last executing test programs: 16.849311568s ago: executing program 4 (id=1132): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 14.902061461s ago: executing program 4 (id=1147): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200), 0x20) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc0c0583b, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="6ea2a9e85c9e10bd"}}) 14.840105906s ago: executing program 4 (id=1148): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 14.307410491s ago: executing program 4 (id=1151): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000395000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xec07) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x5420, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9e4d22360780000004ff98023dffffffff00"}) 14.295705552s ago: executing program 4 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ptrace(0x10, 0x1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r3, 0x202, &(0x7f0000000000)) 6.827292948s ago: executing program 2 (id=1249): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 6.741455485s ago: executing program 2 (id=1251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000070000000700c6817842"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.892835451s ago: executing program 3 (id=1257): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) pread64(r2, &(0x7f00000000c0)=""/173, 0xad, 0x0) 4.820241976s ago: executing program 2 (id=1258): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000001200), 0x8) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="403715"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.997716715s ago: executing program 3 (id=1264): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}]}]}}]}, 0x44}}, 0x0) 3.977545027s ago: executing program 3 (id=1265): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 3.726803728s ago: executing program 1 (id=1269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0xce) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.69938913s ago: executing program 1 (id=1270): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) 3.34635132s ago: executing program 4 (id=1260): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpgrp(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000007c0)={@ipv4, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x200}, 0x20) 2.86625555s ago: executing program 0 (id=1276): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000300)='./file0\x00', 0x1100, 0x0) 2.359841533s ago: executing program 0 (id=1277): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000005c0)=@buf={0x0, &(0x7f0000000400)}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket(0x28, 0x1, 0x0) connect$packet(r1, &(0x7f0000000500)={0x28}, 0x14) connect$packet(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 2.359533912s ago: executing program 1 (id=1278): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) pipe(&(0x7f00000001c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040), 0x3b) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f08, 0x5, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x50, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 1.747409804s ago: executing program 0 (id=1279): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x66) sendto$inet6(r3, 0x0, 0x0, 0x2604c891, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x40000001) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 1.747135914s ago: executing program 1 (id=1280): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.746929664s ago: executing program 2 (id=1281): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x502, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.040171244s ago: executing program 1 (id=1282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 1.039722713s ago: executing program 2 (id=1283): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 1.039060173s ago: executing program 3 (id=1284): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 225.513152ms ago: executing program 0 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@jqfmt_vfsv0}, {@delalloc}, {@usrjquota}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==") 123.68925ms ago: executing program 1 (id=1286): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1000000000000000000000000018110000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_clone(0x2202351f, 0x0, 0x0, 0x0, 0x0, 0x0) 123.50203ms ago: executing program 2 (id=1287): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd974", 0x37, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) shutdown(r0, 0x1) 123.29462ms ago: executing program 3 (id=1288): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 48.784416ms ago: executing program 0 (id=1289): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x36}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 48.401236ms ago: executing program 3 (id=1290): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r3) 0s ago: executing program 0 (id=1291): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="15000000"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) kernel console output (not intermixed with test programs): 93.530470][ T713] hkems 0003:2006:0118.002E: parse failed [ 93.539335][ T2625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.890'. [ 93.544607][ T713] hkems: probe of 0003:2006:0118.002E failed with error -22 [ 93.723534][ T713] usb 5-1: USB disconnect, device number 15 [ 93.806056][ T2654] loop1: detected capacity change from 0 to 512 [ 93.813226][ T2654] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.824373][ T2654] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.836786][ T2654] EXT4-fs (loop1): 1 orphan inode deleted [ 93.850139][ T2654] EXT4-fs (loop1): 1 truncate cleaned up [ 93.857174][ T2654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.868891][ T2654] EXT4-fs (loop1): shut down requested (0) [ 93.901796][ T2009] EXT4-fs (loop1): unmounting filesystem. [ 93.950546][ T2659] loop0: detected capacity change from 0 to 1024 [ 93.958018][ T478] device bridge_slave_1 left promiscuous mode [ 93.963950][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.973718][ T2659] /dev/loop0: Can't open blockdev [ 93.988652][ T478] device bridge_slave_0 left promiscuous mode [ 94.006948][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.017505][ T478] device veth1_macvtap left promiscuous mode [ 94.027599][ T478] device veth0_vlan left promiscuous mode [ 94.037856][ T2673] loop2: detected capacity change from 0 to 128 [ 94.055244][ T2673] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 94.074029][ T2675] loop3: detected capacity change from 0 to 128 [ 94.100857][ T2673] syz.2.910: attempt to access beyond end of device [ 94.100857][ T2673] loop2: rw=34817, sector=97, nr_sectors = 49 limit=128 [ 94.115494][ T507] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.131519][ T28] audit: type=1400 audit(1724684269.339:467): avc: denied { read } for pid=2678 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.161549][ T28] audit: type=1400 audit(1724684269.369:468): avc: denied { bind } for pid=2683 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.199962][ T43] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 94.257536][ T2692] loop4: detected capacity change from 0 to 512 [ 94.291780][ T2692] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.303840][ T2692] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 94.316145][ T2692] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.919: corrupted inode contents [ 94.330718][ T2692] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.919: mark_inode_dirty error [ 94.342693][ T2692] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.919: corrupted inode contents [ 94.358774][ T2692] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.919: mark_inode_dirty error [ 94.388302][ T2692] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz.4.919: No space for directory leaf checksum. Please run e2fsck -D. [ 94.399630][ T28] audit: type=1400 audit(1724684269.599:469): avc: denied { connect } for pid=2706 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.403701][ T2692] EXT4-fs error (device loop4): ext4_readdir:220: inode #2: comm syz.4.919: path /23/file0: directory fails checksum at offset 0 [ 94.456511][ T2144] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.477557][ T2144] EXT4-fs error (device loop4): ext4_readdir:220: inode #2: comm syz-executor: path /23/file0: directory fails checksum at offset 0 [ 94.506659][ T2144] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /23/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 94.531861][ T2144] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.556591][ T2144] EXT4-fs error (device loop4): ext4_readdir:220: inode #2: comm syz-executor: path /23/file0: directory fails checksum at offset 18432 [ 94.579585][ T2144] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.616566][ T2144] EXT4-fs error (device loop4): ext4_readdir:220: inode #2: comm syz-executor: path /23/file0: directory fails checksum at offset 20480 [ 94.637627][ T2144] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.671314][ T2144] EXT4-fs error (device loop4): ext4_readdir:220: inode #2: comm syz-executor: path /23/file0: directory fails checksum at offset 22528 [ 94.704940][ T2144] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.706602][ T2717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 94.737172][ T2144] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.760110][ T2709] loop1: detected capacity change from 0 to 40427 [ 94.766544][ T2717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'. [ 94.775394][ T2709] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 94.783069][ T2144] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.787415][ T2709] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.798956][ T2144] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.815841][ T2709] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.842288][ T28] audit: type=1400 audit(1724684270.049:470): avc: denied { connect } for pid=2722 comm="syz.3.933" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.870691][ T2144] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.921302][ T2709] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.941203][ T2709] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.947207][ T2718] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.958386][ T2718] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.971574][ T2718] device bridge_slave_0 entered promiscuous mode [ 95.003193][ T2718] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.020629][ T2718] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.028980][ T2718] device bridge_slave_1 entered promiscuous mode [ 95.174114][ T28] audit: type=1400 audit(1724684270.379:471): avc: denied { module_request } for pid=2718 comm="syz-executor" kmod="rtnl-link-hsr" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 95.244664][ T28] audit: type=1400 audit(1724684270.389:472): avc: denied { read write } for pid=1824 comm="syz-executor" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.276285][ T2718] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.283163][ T2718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.290257][ T2718] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.297045][ T2718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.325314][ T28] audit: type=1400 audit(1724684270.389:473): avc: denied { open } for pid=1824 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.354453][ T28] audit: type=1400 audit(1724684270.389:474): avc: denied { ioctl } for pid=1824 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.392876][ T478] device bridge_slave_1 left promiscuous mode [ 95.392928][ T28] audit: type=1400 audit(1724684270.409:475): avc: denied { bpf } for pid=2736 comm="syz.3.938" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.404662][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.423857][ T28] audit: type=1400 audit(1724684270.409:476): avc: denied { prog_load } for pid=2736 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.455392][ T478] device bridge_slave_0 left promiscuous mode [ 95.464913][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.477928][ T478] device veth1_macvtap left promiscuous mode [ 95.483835][ T478] device veth0_vlan left promiscuous mode [ 95.596454][ T310] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 95.617566][ T2751] device pim6reg1 entered promiscuous mode [ 95.651898][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.661110][ T713] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.673072][ T713] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.699088][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.711357][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.723229][ T713] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.730096][ T713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.740786][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.752856][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.764477][ T713] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.771329][ T713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.781457][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.793232][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.804250][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.836688][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.847942][ T2757] loop1: detected capacity change from 0 to 512 [ 95.854211][ T2718] device veth0_vlan entered promiscuous mode [ 95.860153][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 95.873447][ T2757] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.894258][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.905260][ T2759] loop0: detected capacity change from 0 to 512 [ 95.912033][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.923901][ T2757] EXT4-fs (loop1): 1 truncate cleaned up [ 95.929433][ T2757] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.929787][ T2759] /dev/loop0: Can't open blockdev [ 95.942912][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.957193][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.969077][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.976987][ T2009] EXT4-fs (loop1): unmounting filesystem. [ 95.982657][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.997915][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.019146][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.029421][ T310] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 96.032035][ T2718] device veth1_macvtap entered promiscuous mode [ 96.038456][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.062203][ T310] usb 4-1: config 0 descriptor?? [ 96.064571][ T2763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'. [ 96.079431][ T2765] usb usb5: usbfs: process 2765 (syz.1.948) did not claim interface 0 before use [ 96.089033][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.098742][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.109035][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.135537][ T2763] Zero length message leads to an empty skb [ 96.141518][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.149863][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.158600][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.171077][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.231530][ T2774] loop0: detected capacity change from 0 to 512 [ 96.239352][ T2776] loop2: detected capacity change from 0 to 512 [ 96.241696][ T2774] /dev/loop0: Can't open blockdev [ 96.257511][ T2776] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.282190][ T2776] EXT4-fs (loop2): 1 orphan inode deleted [ 96.287911][ T2776] EXT4-fs (loop2): 1 truncate cleaned up [ 96.293293][ T2776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.310973][ T2776] EXT4-fs error (device loop2): ext4_lookup:1855: inode #15: comm syz.2.953: iget: bad extra_isize 46 (inode size 256) [ 96.323779][ T2776] EXT4-fs (loop2): Remounting filesystem read-only [ 96.331121][ T2776] EXT4-fs error (device loop2): __ext4_remount:6412: comm syz.2.953: Abort forced by user [ 96.341413][ T2776] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 96.367199][ T2718] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 524051: comm syz-executor: invalid block [ 96.388857][ T2718] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 524051: comm syz-executor: invalid block [ 96.400391][ T382] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 96.485710][ T2718] EXT4-fs (loop2): unmounting filesystem. [ 96.496703][ T2718] Trying to write to read-only block-device loop2 [ 96.503073][ T2718] Trying to write to read-only block-device loop2 [ 96.526585][ T2718] Trying to write to read-only block-device loop2 [ 96.536597][ T2718] Trying to write to read-only block-device loop2 [ 96.538076][ T310] playstation 0003:054C:0CE6.002F: unknown main item tag 0x0 [ 96.542864][ T2718] Trying to write to read-only block-device loop2 [ 96.552603][ T310] playstation 0003:054C:0CE6.002F: unknown main item tag 0x0 [ 96.569035][ T2784] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.576032][ T2784] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.576469][ T2718] Trying to write to read-only block-device loop2 [ 96.583125][ T310] playstation 0003:054C:0CE6.002F: unknown main item tag 0x0 [ 96.599089][ T310] playstation 0003:054C:0CE6.002F: unknown main item tag 0x0 [ 96.599279][ T2718] Trying to write to read-only block-device loop2 [ 96.606379][ T310] playstation 0003:054C:0CE6.002F: unknown main item tag 0x0 [ 96.606700][ T2784] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.626701][ T2784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.633788][ T2784] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.640602][ T2784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.646626][ T382] usb 2-1: Using ep0 maxpacket: 32 [ 96.652563][ T310] playstation 0003:054C:0CE6.002F: unknown main item tag 0x0 [ 96.659958][ T310] playstation 0003:054C:0CE6.002F: unknown main item tag 0x0 [ 96.675088][ T310] playstation 0003:054C:0CE6.002F: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 96.686769][ T2784] device bridge0 entered promiscuous mode [ 96.776554][ T382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.796462][ T382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.796507][ T310] playstation 0003:054C:0CE6.002F: Invalid reportID received, expected 9 got 0 [ 96.814404][ T382] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 96.833993][ T382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.835094][ T310] playstation 0003:054C:0CE6.002F: Failed to retrieve DualSense pairing info: -22 [ 96.851732][ T382] usb 2-1: config 0 descriptor?? [ 96.866488][ T310] playstation 0003:054C:0CE6.002F: Failed to get MAC address from DualSense [ 96.875016][ T310] playstation 0003:054C:0CE6.002F: Failed to create dualsense. [ 96.884305][ T310] playstation: probe of 0003:054C:0CE6.002F failed with error -22 [ 96.897301][ T382] hub 2-1:0.0: USB hub found [ 96.916215][ T2786] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.923275][ T2786] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.930875][ T2786] device bridge_slave_0 entered promiscuous mode [ 96.939985][ T2786] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.946972][ T2786] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.954283][ T2786] device bridge_slave_1 entered promiscuous mode [ 97.006187][ T229] usb 4-1: USB disconnect, device number 21 [ 97.045506][ T2786] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.052362][ T2786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.059484][ T2786] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.066244][ T2786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.077890][ T324] device bridge_slave_1 left promiscuous mode [ 97.083856][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.091505][ T324] device bridge_slave_0 left promiscuous mode [ 97.097871][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.105716][ T324] device veth1_macvtap left promiscuous mode [ 97.111878][ T382] hub 2-1:0.0: 1 port detected [ 97.116716][ T324] device veth0_vlan left promiscuous mode [ 97.182843][ T2144] EXT4-fs (loop4): unmounting filesystem. [ 97.253527][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.260917][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.271155][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.282721][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.297589][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.305880][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.322047][ T2786] device veth0_vlan entered promiscuous mode [ 97.336249][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.344300][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.351719][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.364853][ T2793] loop0: detected capacity change from 0 to 512 [ 97.367357][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.384757][ T2793] EXT4-fs: Ignoring removed orlov option [ 97.390430][ T2793] /dev/loop0: Can't open blockdev [ 97.396484][ T2786] device veth1_macvtap entered promiscuous mode [ 97.407036][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.421138][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.507192][ T2803] futex_wake_op: syz.0.964 tries to shift op by -1; fix this program [ 97.519776][ T2794] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.528318][ T2794] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.539895][ T2794] device bridge_slave_0 entered promiscuous mode [ 97.552229][ T2794] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.553580][ T2809] loop0: detected capacity change from 0 to 512 [ 97.559079][ T2794] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.559550][ T2794] device bridge_slave_1 entered promiscuous mode [ 97.581868][ T2809] EXT4-fs: Ignoring removed i_version option [ 97.587912][ T2809] EXT4-fs: Ignoring removed nobh option [ 97.593390][ T2809] /dev/loop0: Can't open blockdev [ 97.633167][ T2807] loop3: detected capacity change from 0 to 1024 [ 97.640689][ T2807] /dev/loop3: Can't open blockdev [ 97.662850][ T2794] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.669706][ T2794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.676787][ T2794] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.683572][ T2794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.697469][ T507] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.708409][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.716864][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.735006][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.736468][ T313] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 97.742409][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.756672][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.764725][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.766570][ T229] hub 2-1:0.0: activate --> -90 [ 97.772727][ T713] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.784040][ T713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.791937][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.800190][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.808221][ T713] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.815057][ T713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.828686][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.836680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.847207][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.854996][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.869633][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.877857][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.889207][ T2794] device veth0_vlan entered promiscuous mode [ 97.896450][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.904104][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.912369][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.919610][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.931654][ T2794] device veth1_macvtap entered promiscuous mode [ 97.938310][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.946186][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.954122][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.966741][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.974748][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.983211][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.991530][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.076556][ T382] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 98.088248][ T24] usb 2-1: USB disconnect, device number 12 [ 98.106514][ T229] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 98.113121][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.125187][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.134760][ T313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.147564][ T313] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 98.156440][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.157185][ T324] device bridge_slave_1 left promiscuous mode [ 98.164849][ T313] usb 3-1: config 0 descriptor?? [ 98.175418][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.182918][ T324] device bridge_slave_0 left promiscuous mode [ 98.189128][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.198699][ T324] device veth1_macvtap left promiscuous mode [ 98.204315][ T2826] loop4: detected capacity change from 0 to 512 [ 98.204532][ T324] device veth0_vlan left promiscuous mode [ 98.211790][ T2826] EXT4-fs: Ignoring removed orlov option [ 98.222043][ T2826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.233278][ T2826] EXT4-fs (loop4): 1 truncate cleaned up [ 98.239118][ T2826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.267355][ T2794] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 98.288797][ T2794] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 98.308799][ T2794] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 98.329966][ T382] usb 4-1: Using ep0 maxpacket: 8 [ 98.330204][ T2794] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 98.354769][ T2794] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 98.376160][ T2794] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 98.396847][ T2794] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 98.419482][ T2794] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 98.439508][ T2794] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 98.456505][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.461415][ T2794] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 98.471126][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.471160][ T382] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 98.509138][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.518575][ T382] usb 4-1: config 0 descriptor?? [ 98.587693][ T2794] EXT4-fs (loop4): unmounting filesystem. [ 98.647354][ T313] betop 0003:11C2:2208.0030: item fetching failed at offset 4/5 [ 98.656748][ T313] betop 0003:11C2:2208.0030: parse failed [ 98.662306][ T313] betop: probe of 0003:11C2:2208.0030 failed with error -22 [ 98.730565][ T2832] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.737573][ T2832] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.745080][ T2832] device bridge_slave_0 entered promiscuous mode [ 98.752161][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.759178][ T2832] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.767382][ T2832] device bridge_slave_1 entered promiscuous mode [ 98.836267][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.843124][ T2832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.850236][ T2832] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.857020][ T2832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.876821][ T713] usb 3-1: USB disconnect, device number 16 [ 98.878827][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.890936][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.898280][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.917583][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.925495][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.932245][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.939889][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.947902][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.954723][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.961933][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.969763][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.983879][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.995373][ T2832] device veth0_vlan entered promiscuous mode [ 99.002187][ T382] hid-picolcd 0003:04D8:F002.0031: item fetching failed at offset 5/7 [ 99.009980][ T2832] device veth1_macvtap entered promiscuous mode [ 99.011189][ T382] hid-picolcd 0003:04D8:F002.0031: device report parse failed [ 99.023785][ T382] hid-picolcd: probe of 0003:04D8:F002.0031 failed with error -22 [ 99.035733][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.043951][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.052181][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.060086][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.067276][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.074680][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.202987][ T2846] loop4: detected capacity change from 0 to 512 [ 99.219856][ T313] usb 4-1: USB disconnect, device number 22 [ 99.225776][ T2846] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.233141][ T2846] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.244144][ T2846] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.979: corrupted in-inode xattr [ 99.256043][ T2846] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.979: couldn't read orphan inode 15 (err -117) [ 99.267909][ T2846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.278980][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 99.278992][ T28] audit: type=1400 audit(1724684274.489:566): avc: denied { setattr } for pid=2845 comm="syz.4.979" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.312560][ T2832] EXT4-fs (loop4): unmounting filesystem. [ 99.744452][ T28] audit: type=1326 audit(1724684274.949:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2869 comm="syz.3.989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc286379e79 code=0x0 [ 99.777153][ T311] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 99.786609][ T713] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 100.036488][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 100.076523][ T713] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 100.406802][ T311] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 100.415747][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.423522][ T311] usb 2-1: Product: syz [ 100.427520][ T311] usb 2-1: Manufacturer: syz [ 100.431890][ T311] usb 2-1: SerialNumber: syz [ 100.437337][ T311] usb 2-1: config 0 descriptor?? [ 100.789821][ T2895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.997'. [ 100.811178][ T28] audit: type=1400 audit(1724684276.019:568): avc: denied { create } for pid=2896 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.830840][ T28] audit: type=1400 audit(1724684276.019:569): avc: denied { getopt } for pid=2896 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.836572][ T713] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 100.875629][ T28] audit: type=1400 audit(1724684276.079:570): avc: denied { unmount } for pid=2597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 100.890837][ T713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.927966][ T2907] syz.2.1004[2907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.928028][ T2907] syz.2.1004[2907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.950411][ T28] audit: type=1400 audit(1724684276.159:571): avc: denied { read } for pid=2908 comm="syz.2.1005" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.984050][ T28] audit: type=1400 audit(1724684276.159:572): avc: denied { open } for pid=2908 comm="syz.2.1005" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.007059][ T28] audit: type=1400 audit(1724684276.159:573): avc: denied { ioctl } for pid=2908 comm="syz.2.1005" path="/dev/ppp" dev="devtmpfs" ino=138 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.051208][ T2913] loop0: detected capacity change from 0 to 256 [ 101.058432][ T2913] /dev/loop0: Can't open blockdev [ 101.067797][ T2915] loop2: detected capacity change from 0 to 1024 [ 101.074506][ T2915] /dev/loop2: Can't open blockdev [ 101.083720][ T28] audit: type=1400 audit(1724684276.289:574): avc: denied { getopt } for pid=2914 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.106716][ T2913] loop0: detected capacity change from 256 to 0 [ 101.118688][ T311] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3a:ff:04:2a:5d:dc [ 101.137108][ T311] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 101.145735][ T311] usb 2-1: USB disconnect, device number 13 [ 101.152943][ T28] audit: type=1400 audit(1724684276.359:575): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 101.386570][ T713] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 101.396188][ T713] usb 5-1: No valid video chain found. [ 101.436467][ T24] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 101.593023][ T311] usb 5-1: USB disconnect, device number 16 [ 101.666912][ T8] device bridge_slave_1 left promiscuous mode [ 101.672881][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.680131][ T8] device bridge_slave_0 left promiscuous mode [ 101.686030][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.694127][ T8] device veth1_macvtap left promiscuous mode [ 101.700113][ T8] device veth0_vlan left promiscuous mode [ 101.776450][ T313] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 101.786464][ T294] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 101.796661][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.807562][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.818432][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.828059][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 101.840759][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 101.852427][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.860822][ T24] usb 1-1: config 0 descriptor?? [ 102.116447][ T311] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 102.136497][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.147445][ T294] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.157675][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.167633][ T294] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.176556][ T313] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 102.185583][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.194245][ T313] usb 3-1: config 0 descriptor?? [ 102.256528][ T294] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.265487][ T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.273342][ T294] usb 4-1: SerialNumber: syz [ 102.337420][ T24] hid-rmi 0003:17EF:6085.0032: unknown main item tag 0x0 [ 102.346158][ T24] hid-rmi 0003:17EF:6085.0032: unknown main item tag 0x0 [ 102.353176][ T24] hid-rmi 0003:17EF:6085.0032: unknown main item tag 0x0 [ 102.363749][ T24] hid-rmi 0003:17EF:6085.0032: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.0-1/input0 [ 102.476498][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.487406][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.497006][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.509739][ T311] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 102.519276][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.530596][ T311] usb 2-1: config 0 descriptor?? [ 102.537251][ T294] usb 4-1: 0:2 : does not exist [ 102.556899][ T19] usb 1-1: USB disconnect, device number 15 [ 102.677295][ T313] cp2112 0003:10C4:EA90.0033: item fetching failed at offset 5/7 [ 102.684972][ T313] cp2112 0003:10C4:EA90.0033: parse failed [ 102.690534][ T313] cp2112: probe of 0003:10C4:EA90.0033 failed with error -22 [ 102.959179][ T313] usb 4-1: USB disconnect, device number 23 [ 103.008891][ T311] wacom 0003:056A:00C5.0034: hidraw0: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.1-1/input0 [ 103.213142][ T19] usb 2-1: USB disconnect, device number 14 [ 103.717381][ T8] device bridge_slave_1 left promiscuous mode [ 103.728476][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.746951][ T8] device bridge_slave_0 left promiscuous mode [ 103.752909][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.767431][ T8] device veth1_macvtap left promiscuous mode [ 103.773272][ T8] device veth0_vlan left promiscuous mode [ 104.022928][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.030045][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.037251][ T2999] device bridge_slave_0 entered promiscuous mode [ 104.046101][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.052956][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.060923][ T2999] device bridge_slave_1 entered promiscuous mode [ 104.074201][ T3011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1040'. [ 104.083386][ T3011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1040'. [ 104.168962][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.175849][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.183097][ T3005] device bridge_slave_0 entered promiscuous mode [ 104.189765][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.196837][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.204003][ T3005] device bridge_slave_1 entered promiscuous mode [ 104.302812][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.309882][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.317256][ T3016] device bridge_slave_0 entered promiscuous mode [ 104.328247][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.335163][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.342431][ T3016] device bridge_slave_1 entered promiscuous mode [ 104.375663][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.382921][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.393114][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.401587][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.409603][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.416450][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.423677][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.431978][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.439980][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.446813][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.467201][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.497586][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.505430][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.522603][ T19] usb 3-1: USB disconnect, device number 17 [ 104.536132][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.542162][ T3021] loop2: detected capacity change from 0 to 1024 [ 104.544453][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.563750][ T3021] /dev/loop2: Can't open blockdev [ 104.575121][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.583244][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.591378][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.599335][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.611887][ T2999] device veth0_vlan entered promiscuous mode [ 104.618700][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.625856][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.643443][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.650971][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.661064][ T3023] loop2: detected capacity change from 0 to 1024 [ 104.667516][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.671995][ T3023] EXT4-fs: Ignoring removed orlov option [ 104.675811][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.681142][ T3023] /dev/loop2: Can't open blockdev [ 104.689749][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.700505][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.709203][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.714029][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 