last executing test programs: 17.230186374s ago: executing program 4 (id=639): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 15.009037355s ago: executing program 1 (id=691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) write$binfmt_script(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.59043795s ago: executing program 4 (id=695): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) openat$vcs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ustat(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000180001000000000000000000021000000000c8060000000008001e000100008006001c000000000008000400", @ANYRES32], 0x44}}, 0x0) 14.532935224s ago: executing program 4 (id=696): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 14.499453417s ago: executing program 1 (id=698): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000d40)="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", 0x771}], 0x2}}], 0x1, 0x40440c1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 14.445136981s ago: executing program 4 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, r4, {}, {}, {0xd, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xfff2}}]}}]}, 0x3c}}, 0x0) 14.240876138s ago: executing program 4 (id=704): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x0, 0x2, r4}) 12.288029088s ago: executing program 1 (id=713): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001e01000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) tee(r1, r2, 0x6, 0x0) rt_sigtimedwait(&(0x7f0000000140)={[0xfffffffffffffff9]}, 0x0, 0x0, 0x8) 12.24971216s ago: executing program 1 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)) 12.008686101s ago: executing program 1 (id=724): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbmon(&(0x7f00000000c0), 0xae, 0x80041) socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 11.747398822s ago: executing program 4 (id=705): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x445, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000008c0)={0x9}) 10.732002705s ago: executing program 1 (id=728): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 8.603724078s ago: executing program 0 (id=734): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 6.632739349s ago: executing program 2 (id=740): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 5.569071026s ago: executing program 0 (id=742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff290000003b0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 5.568799785s ago: executing program 2 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 5.568625076s ago: executing program 3 (id=744): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 5.554643397s ago: executing program 0 (id=745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 4.29715372s ago: executing program 0 (id=746): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000060000000000000061113000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000040)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.296856479s ago: executing program 2 (id=747): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000004380)}], 0x1) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r0, r1, 0x0) 4.29660061s ago: executing program 3 (id=748): creat(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.029620123s ago: executing program 0 (id=749): syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b02"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) 3.029264893s ago: executing program 2 (id=750): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 3.029087393s ago: executing program 3 (id=751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) 1.617171578s ago: executing program 2 (id=752): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getresgid(0xfffffffffffffffd, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) sched_setscheduler(0x0, 0x0, 0x0) stat(0x0, 0x0) 1.616865388s ago: executing program 3 (id=753): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f00000006c0)) 40.839557ms ago: executing program 2 (id=755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x4400) dup3(r2, r1, 0x0) io_setup(0x7, &(0x7f0000000580)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) 40.574757ms ago: executing program 3 (id=756): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x0, 0x0, 0x0, 0x34cf}, 0x48) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000280)='track_foreign_dirty\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setitimer(0x0, &(0x7f0000000040)={{}, {0xffffffffffff7fff}}, 0x0) 9.358199ms ago: executing program 0 (id=757): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 3 (id=758): sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x2e}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.1.353'. [ 50.518309][ T1287] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.528669][ T1287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 50.538359][ T1287] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.546717][ T1287] device bridge_slave_0 left promiscuous mode [ 50.552675][ T1287] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.616499][ T1294] syz.1.359[1294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.616549][ T1294] syz.1.359[1294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.706126][ T1302] loop1: detected capacity change from 0 to 512 [ 50.725382][ T1302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.743640][ T28] audit: type=1400 audit(1724233604.504:581): avc: denied { unlink } for pid=784 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 50.767034][ T295] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 50.809051][ T1305] EXT4-fs (loop1): unmounting filesystem. [ 50.904380][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.911381][ T1307] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.919087][ T1307] device bridge_slave_0 entered promiscuous mode [ 50.927421][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.934252][ T1307] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.941655][ T1307] device bridge_slave_1 entered promiscuous mode [ 50.980797][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.987658][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.994724][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.001572][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.006985][ T295] usb 3-1: Using ep0 maxpacket: 16 [ 51.023830][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.031838][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.039427][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.057651][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.065596][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.072446][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.079827][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.087829][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.094659][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.101873][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.109616][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.119569][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.127003][ T295] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 51.131804][ T1307] device veth0_vlan entered promiscuous mode [ 51.135400][ T295] usb 3-1: config 0 has no interface number 0 [ 51.141689][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.155400][ T295] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 51.156149][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.172835][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.185786][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.194673][ T1307] device veth1_macvtap entered promiscuous mode [ 51.203633][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.215487][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.277113][ T295] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 51.286258][ T295] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 51.294834][ T295] usb 3-1: Product: syz [ 51.299920][ T295] usb 3-1: SerialNumber: syz [ 51.305102][ T295] usb 3-1: config 0 descriptor?? [ 51.327105][ T1283] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 51.337630][ T43] device bridge_slave_1 left promiscuous mode [ 51.343571][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.351219][ T43] device veth1_macvtap left promiscuous mode [ 51.357201][ T43] device veth0_vlan left promiscuous mode [ 51.388086][ T28] audit: type=1400 audit(1724233605.154:582): avc: denied { write } for pid=1318 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 51.461320][ T28] audit: type=1400 audit(1724233605.224:583): avc: denied { write } for pid=1323 comm="syz.3.371" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.527035][ T60] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.539447][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.546389][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.554063][ T1327] device bridge_slave_0 entered promiscuous mode [ 51.561290][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.568243][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.575363][ T1327] device bridge_slave_1 entered promiscuous mode [ 51.577777][ T295] usb 3-1: invalid MIDI in EP 0 [ 51.593020][ T295] snd-usb-audio: probe of 3-1:0.2 failed with error -22 [ 51.602002][ T295] usb 3-1: USB disconnect, device number 7 [ 51.610893][ T834] udevd[834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.660107][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.666996][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.674032][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.680955][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.698945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.706403][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.713983][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.734441][ T1327] device veth0_vlan entered promiscuous mode [ 51.741678][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.749976][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.757762][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.765027][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.773296][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.781167][ T790] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 51.788430][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 51.793500][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.800341][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.807551][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.815485][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.822333][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.829639][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.837448][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.853334][ T1327] device veth1_macvtap entered promiscuous mode [ 51.860024][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.871028][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.881500][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.898023][ T28] audit: type=1400 audit(1724233605.664:584): avc: denied { unmount } for pid=1327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.918036][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 51.929461][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 51.936728][ T1332] loop4: detected capacity change from 0 to 1024 [ 51.940656][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 51.955806][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.964575][ T60] usb 2-1: config 0 descriptor?? [ 51.968328][ T1332] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.370: casefold flag without casefold feature [ 51.982146][ T1332] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 51.991420][ T1317] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 51.993224][ T1332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.007491][ T60] hub 2-1:0.0: USB hub found [ 52.011930][ T28] audit: type=1400 audit(1724233605.774:585): avc: denied { mount } for pid=1331 comm="syz.4.370" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.034864][ T28] audit: type=1400 audit(1724233605.784:586): avc: denied { create } for pid=1331 comm="syz.4.370" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 52.058566][ T1327] EXT4-fs (loop4): unmounting filesystem. [ 52.074747][ T28] audit: type=1400 audit(1724233605.834:587): avc: denied { bind } for pid=1337 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.135215][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 52.143842][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 52.152770][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 52.207118][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.217913][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.227663][ T60] hub 2-1:0.0: 2 ports detected [ 52.232691][ T790] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 52.241597][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.250102][ T790] usb 4-1: config 0 descriptor?? [ 52.348019][ T43] device bridge_slave_1 left promiscuous mode [ 