last executing test programs: 6.162788514s ago: executing program 3 (id=464): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4064005) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500010000001c0012800e00010069703665727370616e"], 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 5.827976546s ago: executing program 3 (id=470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) 5.581467663s ago: executing program 3 (id=477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r1) 5.462487691s ago: executing program 2 (id=483): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 5.426663974s ago: executing program 3 (id=486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x2f, 0x0, @empty, @private1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000380)={@rand_addr=0x64010100, @rand_addr=0x64010102, @multicast1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f00000000c0)=""/53, 0x35, 0x0, &(0x7f0000000100)=""/99, 0x63}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000280), 0x1, 0x4f6, &(0x7f00000007c0)="$eJzs3d9rXFkdAPDvvclk0zZrZlVkXXB3cVfSRTuTbNxtEGkriD4V1PoeYzIJIZNMyExqE4qm+AcIIir45JMvgn+AIP0TRCjou6gooq0+aq/MzI02yUwyNZNMd/L5wMk95/76nnPJnLl37uHeAC6sNyPiVkSMRMQ7ETGZz0/zNN8s7LXXe/L4/mIzJZFld/6WRJLP299XszwaEVfam8R4RHztyxHfTI7Gre/sri1Uq5WtvFxurG+W6zu711bXF1YqK5WN2dmZ9+euz703N53lTtXOYkTc+OKffvi9n33pxq8+863fz//l6reb1fr8x9r1jojFUwXoor3vQutY7Gseo62zCDYAI3l7CiODrgkAAL1onuN/OCI+2Tr/n4yR1tkcAAAAMEyymxPxryQiAwAAAIZWGhETkaSlfCzARKRpqdQew/vRuJxWa/XGp5dr2xtLzWURxSiky6vVynQ+VrgYhaRZnsnH2O6X3z1Uno2IVyLiB5OXWuXSYq26NOgfPwAAAOCCuPLGwev/f06mrTwAAAAwZIpdCwAAAMCwcMkPAAAAw8/1PwAAAAy1r9y+3UzZ/nu8l+7ubK/V7l5bqtTXSuvbi6XF2tZmaaVWW2k9s2/9pP1Va7XNz8bG9r1yo1JvlOs7u/Prte2NxvzqgVdgAwAAAOfolTce/i6JiL3PXWqlyJ8DCHDAHwddAaCfRgZdAWBgRgddAWBgCieuoYeAYZecsLzr4J1f978uAADA2Zj6+NH7/2P5spN/GwA+yIz1AYCLx909uLgKRgDChfeh9uSlbstPf/8/y567UgAAQF9NtFKSlvJ7gRORpqVSxMut1wIUkuXVamU6vz747WThpWZ5prVlcuKYYQAAAAAAAAAAAAAAAAAAAAAAAACgLcuSyAAAAIChFpH+OWk9zT9iavLtiYO/Dhx669dP7vzo3kKjsTUTMZb8fbI5aywiGj/O57+beSUAAAAAvADa1+n5dGbQtQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg2Dx5fH9xP51n3L9+ISKKneKPxnhrOh6FiLj8jyRGn9kuiYiRPsTfexARr3aKn8TTLMuKeS06xb90xvGLrUPTOX4aEVf6EB8usofN/udWp89fGm+2pp0/f6N5Oq3u/V/63/5vpEv/83KPMV579Ity1/gPIl4b7dz/7MdP2vGTOBT/rR7jf+Pru7vdlmU/jZjq+P2THIhVbqxvlus7u9dW1xdWKiuVjdnZmffnrs+9NzddXl6tVvK/HWN8/xO/fHpc+y93iV882P4jx//tHtv/70f3Hn+knS10in/1rc7fv692iZ/m332fyvPN5VP7+b12/lmv//w3rx/X/qUu7R8/of1Xe2z/O1/97h96XBUAOAf1nd21hWq1snVMZryHdc45c/PFqIZMvzLZd9r/j6fbzyk3P5LJTrP5aPShGmPP8Tntb2aQvRIAAHAW/nfSP+iaAAAAAAAAAAAAAAAAAAAAwMX1fz4hbDwiel75cMy9wTQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBY/wkAAP//E77WGg==") 5.221475357s ago: executing program 3 (id=492): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/147}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[], 0x0) 5.144414283s ago: executing program 3 (id=498): open_tree(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000400)={[{@sysvgroups}, {@noblock_validity}, {@debug}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x542, &(0x7f00000027c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4.515163335s ago: executing program 1 (id=512): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 4.514129675s ago: executing program 1 (id=514): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) 4.401730933s ago: executing program 1 (id=515): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@bsdgroups}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r0, 0x7ffffb, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fallocate(r1, 0x8, 0x0, 0x10000) 4.319124328s ago: executing program 1 (id=517): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 4.261753922s ago: executing program 4 (id=518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.261297422s ago: executing program 4 (id=519): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972ac", 0x6d}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) 4.242988564s ago: executing program 4 (id=520): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x4020400) syz_open_dev$loop(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2604c090, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r2, 0x0, r0, 0x0, 0x406f413, 0x0) 4.223098815s ago: executing program 1 (id=521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) close(r3) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 4.169721228s ago: executing program 1 (id=522): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) 3.389553132s ago: executing program 4 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.309736887s ago: executing program 4 (id=529): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "78e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="00000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.948164871s ago: executing program 2 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r5}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.923919923s ago: executing program 2 (id=531): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file1\x00', 0x0) unlink(&(0x7f0000000200)='./file1\x00') 2.853722377s ago: executing program 2 (id=532): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.840633258s ago: executing program 2 (id=533): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$eJzs3c9rHG0dAPDvTLJvf+U1qXqoBdtiK2nR7iaNbYOHWkHsqWCt9xqTTQjZZEN20zahSIp3BREVPHnyIvgHCNI/QYSC3qWKItrqwYO6srOztY27TaDbnb7J5wPTeWae3f1+n4admeeZh50ADq1zEXEzIkYi4lJEjOf703y51a6/03ndi+eP5ttLEq3W3b8mkeT7up+V5OsTEbETEUcj4uu3Ir6V/H/cxtb2ylytVt3ItyvN1fVKY2v78vLq3FJ1qbo2MzN9bfb67NXZqYG0cyIibnzljz/83s++euNXn3/w+3t/vvjtdlpjef2r7RikTtNL2f9F12hEbLyLYAUYydelPvXfHRliMgAA7Kl9jf/xiPhMdv0/HiPZ1SkAAABwkLS+NBb/SiJaAAAAwIGVZnNgk7SczwUYizQtlztzeD8Zx9NavdH83GJ9c22hM1d2Ikrp4nKtOpXPFZ6IUtLens7n2Ha3r+zanomIkxHxg/Fj2XZ5vl5bKHrwAwAAAA6JE7v6//8Yz/r/R4rOCwAAABiwiaITAAAAAN45/X8AAAA4+PT/AQAA4ED72u3b7aXVff71wv2tzZX6/csL1cZKeXVzvjxf31gvL9XrS9lv9q3u9Xm1en39C7G2+bDSrDaalcbW9r3V+uZa897ya4/ABgAAAIbo5Nknv0siYueLx7Kl7YOikwKGItmjPntIyLN84w9DSAgYmpGiEwAKM1p0AkBhSkUnABRur3GAvpN3fj34XAAAgHdj8lP97/8bG4CDLe1b0xpqHgDA8Lj/D4dX6fUZgFeLywQoysf2qH+b+/+dkYSWAQUAACjYWLYkaTm/FzgWaVouR3yYPRaglCwu16pTef/gt+OlI+3t6eydyZ5zhgEAAAAAAAAAAAAAAAAAAAAAAACAjlYriRYAAABwoEWkf0qyX/OPmBy/MLZ7fOCD5J/j2ToiHvzk7o8ezjWbG9Pt/X97ub/543z/lSJGMAAAAIDduv30bj8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbpxfNH891lmHH/8uWImOgZ/+zRbHU0ShFx/O9JjL7yviQiRgYQf+dxRJzqFT9ppxUT0cmiV/xjBcZPI+LEAOLDYfakffy52ev7l8a5bN37+zeaL2+r//Evje7xb6TP8efDfcY4/fQXlb7xH0ecHu19/OnGT/rEP7/P+N/8xvZ2v7rWTyMme55/ktdiVZqr65XG1vbl5dW5pepSdW1mZvra7PXZq7NTlcXlWjX/t2eM73/6l/95U/uP94k/sUf7L+yz/f9++vD5JzrFUq/4F8/3Pv+e6hM/zc99n83L7frJbnmnU37VmZ//5syb2r/Qp/0v//49TrTtmBf32f5Ld77zbJ8vBQCGoLG1vTJXq1U3PoqFNN6LNBQGUjjyfqSh0CkUfWQCAAAG7X8X/UVnAgAAAAAAAAAAAAAAAAAAAIfXMH5ObHfMnWKaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRv8NAAD//w4a23g=") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000a00)={0x2}) 