104.714044][ T28] audit: type=1400 audit(1724684279.919:595): avc: denied { execute } for pid=3022 comm="syz.2.1044" path="/27/bus" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.717352][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.753346][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.760209][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.793082][ T2999] device veth1_macvtap entered promiscuous mode [ 104.800251][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.810835][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.819470][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.843550][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.851290][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.859797][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.874319][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.882015][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.890485][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.903529][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.911670][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.919846][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.926801][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.934136][ T28] audit: type=1400 audit(1724684280.139:596): avc: denied { read } for pid=3031 comm="syz.0.1048" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.957033][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.964858][ T28] audit: type=1400 audit(1724684280.139:597): avc: denied { open } for pid=3031 comm="syz.0.1048" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.993559][ T28] audit: type=1400 audit(1724684280.169:598): avc: denied { ioctl } for pid=3031 comm="syz.0.1048" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 105.021462][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.029931][ T2061] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.036800][ T2061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.054791][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.062569][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.069859][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.080699][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.094458][ T3005] device veth0_vlan entered promiscuous mode [ 105.112897][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.133405][ T3005] device veth1_macvtap entered promiscuous mode [ 105.146594][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.153222][ T28] audit: type=1400 audit(1724684280.359:599): avc: denied { unmount } for pid=2999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.155234][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.196977][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.204631][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.226876][ T3016] device veth0_vlan entered promiscuous mode [ 105.233094][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.240408][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.247681][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.255745][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.264092][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.272578][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.297395][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.316030][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.325397][ T3016] device veth1_macvtap entered promiscuous mode [ 105.335465][ T8] device bridge_slave_1 left promiscuous mode [ 105.341711][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.354081][ T8] device bridge_slave_0 left promiscuous mode [ 105.360152][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.360666][ T294] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 105.375649][ T8] device bridge_slave_1 left promiscuous mode [ 105.381683][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.389275][ T8] device bridge_slave_0 left promiscuous mode [ 105.395203][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.403373][ T8] device veth1_macvtap left promiscuous mode [ 105.409406][ T8] device veth0_vlan left promiscuous mode [ 105.415344][ T8] device veth1_macvtap left promiscuous mode [ 105.422117][ T8] device veth0_vlan left promiscuous mode [ 105.646719][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.654139][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.662160][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.670288][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.678302][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.726619][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.737777][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.748403][ T3046] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.755372][ T3046] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.757888][ T294] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 105.767878][ T3046] device bridge_slave_0 entered promiscuous mode [ 105.779137][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.785835][ T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.790979][ T3046] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.796783][ T294] usb 3-1: config 0 descriptor?? [ 105.806252][ T3046] device bridge_slave_1 entered promiscuous mode [ 105.858291][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.865122][ T3046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.872241][ T3046] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.879025][ T3046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.906927][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.914327][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.922540][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.932071][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.939893][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.956539][ T3046] device veth0_vlan entered promiscuous mode [ 105.966949][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.975051][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.982971][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.990223][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.997599][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.006159][ T3046] device veth1_macvtap entered promiscuous mode [ 106.020785][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.030173][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.066481][ T382] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 106.278518][ T294] hid-multitouch 0003:1FD2:6007.0035: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 106.426480][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.437213][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.446980][ T382] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.455830][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.464209][ T382] usb 1-1: config 0 descriptor?? [ 106.483337][ T294] usb 3-1: USB disconnect, device number 18 [ 106.526504][ T311] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 106.676816][ T8] device bridge_slave_1 left promiscuous mode [ 106.682783][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.690238][ T8] device bridge_slave_0 left promiscuous mode [ 106.696201][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.703961][ T8] device veth1_macvtap left promiscuous mode [ 106.709803][ T8] device veth0_vlan left promiscuous mode [ 106.886541][ T713] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 106.906538][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.917271][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.927039][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 106.935951][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.944541][ T311] usb 4-1: config 0 descriptor?? [ 106.946750][ T382] hid (null): bogus close delimiter [ 107.276494][ T713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.287483][ T713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.296968][ T713] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 107.305785][ T713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.315351][ T713] usb 2-1: config 0 descriptor?? [ 107.417717][ T3074] loop3: detected capacity change from 0 to 128 [ 107.446694][ T382] usb 1-1: string descriptor 0 read error: -71 [ 107.457021][ T507] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.466561][ T382] uclogic 0003:256C:006D.0036: failed retrieving string descriptor #200: -71 [ 107.475138][ T382] uclogic 0003:256C:006D.0036: failed retrieving pen parameters: -71 [ 107.483178][ T382] uclogic 0003:256C:006D.0036: failed probing pen v2 parameters: -71 [ 107.491120][ T382] uclogic 0003:256C:006D.0036: failed probing parameters: -71 [ 107.496799][ T311] hid (null): unknown global tag 0xd [ 107.498394][ T382] uclogic: probe of 0003:256C:006D.0036 failed with error -71 [ 107.506319][ T311] lg-g15 0003:046D:C222.0037: unknown global tag 0xd [ 107.515667][ T382] usb 1-1: USB disconnect, device number 16 [ 107.517920][ T311] lg-g15 0003:046D:C222.0037: item 0 1 1 13 parsing failed [ 107.530373][ T311] lg-g15: probe of 0003:046D:C222.0037 failed with error -22 [ 107.705722][ T39] usb 4-1: USB disconnect, device number 24 [ 107.796682][ T713] hid (null): bogus close delimiter [ 108.136456][ T311] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 112.155545][ T28] audit: type=1400 audit(1724684287.359:600): avc: denied { watch } for pid=3105 comm="syz.0.1071" path="/31" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 112.177158][ T713] usb 2-1: string descriptor 0 read error: -71 [ 112.196516][ T713] uclogic 0003:256C:006D.0038: failed retrieving string descriptor #200: -71 [ 112.205131][ T713] uclogic 0003:256C:006D.0038: failed retrieving pen parameters: -71 [ 112.213185][ T713] uclogic 0003:256C:006D.0038: failed probing pen v2 parameters: -71 [ 112.221299][ T713] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 112.228742][ T713] uclogic: probe of 0003:256C:006D.0038 failed with error -71 [ 112.237209][ T713] usb 2-1: USB disconnect, device number 15 [ 112.345540][ T3116] loop0: detected capacity change from 0 to 128 [ 112.376812][ T3100] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.626459][ T713] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 112.780341][ T28] audit: type=1400 audit(1724684287.959:601): avc: denied { read } for pid=3122 comm="syz.2.1078" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 112.804858][ T28] audit: type=1400 audit(1724684287.959:602): avc: denied { open } for pid=3122 comm="syz.2.1078" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 112.876460][ T713] usb 2-1: Using ep0 maxpacket: 16 [ 112.996568][ T713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.011953][ T3132] loop2: detected capacity change from 0 to 256 [ 113.018348][ T713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.033583][ T3132] /dev/loop2: Can't open blockdev [ 113.038826][ T713] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.052322][ T713] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 113.061392][ T713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.073757][ T713] usb 2-1: config 0 descriptor?? [ 113.226119][ T3140] loop0: detected capacity change from 0 to 1024 [ 113.232580][ T3140] EXT4-fs: Ignoring removed oldalloc option [ 113.238347][ T3140] EXT4-fs: Ignoring removed orlov option [ 113.243844][ T3140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.249289][ T3135] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.250279][ T3140] /dev/loop0: Can't open blockdev [ 113.276457][ T382] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 113.318059][ T3146] loop0: detected capacity change from 0 to 512 [ 113.326516][ T3146] EXT4-fs: Mount option(s) incompatible with ext3 [ 113.353547][ T3148] loop4: detected capacity change from 0 to 512 [ 113.368326][ T3148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.377095][ T3148] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 113.401007][ T28] audit: type=1400 audit(1724684288.609:603): avc: denied { unlink } for pid=3046 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.423302][ T28] audit: type=1400 audit(1724684288.609:604): avc: denied { unlink } for pid=3046 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 113.447461][ T3046] EXT4-fs (loop4): unmounting filesystem. [ 113.567229][ T713] koneplus 0003:1E7D:2E22.0039: unknown main item tag 0x0 [ 113.574341][ T311] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 113.582257][ T713] koneplus 0003:1E7D:2E22.0039: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 113.626549][ T19] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 113.636516][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.647285][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.656781][ T382] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.665618][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.674244][ T382] usb 4-1: config 0 descriptor?? [ 113.746477][ T2061] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 113.776490][ T713] koneplus 0003:1E7D:2E22.0039: couldn't init struct koneplus_device [ 113.784444][ T713] koneplus 0003:1E7D:2E22.0039: couldn't install mouse [ 113.791942][ T713] koneplus: probe of 0003:1E7D:2E22.0039 failed with error -5 [ 113.876469][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 