52.354054][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.361434][ T43] device bridge_slave_0 left promiscuous mode [ 52.367542][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.375026][ T43] device veth1_macvtap left promiscuous mode [ 52.380897][ T1057] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 52.381075][ T43] device veth0_vlan left promiscuous mode [ 52.708840][ T1326] loop3: detected capacity change from 0 to 128 [ 52.747353][ T1057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.758240][ T1057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.767986][ T1057] usb 3-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 52.776808][ T1057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.785456][ T327] blk_print_req_error: 29 callbacks suppressed [ 52.785472][ T327] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.785651][ T1057] usb 3-1: config 0 descriptor?? [ 52.807177][ T790] hid (null): unknown global tag 0xd [ 52.813515][ T790] lg-g15 0003:046D:C222.0009: unknown global tag 0xd [ 52.820086][ T790] lg-g15 0003:046D:C222.0009: item 0 1 1 13 parsing failed [ 52.827292][ T790] lg-g15: probe of 0003:046D:C222.0009 failed with error -22 [ 53.008319][ T441] usb 4-1: USB disconnect, device number 7 [ 53.278116][ T1057] wacom 0003:056A:00B8.000A: unknown main item tag 0x0 [ 53.285065][ T1057] wacom 0003:056A:00B8.000A: item fetching failed at offset 3/5 [ 53.292942][ T1057] wacom 0003:056A:00B8.000A: parse failed [ 53.298534][ T1057] wacom: probe of 0003:056A:00B8.000A failed with error -22 [ 53.347074][ T295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.479329][ T790] usb 3-1: USB disconnect, device number 8 [ 53.517493][ T1366] netem: unknown loss type 0 [ 53.521908][ T1366] netem: change failed [ 53.535697][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 53.535712][ T28] audit: type=1400 audit(1724233607.294:590): avc: denied { setattr } for pid=1367 comm="syz.3.387" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.570428][ T1370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1370 comm=syz.3.388 [ 53.582842][ T1370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.388'. [ 53.587107][ T295] usb 5-1: Using ep0 maxpacket: 16 [ 53.608565][ T1372] loop3: detected capacity change from 0 to 1024 [ 53.615019][ T1372] /dev/loop3: Can't open blockdev [ 53.638794][ T1374] device pim6reg1 entered promiscuous mode [ 53.659255][ T1376] loop3: detected capacity change from 0 to 1024 [ 53.665714][ T1376] /dev/loop3: Can't open blockdev [ 53.717044][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.727842][ T295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.740446][ T295] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 53.749406][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.758000][ T295] usb 5-1: config 0 descriptor?? [ 53.957435][ T6] usb 2-1: USB disconnect, device number 9 [ 53.987030][ T60] usb 2-1-port2: config error [ 54.100134][ T1386] loop2: detected capacity change from 0 to 40427 [ 54.108131][ T1386] F2FS-fs (loop2): invalid crc value [ 54.114789][ T1386] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.138501][ T1386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 54.153150][ T28] audit: type=1400 audit(1724233607.914:591): avc: denied { setattr } for pid=1385 comm="syz.2.395" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.153637][ T1388] f2fs_ckpt-7:2: attempt to access beyond end of device [ 54.153637][ T1388] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 54.192155][ T1036] syz-executor: attempt to access beyond end of device [ 54.192155][ T1036] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 54.206185][ T1036] syz-executor: attempt to access beyond end of device [ 54.206185][ T1036] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 54.227243][ T295] hid (null): report_id 17819 is invalid [ 54.235547][ T295] kye 0003:0458:5015.000B: report_id 17819 is invalid [ 54.242671][ T295] kye 0003:0458:5015.000B: item 0 2 1 8 parsing failed [ 54.249738][ T295] kye 0003:0458:5015.000B: parse failed [ 54.255092][ T295] kye: probe of 0003:0458:5015.000B failed with error -22 [ 54.417140][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.424015][ T1393] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.431691][ T24] usb 5-1: USB disconnect, device number 3 [ 54.431734][ T1393] device bridge_slave_0 entered promiscuous mode [ 54.444332][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.451227][ T1393] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.458417][ T1393] device bridge_slave_1 entered promiscuous mode [ 54.488236][ T1398] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262207 (only 8 groups) [ 54.520023][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.526876][ T1393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.534032][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.540928][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.565821][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.573261][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.580635][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.590448][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.598759][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.605613][ T790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.623703][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.631830][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.638720][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.645923][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.654025][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.667155][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.675433][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.686130][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.694003][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.702947][ T1393] device veth0_vlan entered promiscuous mode [ 54.710183][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.718112][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.743137][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.751369][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.760367][ T1393] device veth1_macvtap entered promiscuous mode [ 54.771352][ T28] audit: type=1400 audit(1724233608.534:592): avc: denied { mounton } for pid=1403 comm="syz.3.402" path="/19/file0" dev="incremental-fs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.777714][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.802998][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.812752][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.822555][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.831031][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.888937][ T10] device bridge_slave_1 left promiscuous mode [ 54.898570][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.905900][ T10] device bridge_slave_0 left promiscuous mode [ 54.912156][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.920652][ T10] device veth1_macvtap left promiscuous mode [ 54.926590][ T10] device veth0_vlan left promiscuous mode [ 55.018074][ T1428] loop2: detected capacity change from 0 to 512 [ 55.027591][ T1428] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.040929][ T1428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.055107][ T1428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 55.063349][ T1428] System zones: 1-12 [ 55.072024][ T1428] EXT4-fs (loop2): 1 truncate cleaned up [ 55.081892][ T1428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.111372][ T1393] EXT4-fs (loop2): unmounting filesystem. [ 55.129121][ T28] audit: type=1326 audit(1724233608.894:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1438 comm="syz.2.416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa05979e79 code=0x0 [ 55.256991][ T295] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.617187][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.628134][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.638986][ T295] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 55.648399][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.657276][ T295] usb 5-1: config 0 descriptor?? [ 56.139429][ T295] hid-multitouch 0003:1FD2:6007.000C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 56.207817][ T10] device bridge_slave_1 left promiscuous mode [ 56.213785][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.234998][ T10] device bridge_slave_0 left promiscuous mode [ 56.252254][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.262673][ T10] device veth1_macvtap left promiscuous mode [ 56.268787][ T10] device veth0_vlan left promiscuous mode [ 56.341964][ T24] usb 5-1: USB disconnect, device number 4 [ 56.435863][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.442934][ T1469] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.450381][ T1469] device bridge_slave_0 entered promiscuous mode [ 56.458762][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.465686][ T1469] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.472964][ T1469] device bridge_slave_1 entered promiscuous mode [ 56.494727][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.501667][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.508880][ T1468] device bridge_slave_0 entered promiscuous mode [ 56.522508][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.529385][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.536490][ T1468] device bridge_slave_1 entered promiscuous mode [ 56.548997][ T1470] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.555900][ T1470] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.563141][ T1470] device bridge_slave_0 entered promiscuous mode [ 56.576444][ T1470] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.583481][ T1470] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.590824][ T1470] device bridge_slave_1 entered promiscuous mode [ 56.706253][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.713153][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.720225][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.727186][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.740578][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.747459][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.754567][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.761357][ T1469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.771036][ T790] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.778279][ T790] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.785493][ T790] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.792706][ T790] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.832070][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.839489][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.864073][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.873362][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.881585][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.888528][ T790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.895769][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.903920][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.912055][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.918906][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.927101][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.935090][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.953032][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.961086][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.968949][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.976575][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.984175][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.992397][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.000482][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.007335][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.014683][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.022870][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.030802][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.037643][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.061743][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.070179][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.083524][ T1468] device veth0_vlan entered promiscuous mode [ 57.093066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.101231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.108947][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.116563][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.124354][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.132337][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.140184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.147625][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.166609][ T1468] device veth1_macvtap entered promiscuous mode [ 