last executing test programs: 12.912534963s ago: executing program 3 (id=851): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="5001"], 0x150) write$FUSE_OPEN(r3, &(0x7f0000000280)={0x20}, 0x20) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) chdir(&(0x7f0000000080)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) 12.827416701s ago: executing program 3 (id=852): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 12.664059224s ago: executing program 3 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1160420, &(0x7f0000000140)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 12.47992436s ago: executing program 3 (id=855): syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b020004"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 10.520377906s ago: executing program 3 (id=867): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) stat(&(0x7f0000000040)='./file0\x00', 0x0) 10.451312762s ago: executing program 3 (id=870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.415693215s ago: executing program 1 (id=901): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "6e3565c0"}, @main=@item_012={0x1, 0x0, 0xb, 'i'}]}}, 0x0}, 0x0) 5.53671972s ago: executing program 2 (id=914): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r4}, 0x10) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) unshare(0x44000680) 5.376835483s ago: executing program 2 (id=917): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000180)="cd", 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) 5.325828348s ago: executing program 2 (id=919): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) unshare(0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x300001a, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0xd, 0x2aa, &(0x7f0000001300)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x0) syz_open_procfs(0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) 5.18375296s ago: executing program 2 (id=920): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$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") r0 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r1 = creat(0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfd14) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000001c0), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendfile(r0, r0, 0x0, 0x100000000) 5.037216682s ago: executing program 2 (id=922): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) 4.852376808s ago: executing program 0 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 4.553994463s ago: executing program 0 (id=926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000340)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 4.374240749s ago: executing program 0 (id=928): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.330015482s ago: executing program 1 (id=931): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x112ce3, 0x0, 0x8, 0x0, &(0x7f0000000040)) chdir(0x0) r0 = open(0x0, 0x0, 0x0) renameat2(r0, 0x0, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="01", &(0x7f0000000380), 0x7, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.641465031s ago: executing program 4 (id=935): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000048000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000840)='kmem_cache_free\x00', r3}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 3.512675611s ago: executing program 4 (id=936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="36f30f00dff3f266a06ad60000000000002ef265400f30b9030200000f3266baf80cb8c8cf9e8eef66bafc0cb8241bd4fbefc4434944db0065f3440f2b9641ef0000460f001a3ef04686b46ddc00000066bad004ed", 0x55}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.41063665s ago: executing program 2 (id=923): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0xfd14) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) pidfd_send_signal(r4, 0x20, 0x0, 0x0) 2.900913923s ago: executing program 4 (id=937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000001200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x80, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4d], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r4 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 2.386828997s ago: executing program 4 (id=938): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000003000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0}, 0x40) r4 = syz_open_procfs(r2, &(0x7f0000000800)='net/psched\x00') execveat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000240)='.*\x00', &(0x7f0000000300)='-{.!\x00', &(0x7f0000000380)='hashlimit\x00', &(0x7f00000003c0)='&!].]\\)-/c/$)]*.:-^(\x19\'\x00', &(0x7f0000000400)='GPL\x00', &(0x7f0000000440)='raw\x00'], &(0x7f0000000540)=[0x0, 0x0], 0x100) 1.772542709s ago: executing program 1 (id=939): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r2 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1}) unshare(0x40600) write$P9_RREADLINK(r2, &(0x7f0000000280), 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.058625s ago: executing program 0 (id=940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d29863301b0b811f69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff1eec72b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a14c16837394d2b3673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fb9bec59ae347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbde0f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de14275bf4a53e95235ae13768ab3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd33570000000000000000251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c4c314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829be1827f9df303160df18597efba46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406200b3b1c321cc158dbe17123eace3000000000000000000000000000000000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b675639a26c76840cce40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c0705caae54024cf8ade6396ff44482284f415e5769d9ae8688a8d5516690aae9ce1c785262734723519b042a161e6efabf263a46ba92254a51ff6502470f3038cf6d8d991931cfd82ea97e1b596133e7754908d912d1054d174f5a731c019f152a5ca2e48599b6d563bfcd8c0950f4292769217a6e309452b14e64ae64ad58ced33582a1b3d2e0c300059fb1ee78cdddb827293de267d64bf47c3c8c419683c948e46de8cea0b232da00ff39ebef3b73b3d6fbeecd3f9ff06b7e08ed8ce2b9b9cf2e08975f5959fa7028f68c525ab173c0c553d21bd1e9176abdf799e7a08d2f3c14e1ca99d525bc3af0ca0f48f145c65b10dfc67803aab67f6b631d3d7e237fec4bc6eacc364b7cdd925973705d40c5a614e354d9b92357845d15ea41ad3e3a98396131f835e17f0cbfbdc59453991e689f9ce19bd4a3b4121e5a8b5dbb519b5556cb70603ceac0b7ca02cb05a01afa3164ca428add947673cdba49a0e6e8aeeddf52c0f0ef224c69a3c96c2fddf56d74c4ae7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.0550404s ago: executing program 1 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) 1.05472778s ago: executing program 4 (id=942): socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4002040) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0) unshare(0x4020400) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r2}, {r2}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 984.841816ms ago: executing program 0 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) statx(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) 181.010755ms ago: executing program 0 (id=944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) fgetxattr(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) read(r3, &(0x7f0000000140)=""/196, 0xc4) 108.969161ms ago: executing program 4 (id=946): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000d00850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002205020000005254abe2"], 0x0}, 0x0) 79.823113ms ago: executing program 1 (id=947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x2000000c) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00221a0000001a6ca2a6"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 8350.510:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1647 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20d61beb9 code=0x7ffc0000 [ 97.413413][ T1664] netlink: 'syz.2.423': attribute type 3 has an invalid length. [ 97.414392][ T24] audit: type=1326 audit(1725038350.510:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1647 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20d61beb9 code=0x7ffc0000 [ 97.449946][ T24] audit: type=1326 audit(1725038350.510:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1647 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc20d61beb9 code=0x7ffc0000 [ 97.473784][ T1662] exfat: Deprecated parameter 'utf8' [ 97.479038][ T1662] exfat: Deprecated parameter 'utf8' [ 97.572735][ T1662] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 97.931741][ T1656] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.938845][ T1656] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.949011][ T1656] device bridge_slave_0 entered promiscuous mode [ 97.957286][ T1656] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.964763][ T1656] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.973171][ T1656] device bridge_slave_1 entered promiscuous mode [ 98.391274][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.401148][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.451848][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.463718][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.479540][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.486674][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.495319][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.510437][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.518689][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.525613][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.555526][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.563913][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.572775][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.609949][ T5] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.656955][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.690809][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.699525][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.715200][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.762564][ T1656] device veth0_vlan entered promiscuous mode [ 98.779328][ T1687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 98.837188][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.854969][ T1656] device veth1_macvtap entered promiscuous mode [ 98.938236][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.956699][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.012218][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.033360][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.050032][ T5] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 99.069153][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.079317][ T5] usb 2-1: config 0 descriptor?? [ 99.266376][ T1698] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.287153][ T1698] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.418: casefold flag without casefold feature [ 99.300143][ T1698] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 99.311632][ T1693] syz.0.434[1693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.311748][ T1693] syz.0.434[1693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.326304][ T1698] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue [ 99.360923][ T1693] netlink: 52 bytes leftover after parsing attributes in process `syz.0.434'. [ 99.509807][ T685] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 99.685029][ T1656] EXT4-fs error (device loop4): htree_dirblock_to_tree:1091: inode #2: block 21: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 99.759786][ T685] usb 3-1: Using ep0 maxpacket: 32 [ 99.880004][ T685] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.903622][ T685] usb 3-1: config 0 has no interfaces? [ 100.079935][ T685] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 100.088928][ T685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.097393][ T685] usb 3-1: Product: syz [ 100.101770][ T685] usb 3-1: Manufacturer: syz [ 100.106284][ T685] usb 3-1: SerialNumber: syz [ 100.115360][ T685] usb 3-1: config 0 descriptor?? [ 100.143411][ T1726] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.150473][ T1726] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.158409][ T1726] device bridge_slave_0 entered promiscuous mode [ 100.168415][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.175458][ T1726] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.183678][ T1726] device bridge_slave_1 entered promiscuous mode [ 100.249899][ T5] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 100.363183][ T465] device bridge_slave_1 left promiscuous mode [ 100.370070][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.378202][ T465] device bridge_slave_0 left promiscuous mode [ 100.386108][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.395882][ T465] device veth1_macvtap left promiscuous mode [ 100.402971][ T465] device veth0_vlan left promiscuous mode [ 100.631629][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.639166][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.683440][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.700283][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.708933][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.715891][ T481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.733480][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.742506][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.751696][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.758571][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.777888][ T1732] syz.0.456[1732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.778008][ T1732] syz.0.456[1732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.790408][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.820055][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.840097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.872863][ T24] kauditd_printk_skb: 77 callbacks suppressed [ 100.872899][ T24] audit: type=1326 audit(1725038354.550:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fbd3eb9 