113.946481][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.957274][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.966735][ T311] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.975561][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.983890][ T39] usb 2-1: USB disconnect, device number 16 [ 113.984562][ T311] usb 3-1: config 0 descriptor?? [ 113.996597][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.007328][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.016853][ T19] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 114.025665][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.034879][ T19] usb 1-1: config 0 descriptor?? [ 114.106493][ T2061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.117322][ T2061] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.130045][ T2061] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.138844][ T2061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.147159][ T2061] usb 5-1: config 0 descriptor?? [ 114.517719][ T19] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 114.526122][ T19] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 114.533051][ T19] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 114.540315][ T19] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 114.547481][ T19] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 114.557182][ T19] cp2112 0003:10C4:EA90.003C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 114.627557][ T2061] plantronics 0003:047F:FFFF.003D: No inputs registered, leaving [ 114.644498][ T2061] plantronics 0003:047F:FFFF.003D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 114.646627][ T3160] loop1: detected capacity change from 0 to 40427 [ 114.664263][ T3160] F2FS-fs (loop1): invalid crc value [ 114.671618][ T3160] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.676571][ T311] usb 3-1: language id specifier not provided by device, defaulting to English [ 114.706836][ T3160] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 114.721301][ T28] audit: type=1400 audit(1724684289.929:605): avc: denied { setattr } for pid=3159 comm="syz.1.1092" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.721851][ T3161] f2fs_ckpt-7:1: attempt to access beyond end of device [ 114.721851][ T3161] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 114.743388][ T19] cp2112 0003:10C4:EA90.003C: Part Number: 0x00 Device Version: 0x00 [ 114.763137][ T3016] syz-executor: attempt to access beyond end of device [ 114.763137][ T3016] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 114.778992][ T3016] syz-executor: attempt to access beyond end of device [ 114.778992][ T3016] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 114.798280][ T382] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003A/input/input24 [ 114.817022][ T28] audit: type=1400 audit(1724684290.029:606): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=919 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.839021][ T28] audit: type=1400 audit(1724684290.029:607): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=919 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.843916][ T382] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003A/input/input25 [ 114.874411][ T382] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003A/input/input26 [ 114.889522][ T28] audit: type=1400 audit(1724684290.099:608): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=919 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.901453][ T382] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003A/input/input27 [ 114.956604][ T382] uclogic 0003:256C:006D.003A: input,hiddev97,hidraw2: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 115.033991][ T382] usb 4-1: USB disconnect, device number 25 [ 115.094464][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.101575][ T3166] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.108826][ T3166] device bridge_slave_0 entered promiscuous mode [ 115.117345][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.124254][ T3166] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.131688][ T3166] device bridge_slave_1 entered promiscuous mode [ 115.166693][ T311] uclogic 0003:256C:006D.003B: interface is invalid, ignoring [ 115.221340][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.228334][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.235438][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.242231][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.243573][ T311] usb 3-1: USB disconnect, device number 20 [ 115.273857][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.281310][ T2061] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.288970][ T2061] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.299545][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.307684][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.314505][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.327315][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.335334][ T2061] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.342172][ T2061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.349699][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.360158][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.374033][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.385572][ T3166] device veth0_vlan entered promiscuous mode [ 115.386560][ T19] cp2112 0003:10C4:EA90.003C: error reading lock byte: -71 [ 115.391864][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.404927][ T19] usb 1-1: USB disconnect, device number 17 [ 115.406729][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.419518][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.433017][ T3166] device veth1_macvtap entered promiscuous mode [ 115.439861][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.453651][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.461928][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.478109][ T324] device bridge_slave_1 left promiscuous mode [ 115.485724][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.493580][ T324] device bridge_slave_0 left promiscuous mode [ 115.500016][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.508150][ T324] device veth1_macvtap left promiscuous mode [ 115.514050][ T324] device veth0_vlan left promiscuous mode [ 115.558401][ T310] usb 5-1: USB disconnect, device number 17 [ 115.575744][ T28] audit: type=1400 audit(1724684290.779:609): avc: denied { mount } for pid=3175 comm="syz.3.1096" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 115.776496][ T313] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 115.808622][ T3186] loop2: detected capacity change from 0 to 512 [ 115.827752][ T3186] /dev/loop2: Can't open blockdev [ 116.036809][ T313] usb 2-1: Using ep0 maxpacket: 8 [ 116.157408][ T3206] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.164263][ T3206] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.171647][ T3206] device bridge_slave_0 entered promiscuous mode [ 116.178923][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.179144][ T3206] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.196453][ T382] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 116.196504][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.213676][ T3206] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.213685][ T313] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 116.221361][ T3206] device bridge_slave_1 entered promiscuous mode [ 116.229592][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.252150][ T313] usb 2-1: config 0 descriptor?? [ 116.291305][ T3220] loop4: detected capacity change from 0 to 256 [ 116.300166][ T3220] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xccba6699, utbl_chksum : 0xe619d30d) [ 116.347551][ T3206] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.354423][ T3206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.361508][ T3206] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.368311][ T3206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.396121][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.403589][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.411852][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.432514][ T3206] device veth0_vlan entered promiscuous mode [ 116.449203][ T3206] device veth1_macvtap entered promiscuous mode [ 116.457434][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.465609][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.473471][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.481696][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.489075][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.497102][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.504804][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.508965][ T3226] mmap: syz.4.1117 (3226): VmData 29216768 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 116.531170][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.539638][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.586499][ T382] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.597260][ T382] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 116.658107][ T8] device bridge_slave_1 left promiscuous mode [ 116.664031][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.671428][ T8] device bridge_slave_0 left promiscuous mode [ 116.677419][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.684955][ T8] device veth1_macvtap left promiscuous mode [ 116.691068][ T8] device veth0_vlan left promiscuous mode [ 116.757457][ T313] steelseries_srws1 0003:1038:1410.003E: unknown main item tag 0x0 [ 116.765426][ T313] steelseries_srws1 0003:1038:1410.003E: unknown main item tag 0x0 [ 116.773352][ T313] steelseries_srws1 0003:1038:1410.003E: unknown main item tag 0x0 [ 116.781298][ T382] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.790219][ T313] steelseries_srws1 0003:1038:1410.003E: unknown main item tag 0x0 [ 116.798230][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.806014][ T382] usb 1-1: Product: syz [ 116.810113][ T313] steelseries_srws1 0003:1038:1410.003E: unknown main item tag 0x0 [ 116.817774][ T382] usb 1-1: Manufacturer: syz [ 116.822195][ T313] steelseries_srws1 0003:1038:1410.003E: unknown main item tag 0x0 [ 116.826483][ T2061] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 116.830316][ T382] usb 1-1: SerialNumber: syz [ 116.841709][ T313] steelseries_srws1 0003:1038:1410.003E: item fetching failed at offset 6/7 [ 116.850754][ T313] steelseries_srws1 0003:1038:1410.003E: parse failed [ 116.857672][ T313] steelseries_srws1: probe of 0003:1038:1410.003E failed with error -22 [ 116.916486][ T19] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 116.965012][ T310] usb 2-1: USB disconnect, device number 17 [ 117.097608][ T3194] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.206593][ T2061] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.217374][ T2061] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.226851][ T2061] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 117.235670][ T2061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.244118][ T2061] usb 3-1: config 0 descriptor?? [ 117.256473][ T313] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 117.276590][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.287998][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.297577][ T19] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 117.306385][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.314646][ T19] usb 5-1: config 0 descriptor?? [ 117.500252][ T3243] loop1: detected capacity change from 0 to 512 [ 117.506648][ T3243] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.513751][ T3243] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 117.522349][ T3243] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 117.530390][ T3243] System zones: 1-12 [ 117.534981][ T3243] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.1121: corrupted in-inode xattr [ 117.547128][ T3243] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1121: couldn't read orphan inode 15 (err -117) [ 117.559013][ T3243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.577346][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 117.577360][ T28] audit: type=1400 audit(1724684292.789:624): avc: denied { map } for pid=3242 comm="syz.1.1121" path="/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_wait_time_recursive" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.632093][ T3166] EXT4-fs (loop1): unmounting filesystem. [ 117.645616][ T28] audit: type=1400 audit(1724684292.849:625): avc: denied { write } for pid=3246 comm="syz.1.1122" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.645694][ T3247] random: crng reseeded on system resumption [ 117.668497][ T28] audit: type=1400 audit(1724684292.849:626): avc: denied { open } for pid=3246 comm="syz.1.1122" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.716707][ T2061] hid (null): bogus close delimiter [ 117.726599][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.737359][ T313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.747127][ T3194] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.750798][ T313] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.765787][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.774517][ T313] usb 4-1: config 0 descriptor?? [ 117.797278][ T19] cp2112 0003:10C4:EA90.0040: unknown main item tag 0x0 [ 117.804542][ T19] cp2112 0003:10C4:EA90.0040: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 117.936509][ T2061] usb 3-1: string descriptor 0 read error: -22 [ 117.976498][ T382] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 117.982777][ T382] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 117.990281][ T382] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 118.016617][ T19] cp2112 0003:10C4:EA90.0040: Part Number: 0x82 Device Version: 0xFE [ 118.176889][ T3194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.185145][ T3194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.193288][ T3194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.196576][ T2061] uclogic 0003:256C:006D.003F: interface is invalid, ignoring [ 118.201782][ T3194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.246507][ T382] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 118.252900][ T313] plantronics 0003:047F:FFFF.0041: No inputs registered, leaving [ 118.261791][ T382] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 118.273638][ T313] plantronics 0003:047F:FFFF.0041: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 118.287330][ T382] usb 1-1: USB disconnect, device number 18 [ 118.293312][ T382] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 118.404449][ T311] usb 3-1: USB disconnect, device number 21 [ 118.456494][ T19] cp2112 0003:10C4:EA90.0040: error setting SMBus config [ 118.464635][ T19] cp2112: probe of 0003:10C4:EA90.0040 failed with error -71 [ 118.475580][ T19] usb 5-1: USB disconnect, device number 18 [ 118.940713][ T28] audit: type=1400 audit(1724684294.149:627): avc: denied { remount } for pid=3291 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.066468][ T382] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 119.088444][ T3300] loop2: detected capacity change from 0 to 32768 [ 119.187715][ T229] usb 4-1: USB disconnect, device number 26 [ 119.256452][ T311] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 119.263980][ T19] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 119.426467][ T382] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.434941][ T382] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 119.444890][ T382] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.453798][ T382] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 119.464618][ T382] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 119.526602][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 119.586493][ T382] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.595595][ T382] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.603461][ T382] usb 1-1: Product: syz [ 119.607723][ T382] usb 1-1: Manufacturer: syz [ 119.646748][ T382] cdc_wdm 1-1:1.0: skipping garbage [ 119.651821][ T382] cdc_wdm 1-1:1.0: skipping garbage [ 119.657693][ T382] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 119.696516][ T19] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 119.706154][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 119.717236][ T19] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 119.727173][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 119.738319][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.747261][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.755748][ T311] usb 5-1: config 0 descriptor?? [ 119.786502][ T3296] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 119.818378][ T311] hub 5-1:0.0: USB hub found [ 119.849653][ T2061] usb 1-1: USB disconnect, device number 19 [ 119.926502][ T19] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 119.935563][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.943489][ T19] usb 2-1: Product: syz [ 119.947643][ T19] usb 2-1: Manufacturer: syz [ 119.952051][ T19] usb 2-1: SerialNumber: syz [ 119.957241][ T19] usb 2-1: config 0 descriptor?? [ 119.976498][ T3298] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 119.985798][ T3298] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 120.020441][ T3321] loop2: detected capacity change from 0 to 1024 [ 120.026967][ T3321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.033478][ T3321] /dev/loop2: Can't open blockdev [ 120.050052][ T28] audit: type=1400 audit(1724684295.259:628): avc: denied { read } for pid=3283 comm="syz.0.1126" name="event0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.073147][ T28] audit: type=1400 audit(1724684295.259:629): avc: denied { open } for pid=3283 comm="syz.0.1126" path="/dev/input/event0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.076179][ T3321] overlayfs: failed to resolve './file0': -2 [ 120.126658][ T3323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 120.135670][ T3323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1144'. [ 120.144506][ T311] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 120.197173][ T3298] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 120.204141][ T3298] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 120.246639][ T382] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 120.456457][ T229] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 120.476478][ T311] usbhid 5-1:0.0: can't add hid device: -71 [ 120.482318][ T311] usbhid: probe of 5-1:0.0 failed with error -71 [ 120.516629][ T311] usb 5-1: USB disconnect, device number 19 [ 120.526611][ T382] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 120.536456][ T2061] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 120.636544][ T19] dm9601: No valid MAC address in EEPROM, using 9e:76:7d:29:99:ef [ 120.816542][ T229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.827315][ T229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.836857][ T229] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 120.845676][ T229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.847158][ T19] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 120.858666][ T229] usb 3-1: config 0 descriptor?? [ 120.864545][ T19] usb 2-1: USB disconnect, device number 18 [ 120.896478][ T2061] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.904949][ T2061] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.918175][ T2061] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.926995][ T2061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 120.937747][ T28] audit: type=1400 audit(1724684296.149:630): avc: denied { mounton } for pid=3329 comm="syz.4.1147" path="/proc/53/task" dev="proc" ino=41685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 120.959985][ T2061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 121.086502][ T2061] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.095387][ T2061] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.103180][ T2061] usb 1-1: Product: syz [ 121.107419][ T2061] usb 1-1: Manufacturer: syz [ 121.146944][ T2061] cdc_wdm 1-1:1.0: skipping garbage [ 121.151949][ T2061] cdc_wdm 1-1:1.0: skipping garbage [ 121.157820][ T2061] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 121.168338][ T382] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 121.177271][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.347244][ T229] samsung 0003:0419:0600.0042: global environment stack underflow [ 121.355005][ T229] samsung 0003:0419:0600.0042: item 0 4 1 11 parsing failed [ 121.362283][ T229] samsung 0003:0419:0600.0042: parse failed [ 121.368265][ T229] samsung: probe of 0003:0419:0600.0042 failed with error -22 [ 121.551899][ T2061] usb 3-1: USB disconnect, device number 22 [ 121.597791][ T3345] loop1: detected capacity change from 0 to 1024 [ 121.607039][ T3345] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.637182][ T3319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.645422][ T3319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.676470][ T382] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 121.683133][ T382] usb 4-1: No valid video chain found. [ 121.692875][ T382] usb 4-1: USB disconnect, device number 27 [ 121.713272][ T3166] EXT4-fs (loop1): unmounting filesystem. [ 121.848377][ T3354] loop1: detected capacity change from 0 to 512 [ 121.859117][ T3354] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.867977][ T3354] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 121.881405][ T3354] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #2: comm syz.1.1157: corrupted inode contents [ 121.893231][ T3354] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz.1.1157: mark_inode_dirty error [ 121.904512][ T3354] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #2: comm syz.1.1157: corrupted inode contents [ 121.916251][ T3354] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.1157: mark_inode_dirty error [ 121.941290][ T3166] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 121.961949][ T3166] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 121.982860][ T3166] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 122.004003][ T3166] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 122.024545][ T3166] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 122.044907][ T3166] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 122.206117][ T3366] loop3: detected capacity change from 0 to 256 [ 122.226953][ T3238] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.416627][ T382] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 122.710126][ T311] usb 1-1: USB disconnect, device number 20 [ 122.740856][ T28] audit: type=1400 audit(1724684297.949:631): avc: denied { create } for pid=3378 comm="syz.0.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.779437][ T382] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 122.780521][ T3383] syz.0.1170[3383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.789799][ T382] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.796524][ T3383] syz.0.1170[3383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.801061][ T28] audit: type=1400 audit(1724684297.949:632): avc: denied { connect } for pid=3378 comm="syz.0.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.881145][ T28] audit: type=1400 audit(1724684298.089:633): avc: denied { ioctl } for pid=3385 comm="syz.0.1171" path="socket:[42397]" dev="sockfs" ino=42397 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.906048][ T382] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.923895][ T382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.945021][ T28] audit: type=1400 audit(1724684298.149:634): avc: denied { mount } for pid=3389 comm="syz.0.1173" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 122.946416][ T382] usb 3-1: SerialNumber: syz [ 122.975793][ T28] audit: type=1400 audit(1724684298.149:635): avc: denied { unmount } for pid=2597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.179308][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.186189][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.193591][ T3392] device bridge_slave_0 entered promiscuous mode [ 123.202475][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.209525][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.216976][ T3392] device bridge_slave_1 entered promiscuous mode [ 123.247614][ T382] usb 3-1: 0:2 : does not exist [ 123.270801][ T3400] syz.3.1177[3400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.270893][ T3400] syz.3.1177[3400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.327745][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.345787][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.352902][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.359692][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.386335][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.393935][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.402260][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.419026][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.427106][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.433936][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.441155][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.449801][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.456657][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.478037][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.487480][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.495181][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.505838][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.514068][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.521626][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.530618][ T3166] EXT4-fs (loop1): unmounting filesystem. [ 123.539135][ T3392] device veth0_vlan entered promiscuous mode [ 123.553057][ T3392] device veth1_macvtap entered promiscuous mode [ 123.560192][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.577560][ T294] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 123.589403][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.601369][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.657165][ T478] device bridge_slave_1 left promiscuous mode [ 123.663187][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.672189][ T478] device bridge_slave_0 left promiscuous mode [ 123.678221][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.685841][ T478] device veth1_macvtap left promiscuous mode [ 123.691804][ T478] device veth0_vlan left promiscuous mode [ 123.698492][ T382] usb 3-1: USB disconnect, device number 23 [ 123.812297][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.819220][ T3406] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.826348][ T3406] device bridge_slave_0 entered promiscuous mode [ 123.833522][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.840415][ T3406] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.847609][ T3406] device bridge_slave_1 entered promiscuous mode [ 123.907830][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.915103][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.933131][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.941263][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.949445][ T229] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.956268][ T229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.963475][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.971564][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.979484][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.990705][ T229] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.997544][ T229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.004633][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.014211][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.021686][ T294] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 124.030822][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.038358][ T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.046940][ T294] usb 4-1: config 0 descriptor?? [ 124.051889][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.064675][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.076374][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.084165][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.091463][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.100835][ T3406] device veth0_vlan entered promiscuous mode [ 124.110717][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.120102][ T3406] device veth1_macvtap entered promiscuous mode [ 124.131887][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.140329][ T229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.287526][ T3425] loop1: detected capacity change from 0 to 512 [ 124.295451][ T3425] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 124.314396][ T3406] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 124.328796][ T3406] EXT4-fs error (device loop1): ext4_lookup:1855: inode #14: comm syz-executor: unexpected EA_INODE flag [ 124.340523][ T3406] EXT4-fs error (device loop1): ext4_lookup:1855: inode #14: comm syz-executor: unexpected EA_INODE flag [ 124.391847][ T3430] tipc: Started in network mode [ 124.397481][ T3430] tipc: Node identity 1, cluster identity 4711 [ 124.403478][ T3430] tipc: Node number set to 1 [ 124.404112][ T3406] EXT4-fs (loop1): unmounting filesystem. [ 124.419008][ T28] audit: type=1400 audit(1724684299.629:636): avc: denied { create } for pid=3431 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.446576][ T28] audit: type=1400 audit(1724684299.659:637): avc: denied { listen } for pid=3431 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.484556][ T28] audit: type=1400 audit(1724684299.679:638): avc: denied { accept } for pid=3431 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.506121][ T28] audit: type=1400 audit(1724684299.679:639): avc: denied { create } for pid=3431 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.526882][ T28] audit: type=1400 audit(1724684299.679:640): avc: denied { write } for pid=3431 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.527467][ T294] samsung 0003:0419:0600.0043: unknown main item tag 0x0 [ 124.574821][ T294] samsung 0003:0419:0600.0043: unknown main item tag 0x0 [ 124.581910][ T294] samsung 0003:0419:0600.0043: item fetching failed at offset 2/5 [ 124.591961][ T294] samsung 0003:0419:0600.0043: parse failed [ 124.598500][ T294] samsung: probe of 0003:0419:0600.0043 failed with error -22 [ 124.633507][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.640577][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.648258][ T3440] device bridge_slave_0 entered promiscuous mode [ 124.659572][ T3445] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 124.668422][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.675366][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.682721][ T3440] device bridge_slave_1 entered promiscuous mode [ 124.733010][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.739861][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.746975][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.753728][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.775455][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.782921][ T2061] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.790910][ T2061] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.798965][ T478] device bridge_slave_1 left promiscuous mode [ 124.804893][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.812486][ T478] device bridge_slave_0 left promiscuous mode [ 124.818542][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.825729][ T229] usb 4-1: USB disconnect, device number 28 [ 124.832530][ T478] device veth1_macvtap left promiscuous mode [ 124.838456][ T478] device veth0_vlan left promiscuous mode [ 124.918423][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.926459][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.933284][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.940520][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.948754][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.955583][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.962760][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.981594][ T3440] device veth0_vlan entered promiscuous mode [ 124.987662][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.995454][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.003611][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.011788][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.020054][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.027749][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.036033][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.043443][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.054907][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.062920][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.072125][ T3440] device veth1_macvtap entered promiscuous mode [ 125.081295][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.089059][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.097200][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.106475][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.114535][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.186445][ T382] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 125.341654][ T3455] syz.3.1199[3455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.341713][ T3455] syz.3.1199[3455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.358178][ T3455] device pim6reg1 entered promiscuous mode [ 125.437109][ T3457] loop2: detected capacity change from 0 to 512 [ 125.457202][ T3459] loop3: detected capacity change from 0 to 256 [ 125.458368][ T3457] /dev/loop2: Can't open blockdev [ 125.482319][ T3238] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.499854][ T3459] loop3: detected capacity change from 0 to 128 [ 125.506693][ T3459] /dev/loop3: Can't open blockdev [ 125.558708][ T3459] Disabled LAPIC found during irq injection [ 125.616550][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.627437][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.637032][ T382] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.645963][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.657324][ T382] usb 1-1: config 0 descriptor?? [ 125.817157][ T478] device bridge_slave_1 left promiscuous mode [ 125.823092][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.830357][ T478] device bridge_slave_0 left promiscuous mode [ 125.836255][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.843949][ T478] device veth1_macvtap left promiscuous mode [ 125.849918][ T478] device veth0_vlan left promiscuous mode [ 126.016321][ T3482] loop1: detected capacity change from 0 to 512 [ 126.024752][ T3482] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.037178][ T3482] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 126.047293][ T3482] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1211: Corrupt directory, running e2fsck is recommended [ 126.060609][ T3482] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 126.068795][ T3482] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.1211: corrupted in-inode xattr [ 126.080781][ T3482] EXT4-fs (loop1): Remounting filesystem read-only [ 126.087580][ T3482] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1211: couldn't read orphan inode 15 (err -117) [ 126.099536][ T3482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.111361][ T3482] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.122688][ T3482] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 126.132742][ T3482] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1211: Corrupt directory, running e2fsck is recommended [ 126.137105][ T382] keytouch 0003:0926:3333.0044: fixing up Keytouch IEC report descriptor [ 126.146030][ T3482] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.165434][ T3482] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 126.176008][ T3482] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1211: Corrupt directory, running e2fsck is recommended [ 126.176924][ T382] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0044/input/input28 [ 126.199973][ T3485] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.211163][ T3485] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 126.221307][ T3485] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1211: Corrupt directory, running e2fsck is recommended [ 126.234526][ T3482] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.246455][ T39] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 126.248604][ T3482] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #2: block 3: comm syz.1.1211: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 126.272350][ T3482] EXT4-fs (loop1): Remounting filesystem read-only [ 126.283693][ T3440] EXT4-fs (loop1): unmounting filesystem. [ 126.296384][ T382] keytouch 0003:0926:3333.0044: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 126.373754][ T382] usb 1-1: USB disconnect, device number 21 [ 126.486489][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 126.616492][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.627222][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.663550][ T3503] loop2: detected capacity change from 0 to 512 [ 126.669848][ T294] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 126.674054][ T3503] /dev/loop2: Can't open blockdev [ 126.776493][ T39] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 126.785346][ T39] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 126.793647][ T39] usb 4-1: Product: syz [ 126.797955][ T39] usb 4-1: Manufacturer: syz [ 126.803078][ T39] usb 4-1: config 0 descriptor?? [ 127.016461][ T382] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 127.046493][ T294] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.054435][ T294] usb 2-1: config 0 has no interface number 0 [ 127.060599][ T294] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.071380][ T294] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.080939][ T294] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 127.089784][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.098452][ T294] usb 2-1: config 0 descriptor?? [ 127.256469][ T229] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 127.277087][ T39] kovaplus 0003:1E7D:2D50.0045: item fetching failed at offset 5/7 [ 127.284904][ T39] kovaplus 0003:1E7D:2D50.0045: parse failed [ 127.290732][ T39] kovaplus: probe of 0003:1E7D:2D50.0045 failed with error -22 [ 127.386500][ T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.397317][ T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.406847][ T382] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 127.415672][ T382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.424020][ T382] usb 3-1: config 0 descriptor?? [ 127.479555][ T39] usb 4-1: USB disconnect, device number 29 [ 127.496545][ T229] usb 1-1: Using ep0 maxpacket: 32 [ 127.576691][ T294] hid (null): global environment stack underflow [ 127.583833][ T294] uclogic 0003:5543:0522.0046: global environment stack underflow [ 127.591650][ T294] uclogic 0003:5543:0522.0046: item 0 1 1 11 parsing failed [ 127.599111][ T294] uclogic 0003:5543:0522.0046: parse failed [ 127.604830][ T294] uclogic: probe of 0003:5543:0522.0046 failed with error -22 [ 127.626521][ T229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 127.637563][ T229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 127.648419][ T229] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 127.657260][ T229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.665716][ T229] usb 1-1: config 0 descriptor?? [ 127.686893][ T3518] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 127.706961][ T229] hub 1-1:0.0: USB hub found [ 127.779755][ T294] usb 2-1: USB disconnect, device number 19 [ 127.898388][ T382] wacom 0003:056A:0043.0047: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 127.908066][ T382] wacom 0003:056A:0043.0047: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 127.919681][ T382] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0047/input/input29 [ 128.008138][ T229] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 128.027131][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 128.027144][ T28] audit: type=1400 audit(1724684303.239:645): avc: denied { read } for pid=3524 comm="syz.3.