2.042038672s ago: executing program 0 (id=545): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xc9\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r2, 0x0) fchdir(r3) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x140002d2) close_range(r0, 0xffffffffffffffff, 0x0) 687.900954ms ago: executing program 2 (id=546): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000002000000f9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000300)={0x40, 0x3, 0x5b, {0x5b, 0x11, "3c030f8bd6a0e0f04c3cb7646334ce6ffd4e31c611168fbac6c066ff2298582e1f29835bc437dc01efde5f160671c4cdd4453f90c0b700f25a327b837ce80b4e61ae8e3e9aefae4bdda51384f6601651c28712942548fd26e5"}}, &(0x7f0000000380)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "068ef9abb41b6fadd2e8fac58831c94e955995fdac676fc4f4e9cfb86c0461edfeda097b29eeded022804ace5bd0acba099c440f0a4ab638673a284ffdb91fe112461f6a99a6ef9b50b4f69b4a112ca729e4dc449233bfb3c496ea848301fd168f5b3d903aaf8c060ac8b45dc4cd11f15d6bfbcbbfe50ba1086f740722a805ad58ddec5604fc7219f610"}}}, &(0x7f0000000940)={0x44, &(0x7f0000000a40)={0x0, 0x16, 0xc1, "b562eaf44d0f8015e5ad1d3126af40482c81d6a3883e1292e990f899f45bc2ef12f2c519c208ae0364aaae7ce05c627233e5c6af2994669d248d4d01b074c0fb995f5cc505e316a5e56b47aba69f941d8a95cf8dd2473f4052b4adc116a97e65a2a5913414c2e66c34b3345178fc92374d987af09310c2bf8fb22d4fd6c093795af9c713d7076050190b2398eea8dfebbc79671d1f7e935d4d738e8e1072defbd3f14c62b9376c13ae627f0a82fa6e231acca3bde15556b9c816c2066a028fff88"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x34}, &(0x7f0000000540)={0x20, 0x81, 0x1, "9f"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "a4bbdb"}, &(0x7f00000007c0)={0x20, 0x83, 0x1, '%'}, &(0x7f0000000800)={0x20, 0x84, 0x2, "c656"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "7944da"}}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x11, 0x4d, {0x4d, 0xf, "fe479529e2bb4a61d2bf7791974f59c3c7ebb7c5c0ef2f7988bfcf9297b1255e66f7d3e040ab9d3fa44f6b8489a04a8baba5e38337ca9cb0141c9a3ec17ca33064db78062f2a1816260e76"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x10, 0x81, "296bc78c34b8e19d4e6258687fd8a5479b3f314cc1f4d929129f934502500932061f5be0d99979cc6cb9570b4040efdac6c12ba9004d9404e905bea7b355357de6b12c23525b63cf9e5e61042ac8ab6c9bd7dbc1a6ee5bb0045c74ac494fe3d63c8ae42de36ff5c192963b1c234bade9f77e4d7dd9088177e66b7d28a61f95b4b9"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x80}}) 687.719174ms ago: executing program 4 (id=547): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in, @in6=@empty}}, {{@in6=@dev}, 0x0, @in6=@local}}, 0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) 685.468344ms ago: executing program 0 (id=556): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(0x0) socket(0x0, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200242c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa840000070000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70280000907800000002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) 652.347447ms ago: executing program 0 (id=548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 572.758072ms ago: executing program 0 (id=549): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggonojbKRYgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyOxvJx+qqm+zIze8HszPvzsd/Zneed7bY2Q3QWOeTXEzSSjKbpJOkOLjA3dVwfthcndm8mvR6T/xcDJar2pX99c4lWUnyUJKNssjL7WRp/ZmdX7ceu++txc69H6w/PTPVgxza3dl+fO/9y29+fOnBpS+//vFykYvpHjquk1eMeK5dJLecRrH/iaJd9x7wT1x5/aNv+rm/Nck9g/x3UqZ6895euGGjkwfe+6t13/npq9unua/Ayev1Ov1r4EoPaJwySTdFOZekmi7LubnqM/y3rbPlK/MLr82+NL947YW6eyrgpHST7Uc/PfPJuSP5/6FV5X+oVetOAqein/8nr6x915/ek3JohjuqUT//s88t3x/5h8aRf2iQFw+1SvmH5hqf/1q+ogNMges/NJf8Q3PJP1zHOn8/W/6hueQfmkv+obkO5h8AaJbembrvQAbqUnf/AwAAAAAAAAAAAAAAAAAAHLc6s3l1f5hWzc/fTXYfSdIeVb81+D/i5MbB49lfiv5ifyqq1Sby7F0TbmBCH9Z89/VN30/8Ek7kizvrrJ4sX0tW3khyod0+fv4Vw/Pvv7t5zPzO8xMW+JeKI+2Hn5pu/aN+X6u3/qWt5LN+/3NhVP9T5rbBeHT/0x3/E8tjvfrbhBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgav4IAAD//7ANbcM=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x1) creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 424.936292ms ago: executing program 0 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 0s ago: executing program 0 (id=551): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ridge_slave_0) entered disabled state [ 23.064904][ T291] device bridge_slave_0 entered promiscuous mode [ 23.080082][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.086924][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.094192][ T294] device bridge_slave_0 entered promiscuous mode [ 23.100971][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.107900][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.114993][ T292] device bridge_slave_0 entered promiscuous mode [ 23.121439][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.128320][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.135418][ T291] device bridge_slave_1 entered promiscuous mode [ 23.145087][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.152065][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.159313][ T294] device bridge_slave_1 entered promiscuous mode [ 23.165612][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.172492][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.179622][ T292] device bridge_slave_1 entered promiscuous mode [ 23.284869][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.291844][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.299170][ T293] device bridge_slave_0 entered promiscuous mode [ 23.305773][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.312677][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.319916][ T293] device bridge_slave_1 entered promiscuous mode [ 