57.173339][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.181006][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.188300][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.196185][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.204600][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.212068][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.220239][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.228335][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.235172][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.242434][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.251342][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.259397][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.266319][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.273770][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.294099][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.302059][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.309918][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.317751][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.337904][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.346039][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.354292][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.362436][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.379819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.388335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.399983][ T1470] device veth0_vlan entered promiscuous mode [ 57.409004][ T28] audit: type=1400 audit(1724233611.174:594): avc: denied { bind } for pid=1485 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.432745][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.446242][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.458895][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.467835][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.476471][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.483811][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.500636][ T1469] device veth0_vlan entered promiscuous mode [ 57.513579][ T1470] device veth1_macvtap entered promiscuous mode [ 57.524013][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.533348][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.541266][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.549453][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.557778][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.565133][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.575631][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.587298][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.595776][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.604630][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.613946][ T10] device bridge_slave_1 left promiscuous mode [ 57.620054][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.628021][ T10] device bridge_slave_0 left promiscuous mode [ 57.633962][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.641569][ T10] device bridge_slave_1 left promiscuous mode [ 57.647626][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.654830][ T10] device bridge_slave_0 left promiscuous mode [ 57.660927][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.668722][ T10] device veth1_macvtap left promiscuous mode [ 57.674576][ T10] device veth0_vlan left promiscuous mode [ 57.680482][ T10] device veth1_macvtap left promiscuous mode [ 57.686489][ T10] device veth0_vlan left promiscuous mode [ 57.826597][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.834623][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.851237][ T1469] device veth1_macvtap entered promiscuous mode [ 57.877751][ T28] audit: type=1400 audit(1724233611.644:595): avc: denied { map } for pid=1500 comm="syz.1.433" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.902813][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.923149][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.931296][ T28] audit: type=1400 audit(1724233611.644:596): avc: denied { execute } for pid=1500 comm="syz.1.433" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.957270][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.965670][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.062336][ T28] audit: type=1400 audit(1724233611.824:597): avc: denied { map } for pid=1511 comm="syz.3.446" path="socket:[24922]" dev="sockfs" ino=24922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 58.170524][ T1524] syz.2.452[1524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.170596][ T1524] syz.2.452[1524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.182542][ T1524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 58.204135][ T1524] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.213089][ T1524] device bridge_slave_0 left promiscuous mode [ 58.219180][ T1524] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.253517][ T1525] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.260633][ T1525] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.268283][ T1525] device bridge_slave_0 entered promiscuous mode [ 58.275272][ T1525] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.282364][ T1525] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.289682][ T1525] device bridge_slave_1 entered promiscuous mode [ 58.344629][ T1525] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.351509][ T1525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.358614][ T1525] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.365375][ T1525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.386473][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.394209][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.401645][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.418872][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.427323][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.434194][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.441461][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.449434][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.456257][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.463459][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.471255][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.485929][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.494123][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.502079][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.509343][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.521986][ T1525] device veth0_vlan entered promiscuous mode [ 58.533571][ T1525] device veth1_macvtap entered promiscuous mode [ 58.540677][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.551324][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.562338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.588075][ T1532] loop1: detected capacity change from 0 to 1024 [ 58.601940][ T1532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.618458][ T1525] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 48: comm syz-executor: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.632765][ T1525] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 58.637073][ T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 58.642203][ T1525] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 58.664786][ T1525] EXT4-fs (loop1): unmounting filesystem. [ 58.671551][ T1525] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 58.680952][ T1525] EXT4-fs error (device loop1): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 58.692435][ T1525] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 58.701946][ T1525] EXT4-fs error (device loop1): ext4_quota_off:7053: inode #4: comm syz-executor: mark_inode_dirty error [ 58.886993][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 58.957562][ T1538] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.964597][ T1538] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.973417][ T1538] device bridge_slave_0 entered promiscuous mode [ 58.980641][ T10] device bridge_slave_1 left promiscuous mode [ 58.987427][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.994896][ T10] device bridge_slave_0 left promiscuous mode [ 59.001399][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.003927][ T1549] capability: warning: `syz.3.462' uses 32-bit capabilities (legacy support in use) [ 59.008771][ T6] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 59.025681][ T28] audit: type=1400 audit(1724233612.784:598): avc: denied { nlmsg_read } for pid=1548 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 59.046555][ T6] usb 3-1: config 0 has no interface number 0 [ 59.052636][ T10] device veth1_macvtap left promiscuous mode [ 59.052896][ T6] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 59.059217][ T10] device veth0_vlan left promiscuous mode [ 59.068979][ T6] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 59.138993][ T1538] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.145890][ T1538] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.153805][ T1538] device bridge_slave_1 entered promiscuous mode [ 59.200245][ T1538] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.207105][ T1538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.214257][ T1538] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.221276][ T1538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.247025][ T6] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 59.249350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.255890][ T6] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 59.255912][ T6] usb 3-1: Product: syz [ 59.255924][ T6] usb 3-1: SerialNumber: syz [ 59.279692][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.285735][ T6] usb 3-1: config 0 descriptor?? [ 59.291492][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.303917][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.307052][ T790] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 59.312243][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.325983][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.337962][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.345878][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.352650][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.364007][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.371833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.386261][ T1538] device veth0_vlan entered promiscuous mode [ 59.393460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.401789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.410426][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.417781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.431321][ T1538] device veth1_macvtap entered promiscuous mode [ 59.438802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.455006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.464128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.491919][ T1564] loop1: detected capacity change from 0 to 1024 [ 59.508115][ T1564] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.543135][ T1538] EXT4-fs (loop1): unmounting filesystem. [ 59.574353][ T1572] loop1: detected capacity change from 0 to 1024 [ 59.584196][ T6] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 59.586587][ T1572] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.594128][ T834] udevd[834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.611118][ T1572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.619918][ T6] usb 3-1: USB disconnect, device number 9 [ 59.648200][ T1572] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.471: Invalid inode table block 13670508662569116710 in block_group 0 [ 59.663761][ T1572] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 59.674884][ T1572] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #15: comm syz.1.471: mark_inode_dirty error [ 59.677125][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.697252][ T1572] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.471: Invalid inode table block 13670508662569116710 in block_group 0 [ 59.701298][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.714556][ T1572] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.471: Invalid inode table block 13670508662569116710 in block_group 0 [ 59.721452][ T790] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 59.735935][ T1572] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 59.743936][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.753940][ T1572] EXT4-fs error (device loop1): mpage_map_and_submit_extent:2537: inode #15: comm syz.1.471: mark_inode_dirty error [ 59.765961][ T790] usb 4-1: config 0 descriptor?? [ 59.774753][ T1572] EXT4-fs error (device loop1): mpage_map_and_submit_extent:2541: comm syz.1.471: Failed to mark inode 15 dirty [ 59.789668][ T1572] syz.1.471: attempt to access beyond end of device [ 59.789668][ T1572] loop1: rw=2049, sector=3606377190, nr_sectors = 2 limit=1024 [ 59.805859][ T1572] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 1803188595) [ 59.817633][ T1572] Buffer I/O error on device loop1, logical block 1803188595 [ 59.831633][ T1538] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 59.846017][ T1538] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 13670508662569116710 in block_group 0 [ 59.865429][ T425] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 