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.100029][ T19] usb 3-1: USB disconnect, device number 24 [ 128.366463][ T229] usbhid 1-1:0.0: can't add hid device: -71 [ 128.372383][ T229] usbhid: probe of 1-1:0.0 failed with error -71 [ 128.406661][ T229] usb 1-1: USB disconnect, device number 22 [ 128.677724][ T28] audit: type=1400 audit(1724684303.889:646): avc: denied { write } for pid=3546 comm="syz.2.1237" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.714856][ T28] audit: type=1326 audit(1724684303.919:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.1.1239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a6b579e79 code=0x0 [ 128.776434][ T28] audit: type=1400 audit(1724684303.979:648): avc: denied { write } for pid=3552 comm="syz.2.1240" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.793992][ T3553] input: syz0 as /devices/virtual/input/input32 [ 128.799548][ T28] audit: type=1400 audit(1724684303.999:649): avc: denied { ioctl } for pid=3552 comm="syz.2.1240" path="/dev/uinput" dev="devtmpfs" ino=170 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.897404][ T3558] bridge: RTM_NEWNEIGH with invalid ether address [ 128.971345][ T3567] overlayfs: missing 'lowerdir' [ 128.991500][ T3573] syz.2.1249[3573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.991567][ T3573] syz.2.1249[3573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.003606][ T3573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 129.025572][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.038351][ T3573] device bridge_slave_0 left promiscuous mode [ 129.044227][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.276487][ T382] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 129.286554][ T294] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 129.346447][ T19] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 129.516437][ T382] usb 4-1: Using ep0 maxpacket: 16 [ 129.536550][ T294] usb 1-1: Using ep0 maxpacket: 16 [ 129.558713][ T28] audit: type=1400 audit(1724684304.769:650): avc: denied { sys_module } for pid=3580 comm="syz.1.1252" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 129.606579][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 129.656649][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.667692][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.677255][ T294] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 129.685914][ T382] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 129.694769][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.703331][ T382] usb 4-1: config 0 descriptor?? [ 129.726601][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.737392][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.746841][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 129.759449][ T19] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 129.768447][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.776764][ T19] usb 3-1: config 0 descriptor?? [ 129.836496][ T294] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 129.845500][ T294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.853466][ T294] usb 1-1: Product: syz [ 129.857423][ T294] usb 1-1: Manufacturer: syz [ 129.861923][ T294] usb 1-1: SerialNumber: syz [ 129.867070][ T294] usb 1-1: config 0 descriptor?? [ 129.907035][ T294] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 129.914716][ T294] usb 1-1: Detected FT232R [ 129.926460][ T2061] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 130.126530][ T294] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 130.166535][ T2061] usb 2-1: Using ep0 maxpacket: 32 [ 130.177325][ T382] savu 0003:1E7D:2D5A.0048: item fetching failed at offset 2/5 [ 130.184832][ T382] savu 0003:1E7D:2D5A.0048: parse failed [ 130.190388][ T382] savu: probe of 0003:1E7D:2D5A.0048 failed with error -22 [ 130.257235][ T19] pyra 0003:1E7D:2C24.0049: item fetching failed at offset 5/7 [ 130.264763][ T19] pyra 0003:1E7D:2C24.0049: parse failed [ 130.270273][ T19] pyra: probe of 0003:1E7D:2C24.0049 failed with error -22 [ 130.286510][ T2061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 130.297452][ T2061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 130.308410][ T2061] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 130.317232][ T2061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.325645][ T2061] usb 2-1: config 0 descriptor?? [ 130.346509][ T3585] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 130.366908][ T2061] hub 2-1:0.0: USB hub found [ 130.379586][ T19] usb 4-1: USB disconnect, device number 30 [ 130.406517][ T294] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 130.413250][ T294] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 130.477168][ T294] usb 3-1: USB disconnect, device number 25 [ 130.586497][ T2061] hub 2-1:0.0: 2 ports detected [ 130.608946][ T382] usb 1-1: USB disconnect, device number 23 [ 130.615740][ T382] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 130.625068][ T382] ftdi_sio 1-1:0.0: device disconnected [ 130.947056][ T28] audit: type=1400 audit(1724684306.159:651): avc: denied { read } for pid=3591 comm="syz.3.1257" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 130.969924][ T28] audit: type=1400 audit(1724684306.159:652): avc: denied { open } for pid=3591 comm="syz.3.1257" path="/dev/rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 130.993486][ T28] audit: type=1400 audit(1724684306.159:653): avc: denied { ioctl } for pid=3591 comm="syz.3.1257" path="/dev/rtc0" dev="devtmpfs" ino=171 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.056481][ T2061] hub 2-1:0.0: set hub depth failed [ 131.099331][ T2061] usb 2-1: USB disconnect, device number 20 [ 131.256431][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 131.496425][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 131.626566][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 131.646616][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.665298][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.725275][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.733713][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.741309][ T3602] device bridge_slave_0 entered promiscuous mode [ 131.751166][ T3609] loop1: detected capacity change from 0 to 1024 [ 131.771793][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.782726][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.790415][ T3602] device bridge_slave_1 entered promiscuous mode [ 131.803507][ T3609] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.1263: casefold flag without casefold feature [ 131.816312][ T3611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'. [ 131.826832][ T3609] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 131.848371][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.857552][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.858149][ T3609] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.865345][ T24] usb 3-1: Product: syz [ 131.877831][ T24] usb 3-1: Manufacturer: syz [ 131.882241][ T24] usb 3-1: SerialNumber: syz [ 131.919714][ T3440] EXT4-fs (loop1): unmounting filesystem. [ 131.945987][ T28] audit: type=1400 audit(1724684307.149:654): avc: denied { write } for pid=3617 comm="syz.1.1266" name="task" dev="proc" ino=43807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 131.988412][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.995261][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.002387][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.009168][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.054773][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.063914][ T2061] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.071525][ T2061] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.099670][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.116512][ T19] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 132.124588][ T2061] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.131453][ T2061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.132593][ T3626] binder: 3625:3626 ioctl c018620c 0 returned -14 [ 132.144280][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.152773][ T2061] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.159624][ T2061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.169801][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.186730][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.195000][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.219000][ T3602] device veth0_vlan entered promiscuous mode [ 132.226573][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.234460][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.242054][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.256870][ T3602] device veth1_macvtap entered promiscuous mode [ 132.263924][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.278758][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.287223][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.298382][ T10] device bridge_slave_1 left promiscuous mode [ 132.304350][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.311913][ T10] device bridge_slave_0 left promiscuous mode [ 132.318011][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.325875][ T10] device veth1_macvtap left promiscuous mode [ 132.386635][ T24] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 132.430447][ T3634] device veth1_macvtap left promiscuous mode [ 132.438476][ T3634] device veth1_macvtap entered promiscuous mode [ 132.486462][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.497348][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.507908][ T19] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 132.520650][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.529161][ T3641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1275'. [ 132.529744][ T19] usb 4-1: config 0 descriptor?? [ 133.166947][ T10] device bridge_slave_1 left promiscuous mode [ 133.172905][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.180206][ T10] device bridge_slave_0 left promiscuous mode [ 133.186108][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.193813][ T10] device veth1_macvtap left promiscuous mode [ 133.199680][ T10] device veth0_vlan left promiscuous mode [ 133.236491][ T19] usb 4-1: language id specifier not provided by device, defaulting to English [ 133.256496][ T24] usb 3-1: failed to read current rate; disabling the check [ 133.459871][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 133.459887][ T28] audit: type=1400 audit(1724684308.669:668): avc: denied { getopt } for pid=3650 comm="syz.1.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.485562][ T28] audit: type=1400 audit(1724684308.679:669): avc: denied { connect } for pid=3649 comm="syz.0.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.505174][ T28] audit: type=1400 audit(1724684308.679:670): avc: denied { create } for pid=3649 comm="syz.0.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.518334][ T24] usb 3-1: USB disconnect, device number 26 [ 133.716508][ T19] uclogic 0003:256C:006D.004A: interface is invalid, ignoring [ 133.921583][ T19] usb 4-1: USB disconnect, device number 31 [ 135.655049][ T3672] loop0: detected capacity change from 0 to 512 [ 135.662841][ T3672] /dev/loop0: Can't open blockdev [ 135.709967][ T3672] loop0: detected capacity change from 0 to 512 [ 135.716366][ T3672] /dev/loop0: Can't open blockdev SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=4 req=1260 state=1 status=67 (errno 9: Bad file descriptor) [ 135.978360][ T28] audit: type=1400 audit(1724684311.189:671): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14467]" dev="pipefs" ino=14467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 136.267014][ T324] device bridge_slave_1 left promiscuous mode [ 136.273110][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.280424][ T324] device bridge_slave_0 left promiscuous mode [ 136.286321][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.294232][ T324] device veth1_macvtap left promiscuous mode [ 136.300073][ T324] device veth0_vlan left promiscuous mode [ 136.669582][ T324] tipc: Left network mode [ 137.157157][ T324] device bridge_slave_1 left promiscuous mode [ 137.163086][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.170800][ T324] device bridge_slave_1 left promiscuous mode [ 137.176751][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.183868][ T324] device bridge_slave_0 left promiscuous mode [ 137.189954][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.197610][ T324] device bridge_slave_1 left promiscuous mode [ 137.203507][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.210836][ T324] device bridge_slave_0 left promiscuous mode [ 137.216778][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.224595][ T324] device veth1_macvtap left promiscuous mode [ 137.230505][ T324] device veth0_vlan left promiscuous mode [ 137.236190][ T324] device veth1_macvtap left promiscuous mode [ 137.242030][ T324] device veth0_vlan left promiscuous mode [ 137.247685][ T324] device veth1_macvtap left promiscuous mode [ 137.253495][ T324] device veth0_vlan left promiscuous mode