23.376824][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.383694][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.390787][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.397565][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.451715][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.458715][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.465794][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.472599][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.517797][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.524791][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.531898][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.538677][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.571056][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.579971][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.588094][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.596145][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.603274][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.610379][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.618538][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.627322][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.635302][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.643223][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.650530][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.677958][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.697320][ T294] device veth0_vlan entered promiscuous mode [ 23.710071][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.717890][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.725673][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.732995][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.740764][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.767738][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.782558][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.790935][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.797760][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.805092][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.813167][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.820011][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.827216][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.838639][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.858556][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.865842][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.874172][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.882191][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.889027][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.896167][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.904089][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.910942][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.918059][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.925995][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.932826][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.940007][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.948027][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.954862][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.962276][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.972563][ T290] device veth0_vlan entered promiscuous mode [ 23.980789][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.988594][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.996732][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.004098][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.017582][ T294] device veth1_macvtap entered promiscuous mode [ 24.025435][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.033368][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.041184][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.049089][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.056961][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.064583][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.072441][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.091858][ T290] device veth1_macvtap entered promiscuous mode [ 24.099010][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.107071][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.115016][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.123636][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.131929][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.140023][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.147694][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.155752][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.163877][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.171892][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.179857][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.201627][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.209914][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.217685][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.225707][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.233776][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.241940][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.253877][ T293] device veth0_vlan entered promiscuous mode [ 24.264548][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.272418][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.280217][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.288530][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.296681][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.303956][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.319273][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.327408][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.335609][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.343657][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.352115][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.359912][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.367773][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.375439][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.384069][ T292] device veth0_vlan entered promiscuous mode [ 24.404279][ T293] device veth1_macvtap entered promiscuous mode [ 24.415444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.427803][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.436187][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.444074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.452092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.460446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.468572][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.476614][ T291] device veth0_vlan entered promiscuous mode [ 24.493707][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.503873][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.511502][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.520233][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.536836][ T292] device veth1_macvtap entered promiscuous mode [ 24.550989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.559251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.567381][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.588776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.596796][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.622573][ T291] device veth1_macvtap entered promiscuous mode [ 24.633521][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.642794][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.651381][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.659607][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.667789][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.676013][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.684106][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.719297][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.728844][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.740550][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.748791][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.793593][ T331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.824210][ T337] device pim6reg1 entered promiscuous mode [ 24.857742][ T340] loop4: detected capacity change from 0 to 512 [ 24.881214][ T344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 24.898960][ T340] ======================================================= [ 24.898960][ T340] WARNING: The mand mount option has been deprecated and [ 24.898960][ T340] and is ignored by this kernel. Remove the mand [ 24.898960][ T340] option from the mount to silence this warning. [ 24.898960][ T340] ======================================================= [ 24.968909][ T340] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.8: bad orphan inode 17 [ 24.980904][ T340] ext4_test_bit(bit=16, block=4) = 1 [ 24.986041][ T340] is_bad_inode(inode)=0 [ 24.990512][ T340] NEXT_ORPHAN(inode)=0 [ 24.996136][ T340] max_ino=32 [ 24.999370][ T340] i_nlink=1 [ 25.002437][ T340] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.052468][ T340] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.8: bg 0: block 7: invalid block bitmap [ 25.092711][ T363] loop2: detected capacity change from 0 to 512 [ 25.118310][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.159177][ T363] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 25.190433][ T363] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 25.202977][ T363] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 25.281547][ T375] input: syz0 as /devices/virtual/input/input4 [ 25.320616][ T376] loop3: detected capacity change from 0 to 512 [ 25.338350][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.368348][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 25.430993][ T371] loop4: detected capacity change from 0 to 40427 [ 25.439322][ T376] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 25.452920][ T376] ext4 filesystem being mounted at /1/bus supports timestamps until 2038 (0x7fffffff) [ 25.465966][ T371] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 25.484575][ T371] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 25.492655][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.502995][ T371] F2FS-fs (loop4): invalid crc value [ 25.503459][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.518093][ T26] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 25.527268][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.536266][ T371] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.542991][ T26] usb 2-1: config 0 descriptor?? [ 25.588410][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 25.605031][ T371] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 25.611999][ T371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.720667][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.741499][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.758640][ T39] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 25.777623][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.805134][ T39] usb 1-1: config 0 descriptor?? [ 25.905952][ T401] loop2: detected capacity change from 0 to 512 [ 25.949739][ T401] EXT4-fs (loop2): Ignoring removed orlov option [ 25.955994][ T401] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.972045][ T401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 25.980157][ T401] System zones: 1-12 [ 25.984479][ T401] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.26: casefold flag without casefold feature [ 25.997067][ T401] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.26: missing EA_INODE flag [ 26.008694][ T401] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.26: error while reading EA inode 12 err=-117 [ 26.020918][ T401] EXT4-fs (loop2): 1 orphan inode deleted [ 26.022391][ T26] playstation 0003:054C:0CE6.0001: unknown main item tag 0x0 [ 26.026520][ T401] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,abort,init_itable=0x000000000000006a,debug,noinit_itable,min_batch_time=0x0000000000000000,usrjquota=,orlov,minixdf,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 26.035742][ T26] playstation 0003:054C:0CE6.0001: unknown main item tag 0x0 [ 26.070896][ T401] EXT4-fs error (device loop2): ext4_remount:5845: comm syz.2.26: Abort forced by user [ 26.070913][ T26] playstation 0003:054C:0CE6.0001: unknown main item tag 0x0 [ 26.070938][ T26] playstation 0003:054C:0CE6.0001: unknown main item tag 0x0 [ 26.081167][ T401] EXT4-fs (loop2): Remounting filesystem read-only [ 26.087752][ T26] playstation 0003:054C:0CE6.0001: unknown main item tag 0x0 [ 26.108567][ T26] playstation 0003:054C:0CE6.0001: unknown main item tag 0x0 [ 26.115777][ T26] playstation 0003:054C:0CE6.0001: unknown main item tag 0x0 [ 26.127038][ T26] playstation 0003:054C:0CE6.0001: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 