59.881325][ T425] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 59.897364][ T425] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 59.913895][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 59.929721][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 59.945651][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 59.961945][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 59.977710][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 59.993467][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 60.089713][ T1588] device pim6reg1 entered promiscuous mode [ 60.182746][ T28] audit: type=1400 audit(1724233613.944:599): avc: denied { connect } for pid=1593 comm="syz.2.480" laddr=172.20.20.170 lport=52877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.237156][ T790] hid (null): bogus close delimiter [ 60.247816][ T10] device bridge_slave_1 left promiscuous mode [ 60.253779][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.261682][ T10] device bridge_slave_0 left promiscuous mode [ 60.276258][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.288410][ T10] device veth1_macvtap left promiscuous mode [ 60.294292][ T10] device veth0_vlan left promiscuous mode [ 60.396982][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.497059][ T790] usb 4-1: language id specifier not provided by device, defaulting to English [ 60.737052][ T790] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 60.746172][ T790] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 60.753841][ T790] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 60.765017][ T790] usb 4-1: USB disconnect, device number 8 [ 60.767038][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.785227][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.794866][ T6] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 60.803794][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.815136][ T6] usb 5-1: config 0 descriptor?? [ 61.226240][ T1605] loop3: detected capacity change from 0 to 1024 [ 61.235880][ T1605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.243314][ T1605] /dev/loop3: Can't open blockdev [ 61.277822][ T6] samsung 0003:0419:0600.000E: unknown main item tag 0x0 [ 61.285839][ T6] samsung 0003:0419:0600.000E: unknown main item tag 0x0 [ 61.292756][ T6] samsung 0003:0419:0600.000E: unknown main item tag 0x0 [ 61.302586][ T6] samsung 0003:0419:0600.000E: unknown main item tag 0x0 [ 61.309784][ T6] samsung 0003:0419:0600.000E: unknown main item tag 0x0 [ 61.320594][ T6] samsung 0003:0419:0600.000E: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 61.416984][ T39] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 61.479001][ T441] usb 5-1: USB disconnect, device number 5 [ 61.627006][ T6] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 61.777006][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.787926][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.797746][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 61.806854][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.818580][ T39] usb 3-1: config 0 descriptor?? [ 61.896966][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 62.008013][ T1611] loop4: detected capacity change from 0 to 512 [ 62.028865][ T1611] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.037756][ T1611] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 62.062478][ T1327] EXT4-fs (loop4): unmounting filesystem. [ 62.082650][ T28] audit: type=1400 audit(1724233615.844:600): avc: denied { create } for pid=1614 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.101917][ T28] audit: type=1400 audit(1724233615.844:601): avc: denied { connect } for pid=1614 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.124062][ T28] audit: type=1400 audit(1724233615.844:602): avc: denied { write } for pid=1614 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.131323][ T1620] loop4: detected capacity change from 0 to 512 [ 62.152545][ T1620] EXT4-fs: Ignoring removed i_version option [ 62.158750][ T1620] EXT4-fs: Ignoring removed nobh option [ 62.164503][ T1620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.175824][ T1620] EXT4-fs (loop4): 1 truncate cleaned up [ 62.181520][ T1620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 62.194823][ T1620] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 62.209265][ T6] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 62.218559][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.230242][ T6] usb 4-1: Product: syz [ 62.234235][ T6] usb 4-1: Manufacturer: syz [ 62.239675][ T6] usb 4-1: SerialNumber: syz [ 62.240353][ T1327] EXT4-fs (loop4): unmounting filesystem. [ 62.244703][ T6] usb 4-1: config 0 descriptor?? [ 62.297267][ T39] hid (null): bogus close delimiter [ 62.507408][ T39] usb 3-1: string descriptor 0 read error: -22 [ 62.766979][ T441] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 62.767077][ T39] uclogic 0003:256C:006D.000F: interface is invalid, ignoring [ 62.823899][ T28] audit: type=1400 audit(1724233616.584:603): avc: denied { create } for pid=1637 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.947033][ T6] (unnamed net_device) (uninitialized): Assigned a random MAC address: 56:13:0a:92:17:08 [ 62.958594][ T6] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 62.965394][ T6] usb 4-1: USB disconnect, device number 9 [ 62.987766][ T19] usb 3-1: USB disconnect, device number 10 [ 63.017007][ T441] usb 5-1: Using ep0 maxpacket: 16 [ 63.022417][ T1647] device pim6reg1 entered promiscuous mode [ 63.120756][ T28] audit: type=1400 audit(1724233616.884:604): avc: denied { mounton } for pid=1649 comm="syz.0.502" path="/42/file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 63.143558][ T441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.154644][ T441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.164476][ T441] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 63.174030][ T441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.185737][ T441] usb 5-1: config 0 descriptor?? [ 63.599893][ T1667] syz.2.509[1667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.600272][ T1667] syz.2.509[1667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.614788][ T1667] syz.2.509[1667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.665706][ T1667] syz.2.509[1667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.677827][ T441] lenovo 0003:17EF:6009.0010: item fetching failed at offset 1/5 [ 63.697361][ T441] lenovo 0003:17EF:6009.0010: hid_parse failed [ 63.703479][ T441] lenovo: probe of 0003:17EF:6009.0010 failed with error -22 [ 63.810667][ T1679] input: syz0 as /devices/virtual/input/input8 [ 63.824124][ T28] audit: type=1400 audit(1724233617.584:605): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.854238][ T28] audit: type=1400 audit(1724233617.584:606): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.878038][ T28] audit: type=1400 audit(1724233617.584:607): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=520 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.924246][ T19] usb 5-1: USB disconnect, device number 6 [ 63.960407][ T1653] loop0: detected capacity change from 0 to 131072 [ 63.973890][ T1653] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.015614][ T1653] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 64.107006][ T441] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 64.290387][ T1695] loop0: detected capacity change from 0 to 1024 [ 64.299754][ T1695] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.325613][ T1125] EXT4-fs (loop0): unmounting filesystem. [ 64.347020][ T441] usb 4-1: Using ep0 maxpacket: 16 [ 64.467021][ T441] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 64.478404][ T441] usb 4-1: config 0 has no interface number 0 [ 64.491515][ T441] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 64.627123][ T441] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 64.636104][ T441] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 64.648891][ T441] usb 4-1: Product: syz [ 64.653114][ T441] usb 4-1: SerialNumber: syz [ 64.656985][ T43] EXT4-fs error: 19919 callbacks suppressed [ 64.657004][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 64.661945][ T441] usb 4-1: config 0 descriptor?? [ 64.663785][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 64.698248][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 64.707292][ T1678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.712870][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 64.733976][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 64.748777][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 64.763473][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 64.778185][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 64.797199][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 64.812202][ T43] EXT4-fs warning: 59761 callbacks suppressed [ 64.812220][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 64.820980][ T1721] loop2: detected capacity change from 0 to 128 [ 64.834010][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 64.834055][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 64.834103][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 64.834355][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 64.849232][ T28] audit: type=1400 audit(1724233618.614:608): avc: denied { mounton } for pid=1720 comm="syz.2.529" path="/16/file0/file0" dev="loop2" ino=1048680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 64.885847][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 64.940317][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 64.956687][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 64.961528][ T1469] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 64.980423][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 64.983958][ T1469] FAT-fs (loop2): Filesystem has been set read-only [ 64.996449][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 65.018721][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 65.035275][ T1469] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 65.043398][ T1469] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 65.057642][ T441] usb 4-1: invalid MIDI in EP 0 [ 65.071810][ T441] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 65.080306][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.097591][ T441] usb 4-1: USB disconnect, device number 10 [ 65.227523][ T28] audit: type=1400 audit(1724233618.994:609): avc: denied { read } for pid=1731 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.259471][ T28] audit: type=1400 audit(1724233618.994:610): avc: denied { open } for pid=1731 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.304688][ T1731] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.311934][ T1731] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.320003][ T1731] device bridge_slave_0 entered promiscuous mode [ 65.327441][ T1731] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.335926][ T1731] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.344514][ T1731] device bridge_slave_1 entered promiscuous mode [ 65.357961][ T1738] loop0: detected capacity change from 0 to 2048 [ 65.372439][ T1738] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 65.380546][ T1738] System zones: 0-7 [ 65.384636][ T1738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 65.410130][ T1125] EXT4-fs (loop0): unmounting filesystem. [ 65.444850][ T1744] loop0: detected capacity change from 0 to 512 [ 65.474774][ T1731] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.481759][ T1731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.481984][ T1744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.489034][ T1731] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.504463][ T1731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.511752][ T1744] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff) [ 65.533489][ T1744] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #2: comm syz.0.538: corrupted inode contents [ 65.547132][ T1744] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #2: comm syz.0.538: mark_inode_dirty error [ 65.561316][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.569367][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.576589][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.576704][ T1744] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #2: comm syz.0.538: corrupted inode contents [ 65.602315][ T1744] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.538: mark_inode_dirty error [ 65.624991][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.633279][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.640176][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.647645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.655648][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.658141][ T1744] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.538: No space for directory leaf checksum. Please run e2fsck -D. [ 65.662556][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.685062][ T1744] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz.0.538: path /58/file0: directory fails