code=0x7ffc0000 [ 100.882177][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.912410][ T24] audit: type=1326 audit(1725038354.550:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fbd3eb9 code=0x7ffc0000 [ 100.945847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.961360][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.969122][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.980167][ T1726] device veth0_vlan entered promiscuous mode [ 100.991286][ T24] audit: type=1326 audit(1725038354.550:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f676fbd3eb9 code=0x7ffc0000 [ 101.015591][ T311] usb 2-1: USB disconnect, device number 4 [ 101.062355][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.078173][ T1726] device veth1_macvtap entered promiscuous mode [ 101.089827][ T24] audit: type=1326 audit(1725038354.630:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fbd3eb9 code=0x7ffc0000 [ 101.108326][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.132458][ T24] audit: type=1326 audit(1725038354.630:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fbd3eb9 code=0x7ffc0000 [ 101.171239][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.178502][ T24] audit: type=1326 audit(1725038354.660:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f676fbd3eb9 code=0x7ffc0000 [ 101.203451][ T24] audit: type=1326 audit(1725038354.660:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f676fbd3ef3 code=0x7ffc0000 [ 101.229157][ T24] audit: type=1326 audit(1725038354.680:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f676fbd299f code=0x7ffc0000 [ 101.253147][ T24] audit: type=1326 audit(1725038354.710:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f676fbd3f47 code=0x7ffc0000 [ 101.278540][ T24] audit: type=1326 audit(1725038354.710:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f676fbd2850 code=0x7ffc0000 [ 101.449794][ T481] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 101.689800][ T481] usb 1-1: Using ep0 maxpacket: 16 [ 101.809891][ T481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.820939][ T481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.831695][ T481] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 101.840907][ T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.859638][ T481] usb 1-1: config 0 descriptor?? [ 102.433989][ T481] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 102.473400][ T481] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 102.530847][ T481] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 102.562982][ T481] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 102.593321][ T481] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 102.639530][ T1617] usb 3-1: USB disconnect, device number 11 [ 102.656783][ T481] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 102.859972][ T481] cp2112 0003:10C4:EA90.0011: Part Number: 0x00 Device Version: 0x00 [ 103.429918][ T481] cp2112 0003:10C4:EA90.0011: error reading lock byte: 0 [ 103.609813][ T1617] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.634476][ T481] usb 1-1: USB disconnect, device number 9 [ 103.889226][ T1797] incfs: Can't find or create .index dir in ./file0 [ 103.896474][ T1797] incfs: mount failed -14 [ 103.970089][ T1617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.981830][ T1617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.991524][ T1617] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 104.000454][ T1617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.009427][ T1617] usb 2-1: config 0 descriptor?? [ 104.219852][ T481] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 104.670442][ T481] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 104.683049][ T481] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 104.694626][ T481] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 104.703717][ T481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.740590][ T1799] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.169945][ T1617] uclogic 0003:256C:006D.0012: interface is invalid, ignoring [ 105.659934][ T481] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 105.668721][ T481] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input12 [ 105.861557][ T481] usb 3-1: USB disconnect, device number 12 [ 106.414050][ T1826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.477'. [ 106.528369][ T1705] usb 2-1: USB disconnect, device number 5 [ 106.580332][ T1617] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.909927][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 106.909960][ T24] audit: type=1400 audit(1725038360.590:612): avc: denied { setopt } for pid=1850 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.979881][ T1617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.006322][ T24] audit: type=1326 audit(1725038360.680:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1853 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5395b0eb9 code=0x7ffc0000 [ 107.010550][ T1617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.050012][ T24] audit: type=1326 audit(1725038360.710:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1853 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5395b0eb9 code=0x7ffc0000 [ 107.085915][ T1617] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 107.109862][ T1617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.126644][ T24] audit: type=1326 audit(1725038360.710:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1853 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fb5395b0eb9 code=0x7ffc0000 [ 107.131885][ T1617] usb 4-1: config 0 descriptor?? [ 107.179942][ T24] audit: type=1326 audit(1725038360.710:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1853 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5395b0eb9 code=0x7ffc0000 [ 107.231502][ T24] audit: type=1326 audit(1725038360.710:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1853 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5395b0eb9 code=0x7ffc0000 [ 107.290008][ T24] audit: type=1326 audit(1725038360.710:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1853 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fb5395b0eb9 code=0x7ffc0000 [ 107.320131][ T24] audit: type=1326 audit(1725038360.710:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1853 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5395b0eb9 code=0x7ffc0000 [ 107.375941][ T24] audit: type=1326 audit(1725038360.710:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1853 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5395b0eb9 code=0x7ffc0000 [ 107.401063][ T24] audit: type=1326 audit(1725038360.710:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1853 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb5395b0eb9 code=0x7ffc0000 [ 107.619875][ T1617] usbhid 4-1:0.0: can't add hid device: -71 [ 107.626032][ T1617] usbhid: probe of 4-1:0.0 failed with error -71 [ 107.676301][ T1617] usb 4-1: USB disconnect, device number 8 [ 107.709769][ T685] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.777818][ T1872] erofs: (device loop2): mounted with root inode @ nid 36. [ 107.811911][ T1872] attempt to access beyond end of device [ 107.811911][ T1872] loop2: rw=0, want=32, limit=16 [ 107.949796][ T685] usb 5-1: Using ep0 maxpacket: 8 [ 107.984062][ T1877] syz.1.496[1877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.984181][ T1877] syz.1.496[1877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.069949][ T685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.103878][ T685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.117527][ T685] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 108.128844][ T685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.151052][ T685] usb 5-1: config 0 descriptor?? [ 108.234476][ T1886] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 262395 (only 8 groups) [ 108.653058][ T685] playstation 0003:054C:0CE6.0013: unknown main item tag 0x0 [ 108.663343][ T685] playstation 0003:054C:0CE6.0013: unknown main item tag 0x0 [ 108.673751][ T685] playstation 0003:054C:0CE6.0013: unknown main item tag 0x0 [ 108.689802][ T685] playstation 0003:054C:0CE6.0013: unknown main item tag 0x0 [ 108.689830][ T1617] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.704592][ T685] playstation 0003:054C:0CE6.0013: unknown main item tag 0x0 [ 108.711904][ T685] playstation 0003:054C:0CE6.0013: unknown main item tag 0x0 [ 108.719278][ T685] playstation 0003:054C:0CE6.0013: unknown main item tag 0x0 [ 108.728621][ T685] playstation 0003:054C:0CE6.0013: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.4-1/input0 [ 108.909911][ T685] playstation 0003:054C:0CE6.0013: Invalid byte count transferred, expected 20 got 0 [ 108.919463][ T685] playstation 0003:054C:0CE6.0013: Failed to retrieve DualSense pairing info: -22 [ 108.923304][ T1913] device syzkaller0 entered promiscuous mode [ 108.928904][ T685] playstation 0003:054C:0CE6.0013: Failed to get MAC address from DualSense [ 108.943262][ T685] playstation 0003:054C:0CE6.0013: Failed to create dualsense. [ 108.952591][ T685] playstation: probe of 0003:054C:0CE6.0013 failed with error -22 [ 108.969911][ T1617] usb 2-1: Using ep0 maxpacket: 32 [ 109.120173][ T1617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.121103][ T1921] incfs: Can't find or create .index dir in ./file0 [ 109.136987][ T1921] incfs: mount failed -14 [ 109.141753][ T1617] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.155171][ T1617] usb 2-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.00 [ 109.164415][ T1617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.175562][ T1852] usb 5-1: USB disconnect, device number 10 [ 109.182238][ T1617] usb 2-1: config 0 descriptor?? [ 109.235896][ T1923] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 109.633823][ T685] usb 2-1: USB disconnect, device number 6 [ 109.960046][ T1940] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.967166][ T1940] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.975185][ T1940] device bridge_slave_0 entered promiscuous mode [ 109.982925][ T1940] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.990295][ T1940] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.998056][ T1940] device bridge_slave_1 entered promiscuous mode [ 110.987823][ T1948] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 111.025982][ T1948] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 111.061383][ T1955] device pim6reg1 entered promiscuous mode [ 111.116708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.125051][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.145786][ T465] device veth1_macvtap left promiscuous mode [ 111.152067][ T465] device veth0_vlan left promiscuous mode [ 111.381841][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.390500][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.411136][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.418033][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.426146][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.434667][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.443819][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.450733][ T685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.469797][ T1852] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 111.471475][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.485768][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.494514][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.505582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.514831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.523670][ T1973] device bridge_slave_1 left promiscuous mode [ 111.530249][ T1973] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.538502][ T1973] device bridge_slave_0 left promiscuous mode [ 111.545409][ T1973] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.651136][ T1976] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 111.663988][ T1976] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 111.678706][ T1976] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #3: comm syz.3.532: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 111.679902][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.706873][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.715421][ T1976] EXT4-fs (loop3): no journal found [ 111.721289][ T1976] EXT4-fs (loop3): can't get journal size [ 111.728220][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.736686][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.747596][ T1940] device veth0_vlan entered promiscuous mode [ 111.757374][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.759666][ T1976] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue [ 111.765200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.816673][ T1940] device veth1_macvtap entered promiscuous mode [ 111.829770][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.838199][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.848847][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.874206][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.889170][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.900718][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.912069][ T1852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.924060][ T1852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.934450][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.937616][ T1549] EXT4-fs error (device loop3): __ext4_iget:4958: inode #15: block 1803188595: comm syz-executor: invalid block [ 111.943152][ T1852] usb 5-1: New USB device found, idVendor=0001, idProduct=72d0, bcdDevice= 0.00 [ 111.965187][ T1852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.968946][ T1549] EXT4-fs error (device loop3): __ext4_iget:4958: inode #15: block 1803188595: comm syz-executor: invalid block [ 111.988259][ T1852] usb 5-1: config 0 descriptor?? [ 112.180497][ T1989] device syzkaller0 entered promiscuous mode [ 112.464085][ T1852] hid-generic 0003:0001:72D0.0014: unknown main item tag 0x0 [ 112.480550][ T1852] hid-generic 0003:0001:72D0.0014: unknown main item tag 0x0 [ 112.504703][ T1852] hid-generic 0003:0001:72D0.0014: item fetching failed at offset 3/5 [ 112.528653][ T1852] hid-generic: probe of 0003:0001:72D0.0014 failed with error -22 [ 112.577127][ T1998] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.585042][ T1998] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.593283][ T1998] device bridge_slave_0 entered promiscuous mode [ 112.608086][ T1998] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.624841][ T1998] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.633328][ T1998] device bridge_slave_1 entered promiscuous mode [ 112.688196][ T1852] usb 5-1: USB disconnect, device number 11 [ 112.764677][ T465] device bridge_slave_1 left promiscuous mode [ 112.770782][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.780299][ T465] device bridge_slave_0 left promiscuous mode [ 112.793877][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.807414][ T465] device veth1_macvtap left promiscuous mode [ 112.813681][ T465] device veth0_vlan left promiscuous mode [ 113.068684][ T1998] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.075681][ T1998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.082936][ T1998] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.089849][ T1998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.138700][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.149588][ T685] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.158057][ T685] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.179919][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.188386][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.210632][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.217871][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.225434][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.233980][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.250144][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.257128][ T685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.294462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.303775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.324779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.334251][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.362333][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.372356][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.387084][ T1998] device veth0_vlan entered promiscuous mode [ 113.393880][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.404018][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.413712][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.423016][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.445045][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.453815][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.465049][ T1998] device veth1_macvtap entered promiscuous mode [ 113.484659][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.493786][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.503318][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.520016][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.528368][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.707054][ T2023] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.730676][ T2023] EXT4-fs error (device loop2): __ext4_iget:4958: inode #2: block 7274496: comm syz.2.545: invalid block [ 113.743936][ T2023] EXT4-fs (loop2): get root inode failed [ 113.749429][ T2023] EXT4-fs (loop2): mount failed [ 113.900212][ T2029] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 113.909033][ T2029] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 113.917825][ T2029] overlayfs: missing 'lowerdir' [ 114.112508][ T2037] EXT4-fs (loop2): Ignoring removed oldalloc option [ 114.134821][ T2037] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.549: Parent and EA inode have the same ino 15 [ 114.148638][ T2037] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.162558][ T2037] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.549: Parent and EA inode have the same ino 15 [ 114.175334][ T2037] EXT4-fs (loop2): 1 orphan inode deleted [ 114.181217][ T2037] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,minixdf,,errors=continue [ 115.880761][ T2058] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 115.968728][ T2058] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 116.019234][ T2058] overlayfs: missing 'lowerdir' [ 116.253642][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 116.253677][ T24] audit: type=1326 audit(1725038369.930:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.4.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dbe602eb9 code=0x0 [ 116.325040][ T24] audit: type=1326 audit(1725038370.000:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2081 comm="syz.0.563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6c6869eb9 code=0x0 [ 116.479226][ T2087] kvm: pic: non byte write [ 116.484088][ T2087] kvm: pic: non byte write [ 116.516636][ T2087] kvm: pic: non byte write [ 116.525107][ T2087] kvm: pic: non byte write [ 116.537599][ T2087] kvm: pic: non byte write [ 116.550615][ T2087] kvm: pic: non byte write [ 116.561796][ T2087] kvm: pic: non byte write [ 116.572964][ T2087] kvm: pic: non byte write [ 116.584786][ T2087] kvm: pic: non byte write [ 116.825320][ T2099] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 116.917920][ T2102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.570'. [ 117.059501][ T2106] incfs: Can't find or create .index dir in ./file0 [ 117.066224][ T2106] incfs: mount failed -14 [ 117.145019][ T2108] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 117.173313][ T2108] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038 (0x7fffffff) [ 117.214853][ T24] audit: type=1400 audit(1725038370.890:633): avc: denied { write } for pid=2107 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.250064][ T24] audit: type=1400 audit(1725038370.920:634): avc: denied { getopt } for pid=2107 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.454772][ T24] audit: type=1400 audit(1725038371.130:635): avc: denied { validate_trans } for pid=2127 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 117.657708][ T2135] syz.3.583[2135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.657840][ T2135] syz.3.583[2135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.724116][ T2135] device syzkaller0 entered promiscuous mode [ 117.769777][ T685] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.997838][ T2146] device batadv_slave_0 entered promiscuous mode [ 118.111038][ T2153] netlink: 60 bytes leftover after parsing attributes in process `syz.0.591'. [ 118.130149][ T685] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.147936][ T685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.159822][ T20] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.164516][ T685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.183750][ T685] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 118.269880][ T685] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 118.279418][ T685] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 118.288300][ T685] usb 5-1: Manufacturer: syz [ 118.301284][ T685] usb 5-1: config 0 descriptor?? [ 118.530023][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.541419][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.552159][ T20] usb 4-1: New USB device found, idVendor=056a, idProduct=01bb, bcdDevice= 0.00 [ 118.561489][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.572152][ T20] usb 4-1: config 0 descriptor?? [ 118.781563][ T685] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 118.788821][ T685] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 118.800538][ T685] appleir 0003:05AC:8243.0015: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 119.040310][ T20] hid (null): unknown global tag 0xe [ 119.047939][ T20] wacom 0003:056A:01BB.0016: unknown global tag 0xe [ 119.055123][ T20] wacom 0003:056A:01BB.0016: item 0 2 1 14 parsing failed [ 119.063507][ T20] wacom 0003:056A:01BB.0016: parse failed [ 119.069289][ T20] wacom: probe of 0003:056A:01BB.0016 failed with error -22 [ 119.077255][ T685] usb 5-1: USB disconnect, device number 12 [ 119.126891][ T2175] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2204: inode #15: comm syz.2.598: corrupted in-inode xattr [ 119.146875][ T2175] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.598: couldn't read orphan inode 15 (err -117) [ 119.159048][ T2175] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 119.251339][ T1705] usb 4-1: USB disconnect, device number 9 [ 119.251886][ T2192] netlink: 'syz.2.603': attribute type 13 has an invalid length. [ 119.259985][ T5] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.402538][ T2195] FAT-fs (loop2): bogus logical sector size 2175 [ 119.408822][ T2195] FAT-fs (loop2): Can't find a valid FAT filesystem [ 119.521561][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 119.612063][ T2199] EXT4-fs (loop2): Test dummy encryption mode enabled [ 119.623294][ T2199] EXT4-fs (loop2): Ignoring removed oldalloc option [ 119.630932][ T2199] EXT4-fs (loop2): Test dummy encryption mode enabled [ 119.652517][ T2199] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.606: invalid block [ 119.664089][ T2199] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.606: couldn't read orphan inode 11 (err -117) [ 119.677129][ T2199] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,oldalloc,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 119.715485][ T24] audit: type=1400 audit(1725038373.390:636): avc: denied { unlink } for pid=2198 comm="syz.2.606" name="#17" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 119.771748][ T24] audit: type=1326 audit(1725038373.420:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2201 comm="syz.0.607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6c6869eb9 code=0x0 [ 119.830287][ T5] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=69.e6 [ 119.839924][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.847924][ T5] usb 2-1: Product: syz [ 119.857476][ T5] usb 2-1: Manufacturer: syz [ 119.862046][ T5] usb 2-1: SerialNumber: syz [ 119.868117][ T5] usb 2-1: config 0 descriptor?? [ 119.960645][ T24] audit: type=1400 audit(1725038373.640:638): avc: denied { mounton } for pid=2210 comm="syz.3.610" path="/proc/25/cgroup" dev="proc" ino=25551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 119.999427][ T2211] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.051463][ T2211] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.087808][ T2211] EXT4-fs (loop3): 1 truncate cleaned up [ 120.100371][ T9] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 120.123166][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6242: comm kworker/u4:1: Failed to release dquot type 1 [ 120.150105][ T2211] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue [ 120.208333][ T24] audit: type=1400 audit(1725038373.880:639): avc: denied { wake_alarm } for pid=2224 comm="syz.4.614" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.321156][ T1705] usb 2-1: USB disconnect, device number 7 [ 120.382127][ T2232] device syzkaller0 entered promiscuous mode [ 120.469815][ T5] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 120.554481][ T2238] EXT4-fs (loop3): 1 orphan inode deleted [ 120.566752][ T2238] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 120.590105][ T2238] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 120.694184][ T2252] syz.4.624[2252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.694305][ T2252] syz.4.624[2252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.703270][ T2249] kvm: pic: non byte write [ 120.721403][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 120.732052][ T2249] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 120.839940][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.864204][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.881122][ T5] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 120.914599][ T2258] device syzkaller0 entered promiscuous mode [ 120.915271][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.941915][ T5] usb 3-1: config 0 descriptor?? [ 121.083629][ T2270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.630'. [ 121.349889][ T2290] device syzkaller0 entered promiscuous mode [ 121.432290][ T5] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 121.439376][ T5] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 121.446407][ T5] apple 0003:05AC:0247.0017: item fetching failed at offset 2/160 [ 121.454996][ T5] apple 0003:05AC:0247.0017: parse failed [ 121.461329][ T5] apple: probe of 0003:05AC:0247.0017 failed with error -22 [ 121.677746][ T1705] usb 3-1: USB disconnect, device number 13 [ 122.269814][ T1852] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.613058][ T2337] syz.0.657[2337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.613177][ T2337] syz.0.657[2337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.669946][ T1852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.693869][ T1852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.704746][ T1852] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 122.713985][ T1852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.731086][ T2339] EXT4-fs (loop2): Ignoring removed oldalloc option [ 122.750358][ T1852] usb 2-1: config 0 descriptor?? [ 122.767997][ T2339] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.658: invalid block [ 122.779833][ T2339] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.658: couldn't read orphan inode 11 (err -117) [ 122.792474][ T2339] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,prjquota,grpjquota=,,errors=continue [ 122.852658][ T2345] Zero length message leads to an empty skb [ 122.863003][ T2345] netlink: 104 bytes leftover after parsing attributes in process `syz.0.660'. [ 122.874403][ T292] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5869: Out of memory [ 122.885443][ T292] EXT4-fs error (device loop2): __ext4_unlink:3393: inode #2: comm syz-executor: mark_inode_dirty error [ 122.946103][ T9] tipc: Disabling bearer [ 122.961856][ T9] tipc: Left network mode [ 123.182261][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 123.182296][ T24] audit: type=1326 audit(1725038376.860:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2358 comm="syz.3.668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e344daeb9 code=0x0 [ 123.240818][ T1852] hid (null): bogus close delimiter [ 123.268511][ T2361] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.275978][ T2361] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.287152][ T2361] device bridge_slave_0 entered promiscuous mode [ 123.300092][ T2361] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.307277][ T2361] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.315476][ T2361] device bridge_slave_1 entered promiscuous mode [ 123.430179][ T2361] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.437237][ T2361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.444465][ T2361] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.451585][ T2361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.459504][ T1852] usb 2-1: language id specifier not provided by device, defaulting to English [ 123.473139][ T9] device veth1_macvtap left promiscuous mode [ 123.479030][ T9] device veth0_vlan left promiscuous mode [ 123.632287][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.639586][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.680662][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.688200][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.710121][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.718642][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.727805][ T1705] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.734709][ T1705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.743117][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.751752][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.760034][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.766891][ T1705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.777585][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.786169][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.812656][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.821843][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.831131][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.839604][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.857168][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.865846][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.875156][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.883727][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.894518][ T1852] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0018/input/input13 [ 123.909324][ T2361] device veth0_vlan entered promiscuous mode [ 123.912102][ T1852] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0018/input/input14 [ 123.930545][ T1852] uclogic 0003:256C:006D.0018: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 123.962643][ T2361] device veth1_macvtap entered promiscuous mode [ 123.975952][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.984847][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.993282][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.030263][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.039016][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.055942][ T2368] netlink: 76 bytes leftover after parsing attributes in process `syz.0.678'. [ 124.081582][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.105918][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.114448][ T1852] usb 2-1: USB disconnect, device number 8 [ 124.920723][ T2384] EXT4-fs (loop4): barriers disabled [ 124.926018][ T2384] JBD2: no valid journal superblock found [ 124.931770][ T2384] EXT4-fs (loop4): error loading journal [ 125.344890][ T24] audit: type=1326 audit(1725038379.020:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2391 comm="syz.4.675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dbe602eb9 code=0x0 [ 125.716678][ T24] audit: type=1400 audit(1725038379.390:661): avc: denied { name_bind } for pid=2402 comm="syz.3.679" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 126.319972][ T24] audit: type=1326 audit(1725038380.000:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.4.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dbe602eb9 code=0x0 [ 126.417927][ T2423] device pim6reg1 entered promiscuous mode [ 126.593050][ T2433] tipc: Started in network mode [ 126.605746][ T2433] tipc: Own node identity 1, cluster identity 4711 [ 126.629900][ T2433] tipc: 32-bit node address hash set to 1 [ 127.019759][ T680] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 127.053865][ T24] audit: type=1326 audit(1725038380.730:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2441 comm="syz.4.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbe602eb9 code=0x7ffc0000 [ 127.099867][ T24] audit: type=1326 audit(1725038380.730:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2441 comm="syz.4.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbe602eb9 code=0x7ffc0000 [ 127.144369][ T24] audit: type=1326 audit(1725038380.750:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2441 comm="syz.4.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dbe602eb9 code=0x7ffc0000 [ 127.202219][ T24] audit: type=1326 audit(1725038380.750:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2441 comm="syz.4.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbe602eb9 code=0x7ffc0000 [ 127.228349][ T24] audit: type=1326 audit(1725038380.750:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2441 comm="syz.4.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbe602eb9 code=0x7ffc0000 [ 127.252623][ T24] audit: type=1326 audit(1725038380.750:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2441 comm="syz.4.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f6dbe602eb9 code=0x7ffc0000 [ 127.431657][ T680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.452668][ T680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.476688][ T680] usb 1-1: New USB device found, idVendor=056a, idProduct=01bb, bcdDevice= 0.00 [ 127.486882][ T680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.506201][ T680] usb 1-1: config 0 descriptor?? [ 128.663185][ T680] hid (null): unknown global tag 0xe [ 128.671933][ T680] wacom 0003:056A:01BB.0019: unknown global tag 0xe [ 128.678394][ T680] wacom 0003:056A:01BB.0019: item 0 2 1 14 parsing failed [ 128.795000][ T680] wacom 0003:056A:01BB.0019: parse failed [ 128.800887][ T680] wacom: probe of 0003:056A:01BB.0019 failed with error -22 [ 128.812668][ T680] usb 1-1: USB disconnect, device number 10 [ 129.134570][ T2472] netlink: 104 bytes leftover after parsing attributes in process `syz.4.702'. [ 129.260971][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 129.261003][ T24] audit: type=1400 audit(1725038382.940:694): avc: denied { create } for pid=2475 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 129.290817][ T24] audit: type=1400 audit(1725038382.970:695): avc: denied { ioctl } for pid=2475 comm="syz.0.704" path="socket:[27388]" dev="sockfs" ino=27388 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 129.316551][ T2478] netlink: 'syz.3.701': attribute type 12 has an invalid length. [ 129.439852][ T680] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.819905][ T680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.851173][ T680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.869789][ T680] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 129.880946][ T680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.898289][ T680] usb 5-1: config 0 descriptor?? [ 130.337018][ T2501] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro, [ 130.347776][ T2501] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 130.397495][ T680] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 130.420037][ T680] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001A/input/input15 [ 130.500194][ T680] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 130.598366][ T680] usb 5-1: USB disconnect, device number 13 [ 131.065927][ T2519] netlink: 104 bytes leftover after parsing attributes in process `syz.1.717'. [ 131.207788][ T2523] device bridge_slave_1 left promiscuous mode [ 131.214101][ T1852] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.228474][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.244703][ T2523] device bridge_slave_0 left promiscuous mode [ 131.257667][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.629987][ T1852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.653150][ T1852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.683086][ T1852] usb 3-1: New USB device found, idVendor=056a, idProduct=01bb, bcdDevice= 0.00 [ 131.699757][ T1852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.719415][ T1852] usb 3-1: config 0 descriptor?? [ 132.109818][ T20] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 132.200435][ T1852] hid (null): unknown global tag 0xe [ 132.216173][ T1852] wacom 0003:056A:01BB.001B: unknown global tag 0xe [ 132.226016][ T1852] wacom 0003:056A:01BB.001B: item 0 2 1 14 parsing failed [ 132.240807][ T1852] wacom 0003:056A:01BB.001B: parse failed [ 132.254567][ T1852] wacom: probe of 0003:056A:01BB.001B failed with error -22 [ 132.410980][ T1852] usb 3-1: USB disconnect, device number 14 [ 132.479833][ T20] usb 5-1: config 0 has no interfaces? [ 132.485253][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 132.507471][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.533123][ T20] usb 5-1: config 0 descriptor?? [ 132.589026][ T2551] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 132.772485][ T2530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 132.784910][ T2530] device macsec0 entered promiscuous mode [ 132.793362][ T680] usb 5-1: USB disconnect, device number 14 [ 132.859775][ T20] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.989926][ T2556] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.996887][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.019791][ T2556] device bridge_slave_0 entered promiscuous mode [ 133.030568][ T2556] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.047896][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.068836][ T2556] device bridge_slave_1 entered promiscuous mode [ 133.140108][ T2565] device syzkaller0 entered promiscuous mode [ 133.233524][ T2556] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.240547][ T2556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.247816][ T2556] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.254740][ T2556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.349911][ T20] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 133.361539][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.368697][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.382035][ T680] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.393981][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.405851][ T680] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.426588][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 133.457096][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.466341][ T680] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.473329][ T680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.477584][ T24] audit: type=1400 audit(1725038387.150:696): avc: denied { read } for pid=2569 comm="syz.0.739" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.486073][ T2571] binder: BINDER_SET_CONTEXT_MGR already set [ 133.509390][ T2572] exfat: Deprecated parameter 'utf8' [ 133.514979][ T2572] exfat: Deprecated parameter 'utf8' [ 133.529032][ T2572] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 133.551924][ T2571] binder: 2569:2571 ioctl 4018620d 200001c0 returned -16 [ 133.560124][ T20] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 133.571248][ T24] audit: type=1400 audit(1725038387.160:697): avc: denied { open } for pid=2569 comm="syz.0.739" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.582953][ T20] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 133.605107][ T24] audit: type=1400 audit(1725038387.160:698): avc: denied { ioctl } for pid=2569 comm="syz.0.739" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.632850][ T24] audit: type=1400 audit(1725038387.160:699): avc: denied { set_context_mgr } for pid=2569 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 133.638811][ T20] usb 2-1: Manufacturer: syz [ 133.690869][ T20] usb 2-1: config 0 descriptor?? [ 133.694975][ T24] audit: type=1400 audit(1725038387.160:700): avc: denied { map } for pid=2569 comm="syz.0.739" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.738596][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.748880][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.758442][ T1852] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.765326][ T1852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.773782][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.783232][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.823662][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.833471][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.848449][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.857496][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.869203][ T2556] device veth0_vlan entered promiscuous mode [ 133.928952][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.939634][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.957978][ T2556] device veth1_macvtap entered promiscuous mode [ 134.070426][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.078258][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.087480][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.105216][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.114194][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.434153][ T2587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 134.473274][ T20] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 134.480861][ T20] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 134.491329][ T20] appleir 0003:05AC:8243.001C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 134.506378][ T20] usb 2-1: USB disconnect, device number 9 [ 134.658473][ T2590] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 134.961130][ T465] tipc: Left network mode [ 135.451226][ T465] device bridge_slave_1 left promiscuous mode [ 135.459937][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.468390][ T465] device bridge_slave_0 left promiscuous mode [ 135.475062][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.487546][ T465] device veth1_macvtap left promiscuous mode [ 135.499903][ T465] device veth0_vlan left promiscuous mode [ 135.629764][ T321] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.699865][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.917066][ T2603] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.940895][ T2603] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.953344][ T2603] device bridge_slave_0 entered promiscuous mode [ 135.965647][ T2603] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.972636][ T2603] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.980992][ T2603] device bridge_slave_1 entered promiscuous mode [ 136.000056][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.027758][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.043447][ T321] usb 2-1: New USB device found, idVendor=056a, idProduct=01bb, bcdDevice= 0.00 [ 136.059906][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.079750][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.087786][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.101835][ T2603] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.108742][ T2603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.115876][ T321] usb 2-1: config 0 descriptor?? [ 136.115919][ T2603] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.120822][ T20] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 136.127855][ T2603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.150112][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.178857][ T20] usb 1-1: config 0 descriptor?? [ 136.182365][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.194186][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.202508][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.230420][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.247953][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.254890][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.263597][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.271861][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.278846][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.323440][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.331983][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.357755][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.378767][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.389310][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.397978][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.408376][ T2603] device veth0_vlan entered promiscuous mode [ 136.441653][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.455878][ T2603] device veth1_macvtap entered promiscuous mode [ 136.474871][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.490423][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.544446][ T2615] syz.4.762[2615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.544576][ T2615] syz.4.762[2615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.610320][ T321] hid (null): unknown global tag 0xe [ 136.632506][ T321] wacom 0003:056A:01BB.001D: unknown global tag 0xe [ 136.639635][ T321] wacom 0003:056A:01BB.001D: item 0 2 1 14 parsing failed [ 136.648502][ T321] wacom 0003:056A:01BB.001D: parse failed [ 136.655588][ T321] wacom: probe of 0003:056A:01BB.001D failed with error -22 [ 136.719911][ T1852] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.821059][ T321] usb 2-1: USB disconnect, device number 10 [ 137.079903][ T1852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.091065][ T1852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.101247][ T1852] usb 4-1: New USB device found, idVendor=0001, idProduct=72d0, bcdDevice= 0.00 [ 137.110452][ T1852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.121054][ T1852] usb 4-1: config 0 descriptor?? [ 137.372354][ T20] uclogic 0003:256C:006D.001E: interface is invalid, ignoring [ 137.622725][ T1852] hid-generic 0003:0001:72D0.001F: unknown main item tag 0x0 [ 137.640012][ T1852] hid-generic 0003:0001:72D0.001F: unknown main item tag 0x0 [ 137.649502][ T1852] hid-generic 0003:0001:72D0.001F: item fetching failed at offset 3/5 [ 137.667310][ T1852] hid-generic: probe of 0003:0001:72D0.001F failed with error -22 [ 137.793079][ T2636] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro, [ 137.822957][ T2636] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038 (0x7fffffff) [ 137.842554][ T680] usb 4-1: USB disconnect, device number 10 [ 137.849775][ T24] audit: type=1326 audit(1725038391.520:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468514aeb9 code=0x7ffc0000 [ 137.967464][ T24] audit: type=1326 audit(1725038391.520:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468514aeb9 code=0x7ffc0000 [ 137.997351][ T24] audit: type=1326 audit(1725038391.560:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f468514aeb9 code=0x7ffc0000 [ 138.022196][ T24] audit: type=1326 audit(1725038391.560:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468514aeb9 code=0x7ffc0000 [ 138.051670][ T24] audit: type=1326 audit(1725038391.560:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468514aeb9 code=0x7ffc0000 [ 138.075193][ T24] audit: type=1326 audit(1725038391.560:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f468514aeb9 code=0x7ffc0000 [ 138.098904][ T1705] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 138.106889][ T24] audit: type=1326 audit(1725038391.560:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468514aeb9 code=0x7ffc0000 [ 138.130822][ T24] audit: type=1326 audit(1725038391.560:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468514aeb9 code=0x7ffc0000 [ 138.155615][ T24] audit: type=1326 audit(1725038391.560:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f468514aeb9 code=0x7ffc0000 [ 138.180931][ T1852] usb 1-1: USB disconnect, device number 11 [ 138.191681][ T24] audit: type=1326 audit(1725038391.560:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468514aeb9 code=0x7ffc0000 [ 138.499908][ T1705] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 138.522645][ T1705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.533801][ T680] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 138.544312][ T1705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.555277][ T1705] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 138.649906][ T1705] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 138.659022][ T1705] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 138.667770][ T1705] usb 3-1: Manufacturer: syz [ 138.682586][ T1705] usb 3-1: config 0 descriptor?? [ 138.789789][ T680] usb 5-1: Using ep0 maxpacket: 8 [ 138.920184][ T680] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 138.953571][ T680] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.973887][ T680] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 139.160010][ T680] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.177973][ T680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.188669][ T1705] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 139.196019][ T680] usb 5-1: Product: syz [ 139.200932][ T1705] appleir 0003:05AC:8243.0020: No inputs registered, leaving [ 139.210631][ T680] usb 5-1: Manufacturer: syz [ 139.215079][ T680] usb 5-1: SerialNumber: syz [ 139.221559][ T2664] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 139.238000][ T1705] appleir 0003:05AC:8243.0020: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 139.283679][ T2664] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf, [ 139.353550][ T2664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.360990][ T2664] IPv6: NLM_F_CREATE should be set when creating new route [ 139.368043][ T2664] IPv6: NLM_F_CREATE should be set when creating new route [ 139.462057][ T15] usb 3-1: USB disconnect, device number 15 [ 139.570128][ T680] usb 5-1: 0:2 : does not exist [ 139.584712][ T680] usb 5-1: USB disconnect, device number 15 [ 139.631502][ T2673] netlink: 'syz.1.769': attribute type 27 has an invalid length. [ 139.666588][ T2673] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.673983][ T2673] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.875172][ T2674] device veth0_vlan left promiscuous mode [ 139.894172][ T2674] device veth0_vlan entered promiscuous mode [ 139.914617][ T2669] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.768: bg 0: block 234: padding at end of block bitmap is not set [ 139.929082][ T2669] EXT4-fs (loop3): Remounting filesystem read-only [ 139.932114][ T2674] device veth1_macvtap left promiscuous mode [ 139.951650][ T2674] device veth1_macvtap entered promiscuous mode [ 140.166939][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.185032][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.220330][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.238926][ T1852] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.245882][ T1852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.259893][ T680] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 140.276453][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.291883][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.321565][ T1852] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.328605][ T1852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.333998][ T2687] incfs: Can't find or create .index dir in ./file0 [ 140.343095][ T2687] incfs: mount failed -14 [ 140.356342][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.376942][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 140.385202][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.407196][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 140.430421][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.439370][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.457875][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.466266][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.480322][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.491999][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.500426][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.509104][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.517620][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.526027][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.534457][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.539807][ T680] usb 1-1: Using ep0 maxpacket: 8 [ 140.542714][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.555137][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.563403][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.572054][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.580532][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.588907][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.597170][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.605172][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.612825][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.621358][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.630288][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.638379][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 140.646175][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 140.653956][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 140.661587][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 140.669356][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.690082][ T680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.707086][ T680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.717849][ T680] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 140.758600][ T680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.783582][ T680] usb 1-1: config 0 descriptor?? [ 141.040067][ T1852] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 141.049942][ T1705] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.109776][ T5] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 141.262595][ T680] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 141.270074][ T680] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 141.277348][ T680] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 141.285353][ T680] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 141.293060][ T680] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 141.300697][ T680] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 141.307957][ T680] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 141.330329][ T680] playstation 0003:054C:0CE6.0021: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 141.349968][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 141.400600][ T1852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.411739][ T1852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.420081][ T1705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.421534][ T1852] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 141.439986][ T1705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.441262][ T1852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.459892][ T1705] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 141.467234][ T1852] usb 5-1: config 0 descriptor?? [ 141.481508][ T5] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 141.493370][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.501627][ T680] playstation 0003:054C:0CE6.0021: Invalid byte count transferred, expected 20 got 0 [ 141.511456][ T1705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.521635][ T5] usb 2-1: config 0 descriptor?? [ 141.526582][ T680] playstation 0003:054C:0CE6.0021: Failed to retrieve DualSense pairing info: -22 [ 141.538211][ T1705] usb 4-1: config 0 descriptor?? [ 141.543913][ T680] playstation 0003:054C:0CE6.0021: Failed to get MAC address from DualSense [ 141.552792][ T680] playstation 0003:054C:0CE6.0021: Failed to create dualsense. [ 141.563389][ T680] playstation: probe of 0003:054C:0CE6.0021 failed