26.248361][ T26] playstation 0003:054C:0CE6.0001: Invalid reportID received, expected 9 got 0 [ 26.257141][ T26] playstation 0003:054C:0CE6.0001: Failed to retrieve DualSense pairing info: -22 [ 26.266207][ T26] playstation 0003:054C:0CE6.0001: Failed to get MAC address from DualSense [ 26.274772][ T26] playstation 0003:054C:0CE6.0001: Failed to create dualsense. [ 26.282728][ T26] playstation: probe of 0003:054C:0CE6.0001 failed with error -22 [ 26.291754][ T39] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 26.301536][ T39] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 26.305141][ T408] loop2: detected capacity change from 0 to 256 [ 26.308943][ T39] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 26.322196][ T39] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 26.329537][ T39] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 26.336775][ T39] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 26.344018][ T39] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 26.351780][ T39] playstation 0003:054C:0CE6.0002: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 26.378898][ T408] FAT-fs (loop2): bogus number of FAT sectors [ 26.384799][ T408] FAT-fs (loop2): Can't find a valid FAT filesystem [ 26.479567][ T60] usb 2-1: USB disconnect, device number 2 [ 26.508478][ T39] playstation 0003:054C:0CE6.0002: Invalid byte count transferred, expected 20 got 0 [ 26.518592][ T39] playstation 0003:054C:0CE6.0002: Failed to retrieve DualSense pairing info: -22 [ 26.527682][ T39] playstation 0003:054C:0CE6.0002: Failed to get MAC address from DualSense [ 26.536432][ T39] playstation 0003:054C:0CE6.0002: Failed to create dualsense. [ 26.545074][ T39] playstation: probe of 0003:054C:0CE6.0002 failed with error -22 [ 26.695498][ T424] loop4: detected capacity change from 0 to 512 [ 26.699152][ T422] loop2: detected capacity change from 0 to 128 [ 26.710661][ T422] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.721154][ T422] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 26.753802][ T60] usb 1-1: USB disconnect, device number 2 [ 26.770843][ T424] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 26.783324][ T427] device pim6reg1 entered promiscuous mode [ 26.793519][ T424] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 26.803092][ T424] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 26.811197][ T424] System zones: 0-2, 18-18, 34-34 [ 26.816879][ T424] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 26.831804][ T424] EXT4-fs (loop4): 1 truncate cleaned up [ 26.837354][ T424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.851549][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 26.851561][ T30] audit: type=1400 audit(1726487558.481:151): avc: denied { mounton } for pid=423 comm="syz.4.35" path="/6/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.882672][ T30] audit: type=1400 audit(1726487558.481:152): avc: denied { mount } for pid=423 comm="syz.4.35" name="/" dev="configfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 26.905292][ T30] audit: type=1400 audit(1726487558.481:153): avc: denied { search } for pid=423 comm="syz.4.35" name="/" dev="configfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.927176][ T30] audit: type=1400 audit(1726487558.481:154): avc: denied { mounton } for pid=423 comm="syz.4.35" path="/" dev="configfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.952843][ T432] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.35: path /: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 26.975536][ T30] audit: type=1400 audit(1726487558.601:155): avc: denied { read } for pid=423 comm="syz.4.35" name="/" dev="configfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.020117][ T30] audit: type=1400 audit(1726487558.601:156): avc: denied { open } for pid=423 comm="syz.4.35" path="/" dev="configfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.046830][ T291] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /6/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 27.047860][ T435] device syzkaller0 entered promiscuous mode [ 27.169361][ T291] syz-executor (291) used greatest stack depth: 20672 bytes left [ 27.230920][ T30] audit: type=1107 audit(1726487558.861:157): pid=440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 27.270388][ T30] audit: type=1400 audit(1726487558.901:158): avc: denied { read } for pid=443 comm="syz.3.44" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 27.306523][ T30] audit: type=1400 audit(1726487558.901:159): avc: denied { open } for pid=443 comm="syz.3.44" path="/dev/rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 27.330323][ T60] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.360593][ T30] audit: type=1400 audit(1726487558.981:160): avc: denied { write } for pid=447 comm="syz.3.46" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.437652][ T446] loop0: detected capacity change from 0 to 512 [ 27.449690][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.456542][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.478722][ T442] device bridge_slave_0 entered promiscuous mode [ 27.501185][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.519729][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.533540][ T442] device bridge_slave_1 entered promiscuous mode [ 27.548663][ T446] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 27.573530][ T446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 27.607591][ T446] EXT4-fs (loop0): orphan cleanup on readonly fs [ 27.608290][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 27.619225][ T446] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.45: bg 0: block 361: padding at end of block bitmap is not set [ 27.641770][ T446] EXT4-fs (loop0): Remounting filesystem read-only [ 27.653812][ T446] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 27.666136][ T446] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.45: attempt to clear invalid blocks 33619980 len 1 [ 27.679674][ T446] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.45: invalid indirect mapped block 1811939328 (level 0) [ 27.693902][ T446] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.45: invalid indirect mapped block 2185560079 (level 1) [ 27.715644][ T446] EXT4-fs (loop0): 1 truncate cleaned up [ 27.721254][ T446] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 