checksum at offset 0 [ 65.711610][ T1125] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 65.727426][ T1125] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor: path /58/file0: directory fails checksum at offset 0 [ 65.741194][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.741510][ T1125] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 65.751985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.780024][ T1125] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 65.782830][ T1731] device veth0_vlan entered promiscuous mode [ 65.805097][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.812695][ T1125] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor: path /58/file0: directory fails checksum at offset 18432 [ 65.827382][ T1125] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 65.843018][ T1125] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor: path /58/file0: directory fails checksum at offset 20480 [ 65.843378][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.864062][ T1125] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 65.879805][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.886999][ T1125] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor: path /58/file0: directory fails checksum at offset 22528 [ 65.887708][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.900842][ T441] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 65.914644][ T1731] device veth1_macvtap entered promiscuous mode [ 65.916314][ T1125] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 65.937855][ T425] device bridge_slave_1 left promiscuous mode [ 65.938095][ T1125] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 65.943889][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.967312][ T1125] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 65.984314][ T425] device veth1_macvtap left promiscuous mode [ 65.990204][ T425] device veth0_vlan left promiscuous mode [ 65.995978][ T1125] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 66.027138][ T1125] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 66.139977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.157365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.165411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.194124][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.196984][ T441] usb 4-1: Using ep0 maxpacket: 8 [ 66.218430][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.237562][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.245633][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.317119][ T441] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.337013][ T441] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.356980][ T441] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.387020][ T441] usb 4-1: config 0 interface 0 has no altsetting 0 [ 66.393459][ T441] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 66.402779][ T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.415944][ T441] usb 4-1: config 0 descriptor?? [ 66.547009][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 66.878237][ T441] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 66.885566][ T441] hid-steam 0003:28DE:1102.0011: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 66.904100][ T441] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 66.914708][ T441] hid-steam 0003:28DE:1102.0012: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 66.917045][ T24] usb 3-1: config 0 has no interfaces? [ 66.931636][ T24] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 66.940811][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.951856][ T24] usb 3-1: config 0 descriptor?? [ 66.986984][ T441] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' connected [ 66.996031][ T441] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0011/input/input9 [ 67.201670][ T24] usb 3-1: USB disconnect, device number 11 [ 67.285317][ T39] usb 4-1: USB disconnect, device number 11 [ 67.299119][ T39] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' disconnected [ 67.396690][ T1125] EXT4-fs (loop0): unmounting filesystem. [ 67.556687][ T1758] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.563591][ T1758] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.571029][ T1758] device bridge_slave_0 entered promiscuous mode [ 67.579543][ T1758] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.586497][ T1758] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.593949][ T1758] device bridge_slave_1 entered promiscuous mode [ 67.662416][ T1758] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.669456][ T1758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.676494][ T1758] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.683299][ T1758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.712092][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.728857][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.730063][ T1763] loop2: detected capacity change from 0 to 512 [ 67.742080][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.752734][ T1763] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.761955][ T1763] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 67.777252][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.795321][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.802217][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.810108][ T1763] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #2: comm syz.2.544: corrupted inode contents [ 67.824892][ T28] audit: type=1400 audit(1724233621.584:611): avc: denied { write } for pid=1767 comm="syz.3.546" path="socket:[27273]" dev="sockfs" ino=27273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.848106][ T1763] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz.2.544: mark_inode_dirty error [ 67.859419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.859817][ T1763] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #2: comm syz.2.544: corrupted inode contents [ 67.885382][ T1763] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.544: mark_inode_dirty error [ 67.897388][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.904409][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.921883][ T1770] device pim6reg1 entered promiscuous mode [ 67.940244][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.958850][ T1763] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.544: path /: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 67.987309][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.001744][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.010345][ T1763] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.544: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 68.012165][ T1758] device veth0_vlan entered promiscuous mode [ 68.051060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.075406][ T1758] device veth1_macvtap entered promiscuous mode [ 68.077258][ T1763] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz.2.544: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 68.091020][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.109667][ T1763] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz.2.544: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 68.134395][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.142008][ T1763] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz.2.544: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 68.161841][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.172128][ T8] device bridge_slave_1 left promiscuous mode [ 68.187262][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.205664][ T8] device bridge_slave_0 left promiscuous mode [ 68.214574][ T1763] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.544: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 68.234895][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.237953][ T1782] loop3: detected capacity change from 0 to 512 [ 68.255373][ T1782] EXT4-fs: Ignoring removed bh option [ 68.261400][ T1782] /dev/loop3: Can't open blockdev [ 68.276868][ T8] device veth1_macvtap left promiscuous mode [ 68.311668][ T1782] loop3: detected capacity change from 0 to 512 [ 68.344712][ T1782] /dev/loop3: Can't open blockdev [ 68.349792][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 68.430782][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.458852][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.468251][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.469323][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.596965][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 68.658087][ T1788] device veth0_vlan left promiscuous mode [ 68.677152][ T1788] device veth0_vlan entered promiscuous mode [ 68.706965][ T441] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 68.717132][ T39] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 68.734580][ T39] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 68.756476][ T39] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 68.767493][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.777786][ T39] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.787865][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.801411][ T39] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 68.810827][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.825574][ T39] usb 5-1: config 0 descriptor?? [ 69.087060][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.088357][ T39] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 69.106666][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.131711][ T441] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 69.133739][ T39] usb 5-1: USB disconnect, device number 7 [ 69.148786][ T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.159850][ T39] usblp0: removed [ 69.172887][ T441] usb 4-1: config 0 descriptor?? [ 69.627598][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 69.667110][ T43] EXT4-fs error: 15905 callbacks suppressed [ 69.667128][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 69.713097][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 69.728831][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 69.743701][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 69.759070][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 69.776114][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 69.792133][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 69.808088][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 69.830950][ T43] EXT4-fs warning: 47732 callbacks suppressed [ 69.830967][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 69.853260][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 69.869228][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 69.885198][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 69.897021][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 69.899956][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 69.921248][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 69.937319][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 69.953580][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 69.968596][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 69.984433][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 70.000157][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 70.016279][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 70.027795][ T39] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.050641][ T39] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 70.076996][ T39] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 70.102750][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.123077][ T441] hid-led 0003:27B8:01ED.0013: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 70.137005][ T39] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.144839][ T441] hid-led 0003:27B8:01ED.0013: ThingM blink(1) initialized [ 70.168095][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.202570][ T1802] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.212231][ T39] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 70.221345][ T1802] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.237395][ T1802] device bridge_slave_0 entered promiscuous mode [ 70.243648][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.257713][ T1802] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.274137][ T39] usb 5-1: config 0 descriptor?? [ 70.285385][ T1802] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.304536][ T1802] device bridge_slave_1 entered promiscuous mode [ 70.326480][ T441] usb 4-1: USB disconnect, device number 12 [ 70.501300][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.510208][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.537787][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.545965][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.547660][ T39] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 