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 133.683271][ T2220] EXT4-fs (loop1): unmounting filesystem. [ 133.738052][ T315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.748156][ T315] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.758833][ T315] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.137948][ T334] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 134.187982][ T315] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.197044][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.204769][ T315] usb 1-1: Product: syz [ 134.208752][ T315] usb 1-1: Manufacturer: syz [ 134.213151][ T315] usb 1-1: SerialNumber: syz [ 134.268425][ T315] usb 1-1: selecting invalid altsetting 1 [ 134.397902][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 134.528091][ T334] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 134.536857][ T315] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 134.542743][ T315] cdc_ncm 1-1:1.0: bind() failure [ 134.549333][ T315] usb 1-1: USB disconnect, device number 18 [ 134.707962][ T334] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 134.716806][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.724713][ T334] usb 3-1: Product: syz [ 134.728711][ T334] usb 3-1: Manufacturer: syz [ 134.733130][ T334] usb 3-1: SerialNumber: syz [ 134.738217][ T334] usb 3-1: config 0 descriptor?? [ 134.798576][ T334] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 134.806186][ T334] usb 3-1: Detected FT232R [ 135.007950][ T334] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 135.279163][ T334] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.482021][ T370] usb 3-1: USB disconnect, device number 17 [ 135.496987][ T370] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.517679][ T370] ftdi_sio 3-1:0.0: device disconnected [ 135.598680][ T2294] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.605572][ T2294] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.612881][ T2294] device bridge_slave_0 entered promiscuous mode [ 135.623764][ T2294] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.630746][ T2294] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.638006][ T2294] device bridge_slave_1 entered promiscuous mode [ 135.691813][ T2294] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.698672][ T2294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.705736][ T2294] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.712574][ T2294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.736305][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.743812][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.751116][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.760203][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.768779][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.775638][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.799193][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.807253][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.815343][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.822196][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.829605][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.837356][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.850566][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.858534][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.865785][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.874426][ T2294] device veth0_vlan entered promiscuous mode [ 135.893904][ T2294] device veth1_macvtap entered promiscuous mode [ 135.905548][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.933119][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.949769][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.004657][ T2307] loop4: detected capacity change from 0 to 1024 [ 136.044954][ T2307] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 136.064301][ T2307] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.079383][ T2307] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.592: bg 0: block 10: padding at end of block bitmap is not set [ 136.099763][ T2307] Quota error (device loop4): write_blk: dquota write failed [ 136.099877][ T2316] loop1: detected capacity change from 0 to 512 [ 136.107674][ T2307] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 136.122556][ T2307] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 136.132989][ T2307] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.592: Failed to acquire dquot type 0 [ 136.144931][ T320] device veth1_macvtap left promiscuous mode [ 136.151310][ T2307] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.592: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.157086][ T320] device veth0_vlan left promiscuous mode [ 136.170367][ T2307] EXT4-fs (loop4): 1 truncate cleaned up [ 136.176140][ T2307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.210175][ T2307] EXT4-fs error (device loop4): __ext4_remount:6412: comm syz.4.592: Abort forced by user [ 136.222200][ T2316] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.233378][ T2316] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 136.243996][ T2294] EXT4-fs (loop4): unmounting filesystem. [ 136.254052][ T2307] syz.4.592 (2307) used greatest stack depth: 18840 bytes left [ 136.300132][ T2329] loop4: detected capacity change from 0 to 512 [ 136.338323][ T2316] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #19: comm syz.1.596: corrupted inode contents [ 136.351235][ T2329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.367735][ T2329] ext4 filesystem being mounted at /1/bus supports timestamps until 2038 (0x7fffffff) [ 136.378095][ T2316] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #19: comm syz.1.596: mark_inode_dirty error [ 136.381597][ T2333] device pim6reg1 entered promiscuous mode [ 136.405059][ T2316] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #19: comm syz.1.596: corrupted inode contents [ 136.417306][ T2316] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #19: comm syz.1.596: mark_inode_dirty error [ 136.432534][ T2316] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2958: inode #19: comm syz.1.596: mark inode dirty (error -117) [ 136.445504][ T2316] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 136.447826][ T2294] EXT4-fs (loop4): unmounting filesystem. [ 136.477361][ T2220] EXT4-fs (loop1): unmounting filesystem. [ 136.527929][ T370] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 136.619393][ T2340] syz.1.602[2340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.619466][ T2340] syz.1.602[2340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.767951][ T370] usb 3-1: Using ep0 maxpacket: 16 [ 136.897968][ T370] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 137.057976][ T370] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 137.067031][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.083382][ T370] usb 3-1: Product: syz [ 137.091244][ T370] usb 3-1: Manufacturer: syz [ 137.095658][ T370] usb 3-1: SerialNumber: syz [ 137.109417][ T370] usb 3-1: config 0 descriptor?? [ 137.158951][ T370] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 137.170245][ T370] usb 3-1: Detected FT232R [ 137.238002][ T294] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 137.367941][ T370] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 137.629071][ T370] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 137.637967][ T294] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.647957][ T294] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.658735][ T294] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.832099][ T19] usb 3-1: USB disconnect, device number 18 [ 137.842368][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 137.851671][ T294] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.868348][ T19] ftdi_sio 3-1:0.0: device disconnected [ 137.874290][ T294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.892340][ T294] usb 2-1: Product: syz [ 137.896322][ T294] usb 2-1: Manufacturer: syz [ 137.907337][ T294] usb 2-1: SerialNumber: syz [ 137.948401][ T294] usb 2-1: selecting invalid altsetting 1 [ 138.123509][ T2370] 9pnet_fd: Insufficient options for proto=fd [ 138.188173][ T294] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 138.194137][ T294] cdc_ncm 2-1:1.0: bind() failure [ 138.199034][ T315] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 138.208988][ T294] usb 2-1: USB disconnect, device number 19 [ 138.497919][ T315] usb 1-1: device descriptor read/64, error -71 [ 138.917922][ T315] usb 1-1: device descriptor read/64, error -71 [ 139.187923][ T315] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 139.457935][ T315] usb 1-1: device descriptor read/64, error -71 [ 139.847908][ T315] usb 1-1: device descriptor read/64, error -71 [ 139.967973][ T315] usb usb1-port1: attempt power cycle [ 140.377917][ T315] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 140.547943][ T315] usb 1-1: device descriptor read/8, error -71 [ 140.817935][ T315] usb 1-1: device descriptor read/8, error -71 [ 141.087917][ T315] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 141.257955][ T315] usb 1-1: device descriptor read/8, error -71 [ 141.527945][ T315] usb 1-1: device descriptor read/8, error -71 [ 141.647987][ T315] usb usb1-port1: unable to enumerate USB device [ 148.011991][ T2392] loop2: detected capacity change from 0 to 2048 [ 148.044934][ T2392] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.059064][ T2401] syz.4.617[2401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.059154][ T2401] syz.4.617[2401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.086939][ T2392] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 148.124123][ T2392] System zones: 0-19 [ 148.137507][ T2392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.292823][ T2408] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.306667][ T2408] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.314416][ T2408] device bridge_slave_0 entered promiscuous mode [ 148.323645][ T2408] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.331230][ T2408] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.340908][ T2408] device bridge_slave_1 entered promiscuous mode [ 148.459927][ T2408] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.466790][ T2408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.474007][ T2408] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.480782][ T2408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.507915][ T315] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 148.517882][ T850] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 148.555483][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.571579][ T1255] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.578844][ T1255] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.589465][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.597470][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.604327][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.611464][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.619528][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.626368][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.645118][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.664101][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.693852][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.715930][ T2408] device veth0_vlan entered promiscuous mode [ 148.722879][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.737263][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.745085][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.752285][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 148.759215][ T358] device veth1_macvtap left promiscuous mode [ 148.765082][ T358] device veth0_vlan left promiscuous mode [ 148.787889][ T850] usb 5-1: Using ep0 maxpacket: 32 [ 148.857375][ T2432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.622'. [ 148.868206][ T315] usb 3-1: config 0 has no interfaces? [ 148.873674][ T2433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.622'. [ 148.888641][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.898387][ T2408] device veth1_macvtap entered promiscuous mode [ 148.907982][ T850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 148.919525][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.934648][ T850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 148.951619][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.956728][ T850] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 148.978108][ T850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.005412][ T850] usb 5-1: config 0 descriptor?? [ 149.016774][ T2438] loop0: detected capacity change from 0 to 1024 [ 149.037905][ T2415] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 149.037923][ T315] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 149.058387][ T850] hub 5-1:0.0: USB hub found [ 149.074099][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.082385][ T2438] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 149.091432][ T2438] EXT4-fs (loop0): orphan cleanup on readonly fs [ 149.100519][ T315] usb 3-1: Product: syz [ 149.110701][ T2438] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.612: bg 0: block 10: padding at end of block bitmap is not set [ 149.124695][ T315] usb 3-1: Manufacturer: syz [ 149.133966][ T315] usb 3-1: SerialNumber: syz [ 149.137965][ T2438] Quota error (device loop0): write_blk: dquota write failed [ 149.139616][ T315] usb 3-1: config 0 descriptor?? [ 149.159235][ T2438] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 149.175178][ T2438] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 149.185344][ T2438] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.612: Failed to acquire dquot type 0 [ 149.197665][ T2438] EXT4-fs error (device loop0): ext4_free_blocks:6213: comm syz.0.612: Freeing blocks not in datazone - block = 0, count = 4096 [ 149.211894][ T2438] EXT4-fs (loop0): 1 truncate cleaned up [ 149.217666][ T2438] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.234270][ T2438] EXT4-fs error (device loop0): __ext4_remount:6412: comm syz.0.612: Abort forced by user [ 149.251200][ T2408] EXT4-fs (loop0): unmounting filesystem. [ 149.255264][ T2435] loop1: detected capacity change from 0 to 40427 [ 149.267931][ T850] hub 5-1:0.0: 2 ports detected [ 149.278624][ T2435] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 149.286174][ T2435] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 149.300648][ T2435] F2FS-fs (loop1): invalid crc value [ 149.307330][ T2441] device pim6reg1 entered promiscuous mode [ 149.318647][ T2435] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.355889][ T2435] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 149.369708][ T2435] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 149.379389][ T2435] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 149.938172][ T850] hub 5-1:0.0: set hub depth failed [ 150.005538][ T850] usb 5-1: USB disconnect, device number 27 [ 150.837268][ T2220] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 150.837291][ T2220] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 150.846467][ T2220] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 150.854011][ T2220] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 150.861531][ T2220] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 150.870032][ T2220] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 150.877444][ T2220] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 150.885673][ T28] audit: type=1400 audit(1729572932.421:535): avc: denied { unmount } for pid=2220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 150.918676][ T2460] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 150.934724][ T358] Trying to write to read-only block-device loop1 [ 150.957146][ T2465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.633'. [ 150.994902][ T2467] netlink: 'syz.4.634': attribute type 4 has an invalid length. [ 151.010306][ T28] audit: type=1400 audit(1729572932.541:536): avc: denied { getopt } for pid=2468 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.012547][ T1876] EXT4-fs (loop2): unmounting filesystem. [ 151.033780][ T315] usb 3-1: USB disconnect, device number 19 [ 151.051129][ T28] audit: type=1400 audit(1729572932.581:537): avc: denied { ioctl } for pid=2468 comm="syz.0.635" path="socket:[30190]" dev="sockfs" ino=30190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.515822][ T2496] loop1: detected capacity change from 0 to 2048 [ 151.543753][ T2496] EXT4-fs: Ignoring removed orlov option [ 