with error -22 [ 141.709232][ T15] usb 1-1: USB disconnect, device number 12 [ 141.979890][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 141.990234][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 142.052981][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 142.357302][ T1852] usb 5-1: string descriptor 0 read error: -71 [ 142.379897][ T1852] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #200: -71 [ 142.388639][ T1852] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 142.409789][ T1852] uclogic 0003:256C:006D.0022: failed probing pen v2 parameters: -71 [ 142.417852][ T1852] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 142.440192][ T1852] uclogic: probe of 0003:256C:006D.0022 failed with error -71 [ 142.465814][ T1852] usb 5-1: USB disconnect, device number 16 [ 143.564960][ T1705] uclogic 0003:256C:006D.0023: interface is invalid, ignoring [ 143.878645][ T2733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.789'. [ 143.930027][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 143.955358][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 143.967966][ T5] asix: probe of 2-1:0.0 failed with error -71 [ 143.976446][ T5] usb 2-1: USB disconnect, device number 11 [ 144.025971][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 144.026007][ T24] audit: type=1400 audit(1725038397.700:718): avc: denied { read write } for pid=2740 comm="syz.0.792" name="uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.061697][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.072799][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.080952][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.088435][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.096444][ T24] audit: type=1400 audit(1725038397.700:719): avc: denied { open } for pid=2740 comm="syz.0.792" path="/dev/uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.120496][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.128091][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.135951][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.143613][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.158130][ T20] usb 4-1: USB disconnect, device number 11 [ 144.158694][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.205295][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.226490][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.242417][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.250425][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.257773][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.266118][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.273953][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.281712][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.289062][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.298167][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.305833][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.313736][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.321470][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.328927][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.336868][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.344553][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.353018][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.360939][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.368376][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.376183][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.383781][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.391723][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.399213][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.407191][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.414990][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.422882][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.430475][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.450963][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.468484][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.501083][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.515268][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.529511][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.545278][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.553212][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.560847][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.568484][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.576382][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.584225][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.585438][ T2738] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (67108865, 24) [ 144.599917][ T2738] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 144.612873][ T680] hid-generic 0000:FFFF:0000.0024: unknown main item tag 0x0 [ 144.621675][ T2738] F2FS-fs (loop2): invalid crc value [ 144.630296][ T2738] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.670980][ T680] hid-generic 0000:FFFF:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 144.683126][ T24] audit: type=1400 audit(1725038398.360:720): avc: denied { ioctl } for pid=2748 comm="syz.1.794" path="socket:[29911]" dev="sockfs" ino=29911 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.745653][ T2738] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 144.752731][ T2738] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 144.823171][ T2759] incfs_lookup_dentry err:-14 [ 144.827720][ T2759] incfs: Can't find or create .incomplete dir in ./file0 [ 144.848926][ T24] audit: type=1400 audit(1725038398.520:721): avc: denied { remove_name } for pid=2756 comm="syz.3.796" name=".index" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.850429][ T2759] incfs: mount failed -14 [ 144.900206][ T24] audit: type=1400 audit(1725038398.520:722): avc: denied { rmdir } for pid=2756 comm="syz.3.796" name=".index" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.055534][ T24] audit: type=1400 audit(1725038398.730:723): avc: denied { setopt } for pid=2765 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.106669][ T24] audit: type=1400 audit(1725038398.780:724): avc: denied { bind } for pid=2765 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.289317][ T24] audit: type=1400 audit(1725038398.960:725): avc: denied { write } for pid=2776 comm="syz.3.803" path="socket:[29943]" dev="sockfs" ino=29943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.389337][ T2781] IPv4: Oversized IP packet from 136.202.26.0 [ 145.764243][ T2796] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.779237][ T2796] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.810: casefold flag without casefold feature [ 145.792755][ T2796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.810: missing EA_INODE flag [ 145.805669][ T2796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.810: error while reading EA inode 12 err=-117 [ 145.819232][ T2796] EXT4-fs (loop3): 1 orphan inode deleted [ 145.824943][ T2796] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,min_batch_time=0x0000000000000007,delalloc,auto_da_alloc,norecovery,nogrpid,journal_ioprio=0x0000000000000001,,errors=continue [ 146.125430][ T2807] incfs_lookup_dentry err:-14 [ 146.130195][ T2807] incfs: Can't find or create .incomplete dir in ./file0 [ 146.138065][ T2807] incfs: mount failed -14 [ 146.259390][ T2808] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.266701][ T2808] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.275255][ T2808] device bridge_slave_0 entered promiscuous mode [ 146.287519][ T2808] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.294681][ T2808] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.302532][ T2808] device bridge_slave_1 entered promiscuous mode [ 146.419268][ T2808] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.426218][ T2808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.433439][ T2808] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.440344][ T2808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.452889][ T110] device bridge_slave_1 left promiscuous mode [ 146.460011][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.468377][ T110] device bridge_slave_0 left promiscuous mode [ 146.475198][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.486319][ T110] device veth1_macvtap left promiscuous mode [ 146.492352][ T110] device veth0_vlan left promiscuous mode [ 146.679845][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 146.685739][ T1288] Bluetooth: hci0: sending frame failed (-49) [ 146.700678][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.708884][ T680] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.716895][ T680] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.729031][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.737904][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.744915][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.761344][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.769535][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.776571][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.793362][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.810718][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.828929][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.847230][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.856445][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.864348][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.874230][ T2808] device veth0_vlan entered promiscuous mode [ 146.893001][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.905644][ T2808] device veth1_macvtap entered promiscuous mode [ 146.922097][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.939253][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.948158][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.250019][ T20] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.489797][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 147.609913][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.621107][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.642963][ T20] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 147.655394][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.666208][ T20] usb 4-1: config 0 descriptor?? [ 147.734942][ T2828] EXT4-fs (loop2): Ignoring removed oldalloc option [ 147.769229][ T2828] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue [ 147.806686][ T2828] syz.2.819[2828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.806849][ T2828] syz.2.819[2828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.931845][ T24] audit: type=1326 audit(1725038401.610:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2838 comm="syz.4.824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dbe602eb9 code=0x0 [ 147.971386][ T2843] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.987456][ T2843] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.825: casefold flag without casefold feature [ 148.000484][ T2843] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.825: missing EA_INODE flag [ 148.012136][ T2843] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.825: error while reading EA inode 12 err=-117 [ 148.025199][ T2843] EXT4-fs (loop2): 1 orphan inode deleted [ 148.031353][ T2843] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,min_batch_time=0x0000000000000007,delalloc,auto_da_alloc,norecovery,nogrpid,journal_ioprio=0x0000000000000001,,errors=continue [ 148.176335][ T2825] erofs: (device loop3): mounted with root inode @ nid 36. [ 148.208317][ T2825] attempt to access beyond end of device [ 148.208317][ T2825] loop3: rw=0, want=14552337264, limit=16 [ 148.257312][ T2856] device bridge_slave_1 left promiscuous mode [ 148.273902][ T2856] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.291082][ T2856] device bridge_slave_0 left promiscuous mode [ 148.297263][ T2856] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.309832][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 148.315857][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 148.334299][ T20] usb 4-1: USB disconnect, device number 12 [ 148.582944][ T2859] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.590717][ T2859] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.599179][ T2859] device bridge_slave_0 entered promiscuous mode [ 148.608890][ T2859] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.616551][ T2859] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.625449][ T2859] device bridge_slave_1 entered promiscuous mode [ 148.748206][ T465] device bridge_slave_1 left promiscuous mode [ 148.754973][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.760018][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 148.768605][ T1288] Bluetooth: hci0: sending frame failed (-49) [ 148.771718][ T465] device bridge_slave_0 left promiscuous mode [ 148.784415][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.798758][ T465] device veth1_macvtap left promiscuous mode [ 148.804785][ T465] device veth0_vlan left promiscuous mode [ 148.913057][ T2865] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.833: casefold flag without casefold feature [ 148.926832][ T2865] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.833: missing EA_INODE flag [ 148.940105][ T2865] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.833: error while reading EA inode 12 err=-117 [ 148.953208][ T2865] EXT4-fs (loop4): 1 orphan inode deleted [ 148.959030][ T2865] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 148.964860][ T2868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 148.983556][ T2868] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 149.476543][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.487743][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.507161][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.510360][ T2882] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.516239][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.537179][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.544182][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.554587][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.563921][ T2882] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.837: casefold flag without casefold feature [ 149.577519][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.586040][ T2882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.837: missing EA_INODE flag [ 149.597888][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.599843][ T1852] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 149.604930][ T685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.620602][ T2882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.837: error while reading EA inode 12 err=-117 [ 149.641165][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.657847][ T2882] EXT4-fs (loop4): 1 orphan inode deleted [ 149.664118][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.676258][ T2882] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,min_batch_time=0x0000000000000007,delalloc,auto_da_alloc,norecovery,nogrpid,journal_ioprio=0x0000000000000001,,errors=continue [ 149.705314][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.714828][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.723461][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.765192][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.780316][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.810597][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.819153][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.827347][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.841679][ T2859] device veth0_vlan entered promiscuous mode [ 149.877201][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.889200][ T2859] device veth1_macvtap entered promiscuous mode [ 149.918265][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.927017][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.944705][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.970651][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.999902][ T1852] usb 4-1: config 0 has no interfaces? [ 150.005759][ T1852] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.029737][ T1852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.056300][ T1852] usb 4-1: config 0 descriptor?? [ 150.160609][ T2887] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 150.205968][ T2887] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 150.237148][ T2887] overlayfs: missing 'lowerdir' [ 150.383583][ T2877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 150.403302][ T2877] device macsec0 entered promiscuous mode [ 150.414018][ T1852] usb 4-1: USB disconnect, device number 13 [ 150.463608][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.479888][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.491368][ T2891] device bridge_slave_0 entered promiscuous mode [ 150.510348][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.520064][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.530952][ T2891] device bridge_slave_1 entered promiscuous mode [ 150.592634][ T465] device veth1_macvtap left promiscuous mode [ 150.599458][ T465] device veth0_vlan left promiscuous mode [ 150.839778][ T1852] Bluetooth: hci0: command 0x1009 tx timeout [ 150.867638][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.874613][ T2891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.881875][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.888841][ T2891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.941965][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.962632][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.980938][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.988866][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.015361][ T2902] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.844: casefold flag without casefold feature [ 151.049194][ T2902] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.844: missing EA_INODE flag [ 151.057680][ T2906] syz.0.845[2906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.061066][ T2906] syz.0.845[2906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.062050][ T2902] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.844: error while reading EA inode 12 err=-117 [ 151.096434][ T2902] EXT4-fs (loop3): 1 orphan inode deleted [ 151.102784][ T2902] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 151.102985][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.130357][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.137361][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.155765][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.165859][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.172792][ T685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.181386][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.193480][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.267794][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.281788][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.291586][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.300943][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.314861][ T2891] device veth0_vlan entered promiscuous mode [ 151.335905][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.346945][ T2891] device veth1_macvtap entered promiscuous mode [ 151.365442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.378906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.520753][ T1852] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 151.682465][ T2915] attempt to access beyond end of device [ 151.682465][ T2915] loop4: rw=2049, want=130, limit=128 [ 151.905913][ T2915] attempt to access beyond end of device [ 151.905913][ T2915] loop4: rw=2049, want=191, limit=128 [ 151.920663][ T1852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.947910][ T1852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.999956][ T1852] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 152.038837][ T1852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.125535][ T2915] attempt to access beyond end of device [ 152.125535][ T2915] loop4: rw=2049, want=131, limit=128 [ 152.153489][ T1852] usb 3-1: config 0 descriptor?? [ 152.223744][ T2915] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 152.242428][ T2915] attempt to access beyond end of device [ 152.242428][ T2915] loop4: rw=2049, want=132, limit=128 [ 152.289815][ T2915] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 152.298238][ T2915] attempt to access beyond end of device [ 152.298238][ T2915] loop4: rw=2049, want=133, limit=128 [ 152.309030][ T2915] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 152.341319][ T2915] attempt to access beyond end of device [ 152.341319][ T2915] loop4: rw=2049, want=134, limit=128 [ 152.353449][ T2915] Buffer I/O error on dev loop4, logical block 133, lost async page write [ 152.363118][ T2915] attempt to access beyond end of device [ 152.363118][ T2915] loop4: rw=2049, want=135, limit=128 [ 152.374356][ T2915] Buffer I/O error on dev loop4, logical block 134, lost async page write [ 152.383079][ T2915] attempt to access beyond end of device [ 152.383079][ T2915] loop4: rw=2049, want=136, limit=128 [ 152.394138][ T2915] Buffer I/O error on dev loop4, logical block 135, lost async page write [ 152.403846][ T2915] attempt to access beyond end of device [ 152.403846][ T2915] loop4: rw=2049, want=137, limit=128 [ 152.415366][ T2915] Buffer I/O error on dev loop4, logical block 136, lost async page write [ 152.527745][ T2930] incfs: Can't find or create .index dir in ./file0 [ 152.542299][ T2930] incfs: mount failed -14 [ 152.631859][ T24] audit: type=1400 audit(1725038406.310:727): avc: denied { remount } for pid=2934 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 152.631907][ T2935] SELinux: security_context_str_to_sid(staff_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 153.039821][ T24] audit: type=1400 audit(1725038406.700:728): avc: denied { bind } for pid=2942 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.059041][ T5] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 153.379899][ T1852] uclogic 0003:256C:006D.0025: interface is invalid, ignoring [ 153.589746][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 153.695796][ T2948] mmap: syz.4.858 (2948) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 153.710210][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.728403][ T5] usb 4-1: config 0 has no interface number 0 [ 153.734810][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 153.832806][ T24] audit: type=1400 audit(1725038407.510:729): avc: denied { sys_module } for pid=2953 comm="syz.0.860" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 153.880102][ T5] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 153.893490][ T5] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 153.902611][ T5] usb 4-1: Product: syz [ 153.906619][ T5] usb 4-1: SerialNumber: syz [ 153.915421][ T5] usb 4-1: config 0 descriptor?? [ 153.939920][ T2938] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 154.211767][ T5] usb 4-1: invalid MIDI in EP 0 [ 154.217338][ T5] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 154.234955][ T5] usb 4-1: USB disconnect, device number 14 [ 154.768518][ T685] usb 3-1: USB disconnect, device number 16 [ 154.807094][ T2979] syz.2.871[2979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.807212][ T2979] syz.2.871[2979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.833950][ T2979] syz.2.871[2979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.845777][ T2979] syz.2.871[2979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.848132][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.947750][ T2966] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.957748][ T2966] device bridge_slave_0 entered promiscuous mode [ 154.977718][ T2979] device pim6reg1 entered promiscuous mode [ 155.010420][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.020331][ T2966] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.053344][ T2966] device bridge_slave_1 entered promiscuous mode [ 155.095025][ T353] Bluetooth: hci1: Frame reassembly failed (-84) [ 155.177068][ T2990] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 155.355799][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.362741][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.369927][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.373629][ T3001] irq bypass consumer (token ffff88812685bc80) registration fails: -16 [ 155.376803][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.410922][ T24] audit: type=1326 audit(1725038409.090:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3000 comm="syz.4.877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52994cdeb9 code=0x0 [ 155.434773][ T685] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.443288][ T685] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.451343][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.459242][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.489785][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.498135][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.505049][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.514234][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.523138][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.530032][ T685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.553101][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.565232][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.595115][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.616855][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.620093][ T1852] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 155.626340][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.640606][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.658103][ T2966] device veth0_vlan entered promiscuous mode [ 155.676306][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.687173][ T2966] device veth1_macvtap entered promiscuous mode [ 155.710540][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.719126][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.791409][ T353] device bridge_slave_1 left promiscuous mode [ 155.797583][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.807316][ T353] device bridge_slave_0 left promiscuous mode [ 155.814004][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.836105][ T353] device veth1_macvtap left promiscuous mode [ 155.844058][ T353] device veth0_vlan left promiscuous mode [ 155.845977][ T3011] netlink: 'syz.1.879': attribute type 13 has an invalid length. [ 155.869925][ T1852] usb 3-1: Using ep0 maxpacket: 16 [ 155.990054][ T1852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 156.160110][ T1852] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 156.179482][ T1852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.189265][ T1852] usb 3-1: Product: syz [ 156.194141][ T1852] usb 3-1: Manufacturer: syz [ 156.199030][ T1852] usb 3-1: SerialNumber: syz [ 156.206539][ T1852] usb 3-1: config 0 descriptor?? [ 156.252084][ T1852] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 156.273882][ T1852] usb 3-1: Detected FT232RL [ 156.470004][ T1852] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 156.483558][ T24] audit: type=1400 audit(1725038410.160:731): avc: denied { rename } for pid=3024 comm="syz.4.884" name="file0" dev="loop4" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.507050][ T24] audit: type=1400 audit(1725038410.160:732): avc: denied { reparent } for pid=3024 comm="syz.4.884" name="file0" dev="loop4" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.712664][ T24] audit: type=1326 audit(1725038410.380:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.1.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45be857eb9 code=0x7ffc0000 [ 156.737344][ T24] audit: type=1326 audit(1725038410.380:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.1.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45be857eb9 code=0x7ffc0000 [ 156.762656][ T24] audit: type=1326 audit(1725038410.380:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.1.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f45be857eb9 code=0x7ffc0000 [ 156.841348][ T24] audit: type=1326 audit(1725038410.380:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.1.