70.585611][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.592594][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.600031][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.608262][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.616479][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.623349][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.647758][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.655352][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.666243][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.676515][ T1731] EXT4-fs (loop2): unmounting filesystem. [ 70.682833][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.690902][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.699004][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.707429][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.715628][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.723898][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.732758][ T1802] device veth0_vlan entered promiscuous mode [ 70.741658][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.749497][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.757510][ T28] audit: type=1400 audit(1724233624.524:612): avc: denied { read write } for pid=1778 comm="syz.4.550" name="lp0" dev="devtmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 70.786828][ T1802] device veth1_macvtap entered promiscuous mode [ 70.793469][ T28] audit: type=1400 audit(1724233624.524:613): avc: denied { open } for pid=1778 comm="syz.4.550" path="/dev/usb/lp0" dev="devtmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 70.812635][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.825305][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.847098][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.856789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.866255][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.875717][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.927406][ T1810] loop3: detected capacity change from 0 to 1024 [ 70.942486][ T1810] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 70.950667][ T1810] EXT4-fs (loop3): write access unavailable, cannot proceed (try mounting with noload) [ 71.005456][ T1813] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.012944][ T1813] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.021318][ T1813] device bridge_slave_0 entered promiscuous mode [ 71.032172][ T1813] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.039467][ T1813] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.039689][ T60] usb 5-1: USB disconnect, device number 8 [ 71.046746][ T1813] device bridge_slave_1 entered promiscuous mode [ 71.063998][ T60] usblp0: removed [ 71.151007][ T1813] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.157895][ T1813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.164992][ T1813] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.171780][ T1813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.205273][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.212528][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 71.221403][ T790] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.230161][ T790] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.251730][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.260667][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.267535][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.276002][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.284981][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.291857][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.300099][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.321194][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.329655][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.342352][ T1813] device veth0_vlan entered promiscuous mode [ 71.353402][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.362311][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.369970][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.378143][ T425] device bridge_slave_1 left promiscuous mode [ 71.384094][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.392249][ T425] device bridge_slave_0 left promiscuous mode [ 71.398771][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.406761][ T425] device veth1_macvtap left promiscuous mode [ 71.412961][ T425] device veth0_vlan left promiscuous mode [ 71.526814][ T1813] device veth1_macvtap entered promiscuous mode [ 71.534995][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.548220][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.565935][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.577218][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.580263][ T1821] input: syz0 as /devices/virtual/input/input10 [ 71.595105][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.606049][ T39] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.619542][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.648088][ T1823] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 71.658045][ T39] usb 2-1: config 0 descriptor?? [ 71.663122][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.671816][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.683599][ T28] audit: type=1400 audit(1724233625.444:614): avc: denied { setopt } for pid=1822 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.928605][ T1834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 72.039578][ T1844] loop2: detected capacity change from 0 to 512 [ 72.100625][ T1844] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.574: casefold flag without casefold feature [ 72.130057][ T1844] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.574: missing EA_INODE flag [ 72.141800][ T39] hid (null): bogus close delimiter [ 72.157242][ T1844] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.574: error while reading EA inode 2 err=-117 [ 72.184881][ T28] audit: type=1400 audit(1724233625.944:615): avc: denied { bind } for pid=1849 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.204823][ T1844] EXT4-fs (loop2): 1 orphan inode deleted [ 72.213551][ T1844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 72.276792][ T1844] syz.2.574 (pid 1844) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 72.306349][ T1844] EXT4-fs (loop2): shut down requested (2) [ 72.312911][ T1844] fscrypt (loop2, inode 18): Error -5 getting encryption context [ 72.316107][ T28] audit: type=1400 audit(1724233626.074:616): avc: denied { watch } for pid=1842 comm="syz.2.574" path="/7/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.353582][ T1813] EXT4-fs (loop2): unmounting filesystem. [ 72.359754][ T39] usb 2-1: string descriptor 0 read error: -22 [ 72.417518][ T1861] device pim6reg1 entered promiscuous mode [ 72.538574][ T1871] device pim6reg1 entered promiscuous mode [ 72.598769][ T39] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0014/input/input11 [ 72.624221][ T39] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0014/input/input12 [ 72.669512][ T1889] loop4: detected capacity change from 0 to 512 [ 72.670592][ T39] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0014/input/input13 [ 72.701925][ T39] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0014/input/input14 [ 72.718589][ T1889] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.725138][ T39] uclogic 0003:256C:006D.0014: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 72.727589][ T1889] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff) [ 72.786203][ T1327] EXT4-fs (loop4): unmounting filesystem. [ 72.820942][ T19] usb 2-1: USB disconnect, device number 10 [ 72.846960][ T60] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 72.894613][ T1900] syz.0.598[1900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.894696][ T1900] syz.0.598[1900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.957001][ T295] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 73.067190][ T441] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 73.097015][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 73.217037][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.228310][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.238165][ T60] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 73.247104][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.257076][ T295] usb 3-1: Using ep0 maxpacket: 16 [ 73.258769][ T60] usb 4-1: config 0 descriptor?? [ 73.387080][ T295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.397438][ T295] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 73.406502][ T295] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 73.416360][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.428080][ T295] usb 3-1: config 0 descriptor?? [ 73.447228][ T441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.458278][ T441] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.471836][ T441] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.481316][ T441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.493544][ T441] usb 5-1: config 0 descriptor?? [ 73.707132][ T295] usb 3-1: string descriptor 0 read error: -71 [ 73.716039][ T295] usb 3-1: USB disconnect, device number 12 [ 73.747832][ T60] lenovo 0003:17EF:6009.0015: item fetching failed at offset 1/5 [ 73.755830][ T60] lenovo 0003:17EF:6009.0015: hid_parse failed [ 73.762131][ T60] lenovo: probe of 0003:17EF:6009.0015 failed with error -22 [ 73.949719][ T790] usb 4-1: USB disconnect, device number 13 [ 73.982722][ T1918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 73.993198][ T1918] device syz_tun entered promiscuous mode [ 73.998196][ T441] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 73.999265][ T1918] device macsec1 entered promiscuous mode [ 74.013734][ T1918] device syz_tun left promiscuous mode [ 74.022545][ T441] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 74.203729][ T1926] loop2: detected capacity change from 0 to 2048 [ 74.213231][ T1926] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.228805][ T1926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.247161][ T28] audit: type=1400 audit(1724233628.004:617): avc: denied { read } for pid=1925 comm="syz.2.607" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.269901][ T28] audit: type=1400 audit(1724233628.004:618): avc: denied { lock } for pid=1925 comm="syz.2.607" path="/14/bus/file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.293335][ T1813] EXT4-fs (loop2): unmounting filesystem. [ 74.293364][ T28] audit: type=1400 audit(1724233628.004:619): avc: denied { link } for pid=1925 comm="syz.2.607" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.321300][ T28] audit: type=1400 audit(1724233628.004:620): avc: denied { setattr } for pid=1925 comm="syz.2.607" name="#104" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.360711][ T28] audit: type=1400 audit(1724233628.034:621): avc: denied { unlink } for pid=1813 comm="syz-executor" name="bus" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.497020][ T441] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 74.603452][ T1955] loop2: detected capacity change from 0 to 256 [ 74.610071][ T1955] exfat: Deprecated parameter 'namecase' [ 74.615631][ T1955] exfat: Deprecated parameter 'utf8' [ 74.623045][ T1955] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 74.677061][ T43] EXT4-fs error: 17165 callbacks suppressed [ 74.677079][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 74.698659][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 74.713289][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 74.727966][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 74.742604][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 74.757297][ T441] usb 2-1: Using ep0 maxpacket: 16 [ 74.762574][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 74.777263][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 74.792231][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 74.807006][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 74.817165][ T1957] loop2: detected capacity change from 0 to 40427 [ 74.821959][ T43] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 13670508662569116710 in block_group 0 [ 74.832939][ T1957] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 74.846835][ T43] EXT4-fs warning: 51521 callbacks suppressed [ 74.846850][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 74.849793][ T1957] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 74.855712][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 74.873327][ T1957] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.879000][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 74.916820][ T441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.926060][ T1957] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 74.927586][ T441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.934445][ T1957] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 74.944096][ T441] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.966976][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 74.983190][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 74.999038][ T441] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 75.008128][ T441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.016430][ T295] usb 5-1: USB disconnect, device number 9 [ 75.022667][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 75.039033][ T441] usb 2-1: config 0 descriptor?? [ 75.045098][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 75.061496][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 75.078151][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 75.094365][ T43] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5633282580324253622 [ 75.498461][ T1970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'. [ 75.514945][ T1973] loop3: detected capacity change from 0 to 128 [ 75.517997][ T441] koneplus 0003:1E7D:2E22.0017: unknown main item tag 0x0 [ 75.528363][ T441] koneplus 0003:1E7D:2E22.0017: unknown main item tag 0x0 [ 75.537199][ T1973] /dev/loop3: Can't open blockdev [ 75.543282][ T441] koneplus 0003:1E7D:2E22.