27.769366][ T446] device veth0_vlan left promiscuous mode [ 27.775195][ T446] device veth0_vlan entered promiscuous mode [ 27.781164][ T60] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.814435][ T60] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.843927][ T446] syz.0.45 (446) used greatest stack depth: 19232 bytes left [ 27.868020][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.895566][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.909200][ T45] device bridge_slave_1 left promiscuous mode [ 27.922116][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.935797][ T45] device bridge_slave_0 left promiscuous mode [ 27.946631][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.958347][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 27.967486][ T60] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 27.976107][ T60] usb 2-1: Product: syz [ 27.980347][ T60] usb 2-1: Manufacturer: syz [ 27.985488][ T45] device veth1_macvtap left promiscuous mode [ 27.995032][ T45] device veth0_vlan left promiscuous mode [ 28.029672][ T60] hub 2-1:4.0: USB hub found [ 28.067268][ T492] loop3: detected capacity change from 0 to 256 [ 28.119343][ T492] FAT-fs (loop3): Unrecognized mount option "s\|¯ #äó8tname=lower" or missing value [ 28.168885][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.185118][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.193209][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.200058][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.207419][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.221210][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.232876][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.239736][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.248503][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.262049][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.274103][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.282004][ T60] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 28.304458][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.319298][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.330897][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.338414][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.346038][ T442] device veth0_vlan entered promiscuous mode [ 28.359241][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.368838][ T442] device veth1_macvtap entered promiscuous mode [ 28.379403][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.389379][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.438439][ T338] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.453424][ T505] capability: warning: `syz.3.66' uses deprecated v2 capabilities in a way that may be insecure [ 28.564836][ T507] syz.3.67[507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.564910][ T507] syz.3.67[507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.568958][ T502] loop4: detected capacity change from 0 to 40427 [ 28.616315][ T20] usb 2-1: USB disconnect, device number 3 [ 28.630259][ T509] device ip6gretap0 entered promiscuous mode [ 28.636666][ T509] device ip6gretap0 left promiscuous mode [ 28.643237][ T502] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 28.650850][ T502] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 28.660153][ T502] F2FS-fs (loop4): invalid crc value [ 28.666662][ T502] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.678280][ T338] usb 3-1: Using ep0 maxpacket: 16 [ 28.700384][ T502] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 28.707274][ T502] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.751619][ T516] device syzkaller0 entered promiscuous mode [ 28.798815][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.809574][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.819084][ T338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.832015][ T338] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.840926][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.870413][ T518] loop3: detected capacity change from 0 to 128 [ 28.879232][ T338] usb 3-1: config 0 descriptor?? [ 28.902185][ T520] device syzkaller0 entered promiscuous mode [ 28.916533][ T522] syz.4.70[522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.916633][ T522] syz.4.70[522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.929020][ T518] tipc: Started in network mode [ 28.949224][ T518] tipc: Node identity 4070d9636f05f51f, cluster identity 4711 [ 28.956523][ T518] tipc: Enabling of bearer rejected, failed to enable media [ 29.045593][ T528] syz.0.75[528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.045699][ T528] syz.0.75[528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.092508][ T532] tipc: Started in network mode [ 29.108156][ T532] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 29.117392][ T532] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 29.125783][ T532] tipc: Enabled bearer , priority 10 [ 29.208269][ T500] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.218047][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 29.330517][ T552] loop1: detected capacity change from 0 to 512 [ 29.363365][ T552] EXT4-fs (loop1): Test dummy encryption mode enabled [ 29.378630][ T552] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.85: casefold flag without casefold feature [ 29.384883][ T558] loop0: detected capacity change from 0 to 512 [ 29.403899][ T552] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 29.414652][ T338] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.421846][ T338] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.429294][ T338] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.436386][ T338] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.436884][ T552] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 29.443743][ T338] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.463708][ T338] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.468549][ T558] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000400000,minixdf,,errors=continue. Quota mode: writeback. [ 29.470948][ T500] usb 5-1: Using ep0 maxpacket: 16 [ 29.491475][ T338] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.508442][ T558] ext4 filesystem being mounted at /13/bus supports timestamps until 2038 (0x7fffffff) [ 29.514056][ T338] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.528752][ T552] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 29.539187][ T338] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.562759][ T292] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /13/bus/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 29.587171][ T338] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.603492][ T552] EXT4-fs error (device loop1): ext4_free_branches:1043: inode #13: block 16494100: comm syz.1.85: Read failure [ 29.627303][ T338] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input5 [ 29.649846][ T551] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 18: block 224:freeing already freed block (bit 224); block bitmap corrupt. [ 29.664501][ T500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 29.676638][ T500] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 29.692013][ T338] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 29.713897][ T500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.723610][ T338] usb 3-1: USB disconnect, device number 2 [ 29.746596][ T290] EXT4-fs error (device loop1): ext4_lookup:1855: inode #15: comm syz-executor: iget: bad extra_isize 65531 (inode size 512) [ 29.762385][ T500] usb 5-1: config 0 descriptor?? [ 29.799362][ T290] EXT4-fs error (device loop1): ext4_lookup:1855: inode #15: comm syz-executor: iget: bad extra_isize 65531 (inode size 512) [ 29.920232][ T526] loop3: detected capacity change from 0 to 131072 [ 29.996118][ T526] F2FS-fs (loop3): Mismatch valid blocks 0 vs. 2 [ 30.013049][ T526] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 30.060726][ T568] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.067613][ T568] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.075394][ T568] device bridge_slave_0 entered promiscuous mode [ 30.084303][ T568] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.095978][ T568] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.103542][ T568] device bridge_slave_1 entered promiscuous mode [ 30.218713][ T522] UDC core: couldn't find an available UDC or it's busy: -16 [ 30.225958][ T522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.238292][ T338] tipc: Node number set to 1 [ 30.261040][ T500] hid-sensor-hub 0003:0158:0100.0004: unknown main item tag 0x1 [ 30.283147][ T568] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.288336][ T500] hid-sensor-hub 0003:0158:0100.0004: unexpected long global item [ 30.290007][ T568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.297859][ T500] hid-sensor-hub 0003:0158:0100.0004: parse failed [ 30.304870][ T568] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.317950][ T568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.328674][ T500] hid-sensor-hub: probe of 0003:0158:0100.0004 failed with error -22 [ 30.378113][ T578] serio: Serial port ptm0 [ 30.407413][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.415436][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.423934][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.440332][ T10] device bridge_slave_1 left promiscuous mode [ 30.447921][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.461297][ T581] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 30.487521][ T10] device bridge_slave_0 left promiscuous mode [ 30.495527][ T500] usb 5-1: USB disconnect, device number 2 [ 30.509393][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.529417][ T10] device veth1_macvtap left promiscuous mode [ 30.535244][ T10] device veth0_vlan left promiscuous mode [ 30.728747][ T589] binder: 588:589 ioctl c0306201 20000380 returned -14 [ 30.729114][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.753427][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.777307][ T568] device veth0_vlan entered promiscuous mode [ 30.792744][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.802188][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.810073][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.817363][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.830860][ T568] device veth1_macvtap entered promiscuous mode [ 30.838110][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.846456][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.854525][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.872662][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.880945][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.889982][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.898055][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.962384][ T603] loop1: detected capacity change from 0 to 2048 [ 31.019343][ T603] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.824883][ T647] syz.1.118[647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.824956][ T647] syz.1.118[647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.968293][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.298281][ T317] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.358498][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.369960][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.379582][ T20] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 32.388716][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.407082][ T20] usb 4-1: config 0 descriptor?? [ 32.564217][ T660] loop4: detected capacity change from 0 to 128 [ 32.610243][ T660] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.620767][ T660] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 32.692328][ T317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.713085][ T317] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.717706][ T664] loop4: detected capacity change from 0 to 512 [ 32.744252][ T317] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.754090][ T317] usb 3-1: config 0 interface 0 has no altsetting 0 [ 32.768305][ T317] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 32.787337][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.805880][ T317] usb 3-1: config 0 descriptor?? [ 32.848983][ T664] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.861115][ T664] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 32.875411][ T664] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz.4.124: corrupted inode contents [ 32.887345][ T664] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz.4.124: mark_inode_dirty error [ 32.898657][ T20] hid (null): bogus close