151.556183][ T2496] /dev/loop1: Can't open blockdev [ 151.700713][ T2479] loop0: detected capacity change from 0 to 40427 [ 151.733884][ T2479] F2FS-fs (loop0): invalid crc value [ 151.752408][ T2479] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.817877][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 151.831338][ T2479] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 152.040929][ T2479] syz.0.638: attempt to access beyond end of device [ 152.040929][ T2479] loop0: rw=1, sector=53248, nr_sectors = 440 limit=40427 [ 152.087907][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 152.237993][ T24] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 152.246002][ T24] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 152.263293][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.272183][ T24] usb 4-1: config 1 has no interface number 0 [ 152.278161][ T24] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.278767][ T2408] syz-executor: attempt to access beyond end of device [ 152.278767][ T2408] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.333317][ T2524] loop4: detected capacity change from 0 to 256 [ 152.357792][ T2524] FAT-fs (loop4): Directory bread(block 64) failed [ 152.364442][ T2524] FAT-fs (loop4): Directory bread(block 65) failed [ 152.371488][ T2524] FAT-fs (loop4): Directory bread(block 66) failed [ 152.380342][ T2524] FAT-fs (loop4): Directory bread(block 67) failed [ 152.386813][ T2524] FAT-fs (loop4): Directory bread(block 68) failed [ 152.393388][ T2524] FAT-fs (loop4): Directory bread(block 69) failed [ 152.399892][ T2524] FAT-fs (loop4): Directory bread(block 70) failed [ 152.406252][ T2524] FAT-fs (loop4): Directory bread(block 71) failed [ 152.412748][ T2524] FAT-fs (loop4): Directory bread(block 72) failed [ 152.419210][ T2524] FAT-fs (loop4): Directory bread(block 73) failed [ 152.499679][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.519133][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.532845][ T24] usb 4-1: Product: syz [ 152.536831][ T24] usb 4-1: Manufacturer: syz [ 152.542025][ T24] usb 4-1: SerialNumber: syz [ 152.590066][ T24] cdc_wdm 4-1:1.128: skipping garbage [ 152.595340][ T24] cdc_wdm 4-1:1.128: invalid descriptor buffer length [ 152.812632][ T24] cdc_wdm: probe of 4-1:1.128 failed with error -22 [ 152.979281][ T24] usb 4-1: USB disconnect, device number 24 [ 153.258187][ T28] audit: type=1400 audit(1729572934.791:538): avc: denied { map } for pid=2544 comm="syz.2.656" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.297918][ T28] audit: type=1400 audit(1729572934.821:539): avc: denied { write } for pid=2544 comm="syz.2.656" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.391132][ T28] audit: type=1326 audit(1729572934.861:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2546 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bd77dff9 code=0x7ffc0000 [ 153.446138][ T28] audit: type=1326 audit(1729572934.871:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2546 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bd77dff9 code=0x7ffc0000 [ 153.691228][ T2557] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.698274][ T2557] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.760240][ T562] Bluetooth: hci0: sending frame failed (-49) [ 153.761445][ T2557] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.773060][ T2557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.780174][ T2557] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.787007][ T2557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.794794][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 153.796133][ T2557] device bridge0 entered promiscuous mode [ 153.806402][ T562] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 154.214874][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 154.221193][ T28] audit: type=1400 audit(1729572935.741:554): avc: denied { ioctl } for pid=2564 comm="syz.0.662" path="socket:[30822]" dev="sockfs" ino=30822 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.505952][ T2570] loop0: detected capacity change from 0 to 512 [ 154.532582][ T28] audit: type=1400 audit(1729572936.061:555): avc: denied { map } for pid=2571 comm="syz.1.675" path="socket:[30848]" dev="sockfs" ino=30848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 154.578168][ T2572] syz.1.675[2572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.578241][ T2572] syz.1.675[2572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.589718][ T2570] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.634293][ T2570] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 154.658571][ T2570] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 154.686643][ T2570] System zones: 0-2, 18-18, 34-34 [ 154.696353][ T2570] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 154.718248][ T2570] EXT4-fs (loop0): 1 truncate cleaned up [ 154.727328][ T28] audit: type=1400 audit(1729572936.251:556): avc: denied { write } for pid=2579 comm="syz.1.667" path="socket:[30867]" dev="sockfs" ino=30867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.762638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.773194][ T2570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 154.845448][ T2563] loop3: detected capacity change from 0 to 40427 [ 154.871005][ T2408] EXT4-fs (loop0): unmounting filesystem. [ 154.877478][ T2563] F2FS-fs (loop3): invalid crc value [ 154.884917][ T2563] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.040389][ T2563] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 