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45be857eb9 code=0x7ffc0000 [ 156.869240][ T1852] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 156.969367][ T685] usb 3-1: USB disconnect, device number 17 [ 156.996620][ T685] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 157.016967][ T685] ftdi_sio 3-1:0.0: device disconnected [ 157.160035][ T1852] Bluetooth: hci1: command 0x1003 tx timeout [ 157.166317][ T1288] Bluetooth: hci1: sending frame failed (-49) [ 157.302552][ T3054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 157.312241][ T3054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.892'. [ 158.538761][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 158.538797][ T24] audit: type=1326 audit(1725038412.210:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3060 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c6869eb9 code=0x7ffc0000 [ 158.613011][ T24] audit: type=1326 audit(1725038412.260:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3060 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa6c6869eb9 code=0x7ffc0000 [ 158.638649][ T24] audit: type=1326 audit(1725038412.310:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3060 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fa6c6869eb9 code=0x7ffc0000 [ 158.677166][ T24] audit: type=1326 audit(1725038412.310:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3060 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c6869eb9 code=0x7ffc0000 [ 158.701102][ T24] audit: type=1326 audit(1725038412.310:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3060 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c6869eb9 code=0x7ffc0000 [ 158.786839][ T24] audit: type=1400 audit(1725038412.450:748): avc: denied { append } for pid=3067 comm="syz.0.899" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.882296][ T3076] incfs: Can't find or create .index dir in ./file0 [ 158.888995][ T3076] incfs: mount failed -5 [ 158.921288][ T3070] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 158.950188][ T3070] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 158.995360][ T24] audit: type=1400 audit(1725038412.670:749): avc: denied { ioctl } for pid=3078 comm="syz.0.903" path="/dev/uinput" dev="devtmpfs" ino=165 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 158.998403][ T3079] input: syz0 as /devices/virtual/input/input16 [ 159.139868][ T680] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 159.239839][ T1617] Bluetooth: hci1: command 0x1001 tx timeout [ 159.245795][ T1288] Bluetooth: hci1: sending frame failed (-49) [ 159.377213][ T24] audit: type=1400 audit(1725038413.050:750): avc: denied { rename } for pid=3088 comm="syz.4.907" name="file1" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 159.399187][ T680] usb 2-1: Using ep0 maxpacket: 8 [ 159.421101][ T24] audit: type=1400 audit(1725038413.100:751): avc: denied { setcheckreqprot } for pid=3098 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 159.519877][ T680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.539765][ T680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.557606][ T680] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.583258][ T680] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 159.599814][ T680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.622028][ T680] usb 2-1: config 0 descriptor?? [ 159.639495][ T3106] device pim6reg1 entered promiscuous mode [ 159.737130][ T3112] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 159.872899][ T3074] binder: 3073:3074 ioctl 400c620e 0 returned -14 [ 159.995935][ T3122] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 160.016430][ T3120] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 160.123496][ T680] hid-steam 0003:28DE:1102.0026: unknown main item tag 0x0 [ 160.131521][ T680] hid-steam 0003:28DE:1102.0026: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 160.145180][ T680] hid-steam 0003:28DE:1102.0027: unknown main item tag 0x0 [ 160.157343][ T680] hid-steam 0003:28DE:1102.0027: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 160.229927][ T680] hid-steam 0003:28DE:1102.0026: Steam Controller 'XXXXXXXXXX' connected [ 160.243908][ T680] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0026/input/input17 [ 160.360757][ T5] usb 2-1: USB disconnect, device number 12 [ 160.379109][ T5] hid-steam 0003:28DE:1102.0026: Steam Controller 'XXXXXXXXXX' disconnected [ 160.454562][ T3132] device syzkaller0 entered promiscuous mode [ 160.530411][ T3134] blk_update_request: I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 160.620210][ T3137] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.630593][ T3137] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 160.714413][ T24] audit: type=1400 audit(1725038414.390:752): avc: denied { write } for pid=3143 comm="syz.0.926" path="socket:[31612]" dev="sockfs" ino=31612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 160.719405][ T3139] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.773487][ T3139] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.786723][ T3139] device bridge_slave_0 entered promiscuous mode [ 160.794685][ T3139] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.801844][ T3139] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.810361][ T3139] device bridge_slave_1 entered promiscuous mode [ 161.007254][ T3139] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.014275][ T3139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.021661][ T3139] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.028545][ T3139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.082169][ T1705] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.090970][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.102829][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.110539][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.132318][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.141811][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.148691][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.156789][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.167585][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.174675][ T685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.196338][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.204188][ T5] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 161.221165][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.249820][ T1617] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 161.250711][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.278073][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.288017][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.298476][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.308193][ T465] device bridge_slave_1 left promiscuous mode [ 161.314876][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.322472][ T321] Bluetooth: hci1: command 0x1009 tx timeout [ 161.328781][ T465] device bridge_slave_0 left promiscuous mode [ 161.335534][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.344595][ T465] device veth1_macvtap left promiscuous mode [ 161.350714][ T465] device veth0_vlan left promiscuous mode [ 161.372336][ T3160] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.933: casefold flag without casefold feature [ 161.385168][ T3160] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 161.396988][ T3160] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 161.469810][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 161.534658][ T3139] device veth0_vlan entered promiscuous mode [ 161.555678][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.569651][ T3139] device veth1_macvtap entered promiscuous mode [ 161.591065][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.601347][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 161.610002][ T1617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.613429][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 161.631616][ T1617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.634566][ T5] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 161.644250][ T1617] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 161.654082][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.662789][ T1617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.672116][ T5] usb 1-1: config 0 descriptor?? [ 161.693155][ T1617] usb 2-1: config 0 descriptor?? [ 161.703454][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.712046][ T3150] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.731693][ T5] hub 1-1:0.0: USB hub found [ 161.964771][ T5] hub 1-1:0.0: 2 ports detected [ 162.182735][ T1617] itetech 0003:06CB:73F4.0028: unknown main item tag 0x0 [ 162.189822][ T1617] itetech 0003:06CB:73F4.0028: unknown main item tag 0x0 [ 162.197390][ T1617] itetech 0003:06CB:73F4.0028: unknown main item tag 0x0 [ 162.204467][ T1617] itetech 0003:06CB:73F4.0028: unknown main item tag 0x0 [ 162.211422][ T1617] itetech 0003:06CB:73F4.0028: unknown main item tag 0x0 [ 162.218244][ T1617] itetech 0003:06CB:73F4.0028: unknown main item tag 0x0 [ 162.225185][ T1617] itetech 0003:06CB:73F4.0028: unknown main item tag 0x0 [ 162.233668][ T1617] itetech 0003:06CB:73F4.0028: hidraw0: USB HID v0.00 Device [HID 06cb:73f4] on usb-dummy_hcd.1-1/input0 [ 162.339519][ T465] device bridge_slave_1 left promiscuous mode [ 162.345956][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.354954][ T465] device bridge_slave_0 left promiscuous mode [ 162.361484][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.372025][ T465] device veth1_macvtap left promiscuous mode [ 162.377921][ T465] device veth0_vlan left promiscuous mode [ 162.388527][ T3180] input: syz0 as /devices/virtual/input/input18 [ 162.528941][ T1617] usb 2-1: USB disconnect, device number 13 [ 163.542774][ T20] usb 1-1: USB disconnect, device number 13 [ 163.559895][ T5] hub 1-1:0.0: hub_ext_port_status failed (err = -71) SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=2 req=923 state=1 status=67 (errno 9: Bad file descriptor) [ 165.429770][ T1705] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 165.529840][ T5] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 165.744926][ T3240] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.751920][ T3240] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.759963][ T3240] device bridge_slave_0 entered promiscuous mode [ 165.767620][ T3240] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.774745][ T3240] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.782784][ T3240] device bridge_slave_1 entered promiscuous mode [ 165.790323][ T1705] usb 5-1: device descriptor read/all, error -71 [ 165.895920][ T3240] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.902891][ T3240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.910100][ T3240] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.916961][ T3240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.962040][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.970681][ T680] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.978143][ T680] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.990638][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.998897][ T1852] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.005790][ T1852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.014626][ T9] device bridge_slave_1 left promiscuous mode [ 166.020740][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.028541][ T9] device bridge_slave_0 left promiscuous mode [ 166.034698][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.044116][ T9] device veth1_macvtap left promiscuous mode [ 166.050009][ T9] device veth0_vlan left promiscuous mode [ 166.201266][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.210213][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.217067][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.235421][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.243715][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.253113][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.261523][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.290712][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.299272][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.308275][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.317412][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.326789][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.334352][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.344486][ T3240] device veth0_vlan entered promiscuous mode [ 166.360004][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.368261][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.378852][ T3240] device veth1_macvtap entered promiscuous mode [ 166.401867][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.409999][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.418348][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.427266][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.436553][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.246311][ T9] device bridge_slave_1 left promiscuous mode [ 167.252587][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.260594][ T9] device bridge_slave_0 left promiscuous mode [ 167.266575][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.275445][ T9] device bridge_slave_1 left promiscuous mode [ 167.281472][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.289315][ T9] device bridge_slave_0 left promiscuous mode [ 167.295735][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.305111][ T9] device veth1_macvtap left promiscuous mode [ 167.311152][ T9] device veth0_vlan left promiscuous mode [ 167.317028][ T9] device veth1_macvtap left promiscuous mode [ 167.323350][ T9] device veth0_vlan left promiscuous mode [ 169.080935][ T9] device bridge_slave_1 left promiscuous mode [ 169.086927][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.095229][ T9] device bridge_slave_0 left promiscuous mode [ 169.101680][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.110983][ T9] device veth1_macvtap left promiscuous mode [ 169.116834][ T9] device veth0_vlan left promiscuous mode