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 75.565410][ T1977] Zero length message leads to an empty skb [ 75.666557][ T1986] loop2: detected capacity change from 0 to 128 [ 75.700668][ T1986] syz.2.630: attempt to access beyond end of device [ 75.700668][ T1986] loop2: rw=34817, sector=121, nr_sectors = 8 limit=128 [ 75.725438][ T10] kworker/u4:1: attempt to access beyond end of device [ 75.725438][ T10] loop2: rw=1, sector=385, nr_sectors = 656 limit=128 [ 75.739026][ T441] koneplus 0003:1E7D:2E22.0017: couldn't init struct koneplus_device [ 75.760922][ T1988] device pim6reg1 entered promiscuous mode [ 75.761323][ T441] koneplus 0003:1E7D:2E22.0017: couldn't install mouse [ 75.788063][ T441] koneplus: probe of 0003:1E7D:2E22.0017 failed with error -71 [ 75.802230][ T441] usb 2-1: USB disconnect, device number 11 [ 75.812079][ T1976] loop4: detected capacity change from 0 to 40427 [ 75.849956][ T1976] F2FS-fs (loop4): invalid crc value [ 75.870054][ T1976] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.876179][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 75.876209][ T28] audit: type=1400 audit(1724233629.634:625): avc: denied { setopt } for pid=1996 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.905904][ T28] audit: type=1400 audit(1724233629.634:626): avc: denied { bind } for pid=1996 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.907457][ T1999] loop2: detected capacity change from 0 to 512 [ 75.925638][ T28] audit: type=1400 audit(1724233629.634:627): avc: denied { read } for pid=1996 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.945931][ T1999] EXT4-fs: Ignoring removed orlov option [ 75.955285][ T1976] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 75.968791][ T1999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.981307][ T1999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 75.990121][ T1327] syz-executor: attempt to access beyond end of device [ 75.990121][ T1327] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 76.004451][ T1999] System zones: 1-12 [ 76.009100][ T1999] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.635: casefold flag without casefold feature [ 76.009136][ T1327] syz-executor: attempt to access beyond end of device [ 76.009136][ T1327] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 76.035119][ T1999] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.635: missing EA_INODE flag [ 76.046872][ T1999] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.635: error while reading EA inode 12 err=-117 [ 76.047143][ T1327] syz-executor: attempt to access beyond end of device [ 76.047143][ T1327] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.073088][ T1999] EXT4-fs (loop2): 1 orphan inode deleted [ 76.078725][ T1999] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.093920][ T1999] EXT4-fs error (device loop2): __ext4_remount:6412: comm syz.2.635: Abort forced by user [ 76.104064][ T1999] EXT4-fs (loop2): Remounting filesystem read-only [ 76.116142][ T1813] EXT4-fs (loop2): unmounting filesystem. [ 76.408451][ T2013] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.415613][ T2013] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.432982][ T2013] device bridge_slave_0 entered promiscuous mode [ 76.442126][ T295] kernel write not supported for file bpf-prog (pid: 295 comm: kworker/0:2) [ 76.453251][ T2013] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.465134][ T2013] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.472600][ T2013] device bridge_slave_1 entered promiscuous mode [ 76.616547][ T2013] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.623452][ T2013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.630568][ T2013] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.636968][ T441] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 76.637668][ T2013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.673413][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.690907][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.699900][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.723808][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.732141][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.739081][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.747118][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.755170][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.762043][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.769759][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.785719][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.796995][ T790] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 76.813160][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.826724][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.834840][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.842256][ T28] audit: type=1400 audit(1724233630.604:628): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.843276][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.875667][ T2013] device veth0_vlan entered promiscuous mode [ 76.893727][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.903513][ T2013] device veth1_macvtap entered promiscuous mode [ 76.906980][ T441] usb 3-1: Using ep0 maxpacket: 32 [ 76.915476][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.925199][ T320] device bridge_slave_1 left promiscuous mode [ 76.932300][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.947551][ T320] device bridge_slave_0 left promiscuous mode [ 76.957751][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.968127][ T43] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 76.972882][ T28] audit: type=1400 audit(1724233630.734:629): avc: denied { unmount } for pid=1802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 76.985889][ T43] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.985889][ T43] [ 77.010699][ T1538] EXT4-fs (loop1): Inode 15 (ffff88810be496e0): i_reserved_data_blocks (1) not cleared! [ 77.012144][ T320] device veth1_macvtap left promiscuous mode [ 77.020795][ T1538] EXT4-fs (loop1): unmounting filesystem. [ 77.034361][ T320] device veth0_vlan left promiscuous mode [ 77.047042][ T441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 77.051955][ T2047] loop1: detected capacity change from 0 to 512 [ 77.067240][ T441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 77.078250][ T441] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 77.087786][ T441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.096347][ T441] usb 3-1: config 0 descriptor?? [ 77.102529][ T2047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.111451][ T2047] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 77.127070][ T2017] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 77.135017][ T1802] EXT4-fs (loop1): unmounting filesystem. [ 77.148640][ T441] hub 3-1:0.0: USB hub found [ 77.153942][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.177073][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 77.186843][ T790] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 77.357033][ T441] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 77.357146][ T790] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 77.374743][ T2056] loop0: detected capacity change from 0 to 40427 [ 77.378055][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.393909][ T790] usb 4-1: Product: syz [ 77.397979][ T790] usb 4-1: Manufacturer: syz [ 77.399225][ T2056] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 77.402456][ T790] usb 4-1: SerialNumber: syz [ 77.409734][ T2056] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 77.414272][ T790] usb 4-1: config 0 descriptor?? [ 77.422061][ T2056] F2FS-fs (loop0): fault_injection options not supported [ 77.433246][ T19] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 77.437752][ T2056] F2FS-fs (loop0): invalid crc value [ 77.447490][ T2056] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.467063][ T295] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 77.479229][ T2056] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 77.486267][ T2056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 77.499588][ T2056] F2FS-fs (loop0): switch discard_unit option is not allowed [ 77.507571][ T2056] syz.0.658: attempt to access beyond end of device [ 77.507571][ T2056] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 77.678857][ T790] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 77.687045][ T441] usbhid 3-1:0.0: can't add hid device: -71 [ 77.689143][ T790] usb 4-1: USB disconnect, device number 14 [ 77.693150][ T441] usbhid: probe of 3-1:0.0 failed with error -71 [ 77.704932][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 77.725682][ T834] udevd[834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.742148][ T441] usb 3-1: USB disconnect, device number 13 [ 77.857097][ T19] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 77.864925][ T19] usb 2-1: config 0 has no interface number 0 [ 77.870954][ T19] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 77.880753][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.891432][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.900959][ T295] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.909775][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.918466][ T295] usb 5-1: config 0 descriptor?? [ 77.927531][ T320] device bridge_slave_1 left promiscuous mode [ 77.933529][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.940861][ T320] device bridge_slave_0 left promiscuous mode [ 77.946774][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.954645][ T320] device veth1_macvtap left promiscuous mode [ 77.960501][ T320] device veth0_vlan left promiscuous mode [ 78.017139][ T19] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 78.028295][ T19] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 78.036123][ T19] usb 2-1: Product: syz [ 78.040147][ T19] usb 2-1: SerialNumber: syz [ 78.046269][ T19] usb 2-1: config 0 descriptor?? [ 78.067360][ T2051] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 78.184224][ T2068] loop3: detected capacity change from 0 to 512 [ 78.194988][ T2068] /dev/loop3: Can't open blockdev [ 78.269397][ T2073] loop3: detected capacity change from 0 to 512 [ 78.276734][ T2073] /dev/loop3: Can't open blockdev [ 78.337632][ T19] usb 2-1: invalid MIDI in EP 0 [ 78.348573][ T19] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 78.356164][ T19] usb 2-1: USB disconnect, device number 12 [ 78.363930][ T834] udevd[834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.379511][ T441] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 78.452190][ T2088] loop3: detected capacity change from 0 to 512 [ 78.459118][ T2088] /dev/loop3: Can't open blockdev [ 78.529858][ T2099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 78.587678][ T2107] device pim6reg1 entered promiscuous mode [ 78.617140][ T295] usb 5-1: language id specifier not provided by device, defaulting to English [ 78.658091][ T2111] loop3: detected capacity change from 0 to 1024 [ 78.664708][ T2111] EXT4-fs: Ignoring removed orlov option [ 78.670670][ T2111] /dev/loop3: Can't open blockdev [ 78.787101][ T441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.797918][ T441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.807781][ T441] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 78.816833][ T441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.826277][ T441] usb 3-1: config 0 descriptor?? [ 78.846756][ T2115] loop1: detected capacity change from 0 to 2048 [ 78.853245][ T2115] EXT4-fs: Ignoring removed orlov option [ 78.879067][ T2115] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.895043][ T2115] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.909901][ T2115] EXT4-fs (loop1): Remounting filesystem read-only [ 78.919711][ T1802] EXT4-fs (loop1): unmounting filesystem. [ 79.087120][ T295] uclogic 0003:256C:006D.0018: interface is invalid, ignoring [ 79.307550][ T295] usb 5-1: USB disconnect, device number 10 [ 79.319285][ T441] pantherlord 0003:0F30:0111.0019: item fetching failed at offset 6/7 [ 79.328118][ T441] pantherlord 0003:0F30:0111.0019: parse failed [ 79.334493][ T441] pantherlord: probe of 0003:0F30:0111.0019 failed with error -22 [ 79.335879][ T2133] syz.1.690 uses obsolete (PF_INET,SOCK_PACKET) [ 79.358030][ T28] audit: type=1400 audit(1724233633.124:630): avc: denied { write } for pid=2134 comm="syz.1.691" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.358110][ T2135] random: crng reseeded on system resumption [ 79.381042][ T28] audit: type=1400 audit(1724233633.124:631): avc: denied { open } for pid=2134 comm="syz.1.691" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.519453][ T39] usb 3-1: USB disconnect, device number 14 [ 79.727593][ T2137] loop3: detected capacity change from 0 to 128 [ 79.734001][ T2137] /dev/loop3: Can't open blockdev [ 79.769982][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 79.778916][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 79.817185][ T2143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.695'. [ 79.834493][ T2145] loop4: detected capacity change from 0 to 512 [ 79.858312][ T2145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.867365][ T2145] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 79.959740][ T2013] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 79.980227][ T2013] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 79.989646][ T2013] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 80.005586][ T2013] EXT4-fs (loop4): unmounting filesystem. [ 80.011638][ T2013] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 80.021068][ T2013] EXT4-fs error (device loop4): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 80.032892][ T2013] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 80.043587][ T2158] loop2: detected capacity change from 0 to 128 [ 80.043651][ T2013] EXT4-fs error (device loop4): ext4_quota_off:7053: inode #4: comm syz-executor: mark_inode_dirty error [ 80.088300][ T2158] syz.2.701: attempt to access beyond end of device [ 80.088300][ T2158] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 80.165898][ T2167] syz.2.706 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.227238][ T28] audit: type=1400 audit(1724233633.994:632): avc: denied { mounton } for pid=2172 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 80.302507][ T2172] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.312295][ T2172] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.326435][ T2172] device bridge_slave_0 entered promiscuous mode [ 80.334672][ T2172] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.343796][ T2172] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.351486][ T2172] device bridge_slave_1 entered promiscuous mode [ 80.451774][ T2172] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.458668][ T2172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.465801][ T2172] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.472676][ T2172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.499012][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.056909][ C0] sched: RT throttling activated [ 82.087276][ T28] audit: type=1400 audit(1724233635.854:633): avc: denied { write } for pid=2190 comm="syz.0.712" name="task" dev="proc" ino=29536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 82.108959][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.127488][ T28] audit: type=1400 audit(1724233635.884:634): avc: denied { add_name } for pid=2190 comm="syz.0.712" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 82.135783][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.147279][ T28] audit: type=1400 audit(1724233635.884:635): avc: denied { create } for pid=2190 comm="syz.0.712" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 82.175758][ T28] audit: type=1400 audit(1724233635.894:636): avc: denied { associate } for pid=2190 comm="syz.0.712" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.218563][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.226591][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.233465][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.262028][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.270558][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.277427][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.305708][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.314121][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.323092][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.331088][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.357449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.359712][ T28] audit: type=1326 audit(1724233636.124:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.1.724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79d1d79e79 code=0x0 [ 82.366271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.396810][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.405002][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.413089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.420911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.431206][ T2172] device veth0_vlan entered promiscuous mode [ 82.444523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.453864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.461317][ T28] audit: type=1400 audit(1724233636.214:638): avc: denied { write } for pid=2215 comm="syz.1.724" name="usbmon4" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.490714][ T2172] device veth1_macvtap entered promiscuous mode [ 82.501988][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.509836][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.518241][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.535161][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.547353][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.622695][ T2221] overlayfs: refusing to follow metacopy origin for (/file0) [ 82.648143][ T1752] device bridge_slave_1 left promiscuous mode [ 82.655251][ T1752] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.674989][ T1752] device bridge_slave_0 left promiscuous mode [ 82.681369][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.689479][ T1752] device veth1_macvtap left promiscuous mode [ 82.695386][ T1752] device veth0_vlan left promiscuous mode [ 83.171565][ T2231] loop3: detected capacity change from 0 to 1024 [ 83.178079][ T2231] /dev/loop3: Can't open blockdev [ 83.189491][ T2231] loop3: detected capacity change from 0 to 512 [ 83.196325][ T2231] /dev/loop3: Can't open blockdev [ 83.587506][ T1752] device bridge_slave_1 left promiscuous mode [ 83.593467][ T1752] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.600778][ T1752] device bridge_slave_0 left promiscuous mode [ 83.606685][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.614475][ T1752] device veth1_macvtap left promiscuous mode [ 83.620349][ T1752] device veth0_vlan left promiscuous mode [ 83.680415][ T2238] loop3: detected capacity change from 0 to 128 [ 83.717955][ T327] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.947194][ T1057] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 84.226972][ T1057] usb 2-1: device descriptor read/64, error -71 [ 84.514413][ T2238] syz.3.730 (2238) used greatest stack depth: 20176 bytes left [ 84.647027][ T1057] usb 2-1: device descriptor read/64, error -71 [ 84.917031][ T1057] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 84.998663][ T28] audit: type=1400 audit(1724233638.764:639): avc: denied { mount } for pid=2246 comm="syz.2.732" name="/" dev="configfs" ino=6889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 85.026065][ T28] audit: type=1400 audit(1724233638.784:640): avc: denied { read } for pid=2246 comm="syz.2.732" name="/" dev="configfs" ino=6889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.051696][ T28] audit: type=1400 audit(1724233638.784:641): avc: denied { open } for pid=2246 comm="syz.2.732" path="/46/file0" dev="configfs" ino=6889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.074220][ T28] audit: type=1400 audit(1724233638.784:642): avc: denied { unmount } for pid=1813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 85.207023][ T1057] usb 2-1: device descriptor read/64, error -71 [ 85.607046][ T1057] usb 2-1: device descriptor read/64, error -71 [ 85.727112][ T1057] usb usb2-port1: attempt power cycle [ 86.137023][ T1057] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 86.307045][ T1057] usb 2-1: device descriptor read/8, error -71 [ 86.577047][ T1057] usb 2-1: device descriptor read/8, error -71 [ 86.725712][ T2263] bridge: RTM_NEWNEIGH with invalid ether address [ 86.856966][ T1057] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 87.077095][ T1057] usb 2-1: device descriptor read/8, error -71 [ 87.347052][ T1057] usb 2-1: device descriptor read/8, error -71 [ 87.467051][ T1057] usb usb2-port1: unable to enumerate USB device [ 87.735926][ T2271] loop3: detected capacity change from 0 to 256 [ 87.740955][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 87.740973][ T28] audit: type=1400 audit(1724233641.494:644): avc: denied { map } for pid=2270 comm="syz.3.741" path="socket:[29870]" dev="sockfs" ino=29870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.746638][ T2271] /dev/loop3: Can't open blockdev [ 87.750708][ T28] audit: type=1400 audit(1724233641.494:645): avc: denied { read } for pid=2270 comm="syz.3.741" path="socket:[29870]" dev="sockfs" ino=29870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.099097][ T2291] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.383850][ T2303] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.329687][ T2315] loop2: detected capacity change from 0 to 128 [ 94.357950][ T2315] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 94.367375][ T2315] FAT-fs (loop2): Filesystem has been set read-only SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=4 req=705 state=1 status=67 (errno 9: Bad file descriptor) [ 94.390743][ T2315] syz.2.755: attempt to access beyond end of device [ 94.390743][ T2315] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.572312][ T2331] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.579550][ T2331] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.586652][ T2331] device bridge_slave_0 entered promiscuous mode [ 94.593495][ T2331] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.600699][ T2331] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.607995][ T2331] device bridge_slave_1 entered promiscuous mode [ 94.652179][ T2331] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.659059][ T2331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.666116][ T2331] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.673042][ T2331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.693154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.700925][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.708249][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.717186][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.725472][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.732341][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.742003][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.750166][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.757039][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.775583][ T2331] device veth0_vlan entered promiscuous mode [ 94.783131][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.791418][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.799249][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.806476][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.814034][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.821834][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.835858][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.844714][ T2331] device veth1_macvtap entered promiscuous mode [ 94.853465][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.863571][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.137463][ T1752] device bridge_slave_1 left promiscuous mode [ 95.143660][ T1752] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.150928][ T1752] device bridge_slave_0 left promiscuous mode [ 95.156864][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.164492][ T1752] device veth1_macvtap left promiscuous mode [ 95.170431][ T1752] device veth0_vlan left promiscuous mode [ 95.937697][ T1752] device bridge_slave_1 left promiscuous mode [ 95.943621][ T1752] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.950954][ T1752] device bridge_slave_0 left promiscuous mode [ 95.956871][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.964564][ T1752] device bridge_slave_1 left promiscuous mode [ 95.970581][ T1752] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.977972][ T1752] device bridge_slave_0 left promiscuous mode [ 95.983881][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.991454][ T1752] device bridge_slave_1 left promiscuous mode [ 95.997698][ T1752] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.004859][ T1752] device bridge_slave_0 left promiscuous mode [ 96.010908][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.018649][ T1752] device veth1_macvtap left promiscuous mode [ 96.024476][ T1752] device veth0_vlan left promiscuous mode [ 96.030407][ T1752] device veth1_macvtap left promiscuous mode [ 96.036215][ T1752] device veth0_vlan left promiscuous mode [ 96.042040][ T1752] device veth1_macvtap left promiscuous mode