155.169099][ T2563] syz.3.661: attempt to access beyond end of device [ 155.169099][ T2563] loop3: rw=1, sector=53248, nr_sectors = 184 limit=40427 [ 155.528750][ T1847] syz-executor: attempt to access beyond end of device [ 155.528750][ T1847] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.639417][ T2614] loop1: detected capacity change from 0 to 256 [ 155.896269][ T2537] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.934472][ T28] audit: type=1400 audit(1729572937.461:557): avc: denied { write } for pid=2615 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 156.035017][ T2625] loop0: detected capacity change from 0 to 2048 [ 156.049835][ T2625] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.075520][ T2632] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 156.083531][ T2632] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 156.098963][ T2408] EXT4-fs (loop0): unmounting filesystem. [ 156.161946][ T28] audit: type=1400 audit(1729572937.691:558): avc: denied { unlink } for pid=2617 comm="syz.4.678" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 156.194070][ T2640] capability: warning: `syz.3.684' uses 32-bit capabilities (legacy support in use) [ 156.393770][ T2648] loop1: detected capacity change from 0 to 512 [ 156.408393][ T2648] /dev/loop1: Can't open blockdev [ 156.520633][ T2656] loop0: detected capacity change from 0 to 256 [ 156.540079][ T2656] FAT-fs (loop0): Unrecognized mount option "me=mixè¥" or missing value [ 156.677639][ T2661] loop0: detected capacity change from 0 to 512 [ 156.697753][ T2662] loop4: detected capacity change from 0 to 2048 [ 156.728015][ T2662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.737399][ T2661] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 156.777122][ T2661] ext4 filesystem being mounted at /16/bus supports timestamps until 2038 (0x7fffffff) [ 156.816353][ T2294] EXT4-fs (loop4): unmounting filesystem. [ 156.889882][ T2408] EXT4-fs (loop0): unmounting filesystem. [ 157.336200][ T2696] loop4: detected capacity change from 0 to 256 [ 157.922959][ T2668] loop1: detected capacity change from 0 to 40427 [ 158.152143][ T2715] loop3: detected capacity change from 0 to 2048 [ 158.211620][ T2715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.273459][ T1847] EXT4-fs (loop3): unmounting filesystem. [ 158.280690][ T2727] device pim6reg1 entered promiscuous mode [ 158.327482][ T28] audit: type=1326 audit(1729572939.851:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c197dff9 code=0x7ffc0000 [ 158.351285][ T28] audit: type=1326 audit(1729572939.881:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c197dff9 code=0x7ffc0000 [ 158.374774][ T28] audit: type=1326 audit(1729572939.881:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5c197dff9 code=0x7ffc0000 [ 158.408958][ T28] audit: type=1326 audit(1729572939.881:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c197dff9 code=0x7ffc0000 [ 158.433252][ T28] audit: type=1326 audit(1729572939.881:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5c197dff9 code=0x7ffc0000 [ 158.459042][ T2739] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 158.612776][ T2753] loop1: detected capacity change from 0 to 256 [ 158.992359][ T2761] loop3: detected capacity change from 0 to 4096 [ 159.012662][ T2764] loop4: detected capacity change from 0 to 256 [ 159.013117][ T2761] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.047048][ T1847] EXT4-fs (loop3): unmounting filesystem. [ 159.257901][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 159.381492][ T2776] loop1: detected capacity change from 0 to 2048 [ 159.398276][ T2776] /dev/loop1: Can't open blockdev [ 159.424744][ T2772] loop0: detected capacity change from 0 to 512 [ 159.454418][ T2772] EXT4-fs (loop0): inodes count not valid: 0 vs 32 [ 159.548156][ T2779] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.555132][ T2779] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.562737][ T2779] device bridge_slave_0 entered promiscuous mode [ 159.569493][ T2788] EXT4-fs (sda1): shut down requested (2) [ 159.569943][ T2779] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.575055][ T2788] Aborting journal on device sda1-8. [ 159.582219][ T2779] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.594659][ T2779] device bridge_slave_1 entered promiscuous mode [ 159.648031][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.662208][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.681081][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 159.690862][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.718597][ T24] usb 3-1: config 0 descriptor?? [ 159.735572][ T2779] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.742454][ T2779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.749565][ T2779] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.756319][ T2779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.823832][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.838243][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.852624][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.880354][ T43] device bridge_slave_1 left promiscuous mode [ 159.886314][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.894874][ T43] device bridge_slave_0 left promiscuous mode [ 159.907991][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.919901][ T43] device veth1_macvtap left promiscuous mode [ 159.925810][ T43] device veth0_vlan left promiscuous mode [ 160.012123][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.020118][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.026961][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.034204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.042186][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.049069][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.061638][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.074912][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.096370][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.104597][ T28] kauditd_printk_skb: 290 callbacks suppressed [ 160.104613][ T28] audit: type=1326 audit(1729572941.621:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.1.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd6d7dff9 code=0x7ffc0000 [ 160.135497][ T2813] loop1: detected capacity change from 0 to 4096 [ 160.139583][ T2779] device veth0_vlan entered promiscuous mode [ 160.153983][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.162448][ T2813] /dev/loop1: Can't open blockdev [ 160.162637][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.167787][ T28] audit: type=1326 audit(1729572941.621:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.1.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6cd6d7dff9 code=0x7ffc0000 [ 160.181818][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.204627][ T28] audit: type=1326 audit(1729572941.621:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.1.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd6d7dff9 code=0x7ffc0000 [ 160.218326][ T2779] device veth1_macvtap entered promiscuous mode [ 160.237108][ T28] audit: type=1326 audit(1729572941.621:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.1.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cd6d7dff9 code=0x7ffc0000 [ 160.264862][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.289490][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.298509][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.307678][ T28] audit: type=1326 audit(1729572941.621:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.1.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd6d7dff9 code=0x7ffc0000 [ 160.358041][ T28] audit: type=1326 audit(1729572941.641:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.1.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cd6d7dff9 code=0x7ffc0000 [ 160.392637][ T28] audit: type=1326 audit(1729572941.641:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.1.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd6d7dff9 code=0x7ffc0000 [ 160.394280][ T2822] loop1: detected capacity change from 0 to 512 [ 160.416223][ T28] audit: type=1326 audit(1729572941.641:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.1.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cd6d7dff9 code=0x7ffc0000 [ 160.478198][ T28] audit: type=1326 audit(1729572941.651:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.1.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd6d7dff9 code=0x7ffc0000 [ 160.481717][ T2822] /dev/loop1: Can't open blockdev [ 160.527917][ T28] audit: type=1326 audit(1729572941.651:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.1.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cd6d7dff9 code=0x7ffc0000 SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 160.947938][ T24] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 160.956551][ T24] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 160.964479][ T24] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 160.972373][ T24] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 160.979667][ T24] uclogic: probe of 0003:256C:006D.0018 failed with error -71 [ 160.994595][ T24] usb 3-1: USB disconnect, device number 20 [ 161.258586][ T43] device bridge_slave_1 left promiscuous mode [ 161.264536][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.271929][ T43] device bridge_slave_0 left promiscuous mode [ 161.278098][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.285979][ T43] device veth1_macvtap left promiscuous mode [ 161.291916][ T43] device veth0_vlan left promiscuous mode [ 162.110533][ T43] device bridge_slave_1 left promiscuous mode [ 162.116451][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.123683][ T43] device bridge_slave_0 left promiscuous mode [ 162.129638][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.137365][ T43] device bridge_slave_1 left promiscuous mode [ 162.143320][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.150632][ T43] device bridge_slave_0 left promiscuous mode [ 162.156554][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.164381][ T43] device bridge_slave_1 left promiscuous mode [ 162.170370][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.177556][ T43] device bridge_slave_0 left promiscuous mode [ 162.183619][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.191332][ T43] device bridge_slave_1 left promiscuous mode [ 162.197236][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.204656][ T43] device bridge_slave_0 left promiscuous mode [ 162.210737][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.219199][ T43] device veth1_macvtap left promiscuous mode [ 162.225026][ T43] device veth0_vlan left promiscuous mode [ 162.231039][ T43] device veth1_macvtap left promiscuous mode [ 162.236853][ T43] device veth0_vlan left promiscuous mode [ 162.242796][ T43] device veth1_macvtap left promiscuous mode [ 162.248699][ T43] device veth0_vlan left promiscuous mode [ 162.254426][ T43] device veth1_macvtap left promiscuous mode [ 162.260277][ T43] device veth0_vlan left promiscuous mode