delimiter [ 32.909462][ T664] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz.4.124: corrupted inode contents [ 32.933692][ T664] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.124: mark_inode_dirty error [ 32.949973][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 32.949987][ T30] audit: type=1400 audit(1726487564.581:224): avc: denied { block_suspend } for pid=667 comm="syz.1.125" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.996370][ T664] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 33.118335][ T20] usb 4-1: string descriptor 0 read error: -22 [ 33.319229][ T317] zeroplus 0003:0C12:0005.0006: item fetching failed at offset 1/5 [ 33.332569][ T317] zeroplus 0003:0C12:0005.0006: parse failed [ 33.343031][ T317] zeroplus: probe of 0003:0C12:0005.0006 failed with error -22 [ 33.398307][ T476] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.398318][ T20] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 33.551076][ T60] usb 3-1: USB disconnect, device number 3 [ 33.556783][ T317] usb 4-1: USB disconnect, device number 2 [ 33.678263][ T476] usb 5-1: Using ep0 maxpacket: 16 [ 33.763439][ T677] loop1: detected capacity change from 0 to 1024 [ 33.799106][ T677] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.806076][ T677] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.812932][ T677] EXT4-fs (loop1): Ignoring removed orlov option [ 33.821413][ T677] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 33.846685][ T476] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 33.857368][ T476] usb 5-1: config 0 has no interface number 0 [ 33.863366][ T476] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 33.873686][ T677] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 33.998453][ T476] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 34.008333][ T476] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 34.016164][ T476] usb 5-1: Product: syz [ 34.020224][ T476] usb 5-1: SerialNumber: syz [ 34.025293][ T476] usb 5-1: config 0 descriptor?? [ 34.048310][ T674] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 34.112442][ T687] loop2: detected capacity change from 0 to 512 [ 34.138469][ T689] loop3: detected capacity change from 0 to 128 [ 34.171464][ T689] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.182332][ T689] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038 (0x7fffffff) [ 34.201916][ T687] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 34.221504][ T687] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 34.231451][ T689] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 34.254422][ T30] audit: type=1400 audit(1726487565.881:225): avc: denied { mount } for pid=686 comm="syz.2.131" name="/" dev="ramfs" ino=16239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.286500][ T293] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /34/file0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.309150][ T30] audit: type=1400 audit(1726487565.881:226): avc: denied { mounton } for pid=686 comm="syz.2.131" path="/34/file0/file0" dev="ramfs" ino=16239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 34.349804][ T476] usb 5-1: invalid MIDI in EP 0 [ 34.355202][ T476] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 34.378674][ T476] usb 5-1: USB disconnect, device number 3 [ 34.404512][ T30] audit: type=1400 audit(1726487565.911:227): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.618262][ T317] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.819699][ T697] loop1: detected capacity change from 0 to 128 [ 34.889381][ T697] attempt to access beyond end of device [ 34.889381][ T697] loop1: rw=0, want=240, limit=128 [ 34.918385][ T317] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 34.994362][ T8] attempt to access beyond end of device [ 34.994362][ T8] loop1: rw=1, want=1041, limit=128 [ 35.018302][ T317] usb 4-1: config 0 has no interfaces? [ 35.069001][ T30] audit: type=1400 audit(1726487566.701:228): avc: denied { setopt } for pid=700 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.108343][ T317] usb 4-1: config 0 has no interfaces? [ 35.128441][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 35.188497][ T317] usb 4-1: config 0 has no interfaces? [ 35.215346][ T704] kvm: pic: non byte read [ 35.269059][ T30] audit: type=1400 audit(1726487566.901:229): avc: denied { map } for pid=706 comm="syz.1.139" path="/dev/ashmem" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.298344][ T317] usb 4-1: config 0 has no interfaces? [ 35.335246][ T30] audit: type=1400 audit(1726487566.921:230): avc: denied { execute } for pid=706 comm="syz.1.139" path="/9/cgroup.stat" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.388354][ T317] usb 4-1: config 0 has no interfaces? [ 35.468545][ T317] usb 4-1: config 0 has no interfaces? [ 35.508294][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.528361][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.548296][ T317] usb 4-1: config 0 has no interfaces? [ 35.608292][ T20] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 35.621943][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 35.638236][ T20] usb 5-1: SerialNumber: syz [ 35.638333][ T317] usb 4-1: config 0 has no interfaces? [ 35.658171][ T317] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 35.678244][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.696799][ T317] usb 4-1: config 0 descriptor?? [ 35.738856][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.909072][ T20] usb 5-1: 0:2 : does not exist [ 35.944430][ T30] audit: type=1400 audit(1726487567.571:231): avc: denied { create } for pid=693 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.977413][ T694] loop3: detected capacity change from 0 to 512 [ 35.998294][ T30] audit: type=1400 audit(1726487567.591:232): avc: denied { bind } for pid=693 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.017600][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 36.062426][ T694] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.117327][ T694] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #3: comm syz.3.134: corrupted inode contents [ 36.138453][ T694] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #3: comm syz.3.134: mark_inode_dirty error [ 36.153480][ T694] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #3: comm syz.3.134: corrupted inode contents [ 36.166062][ T694] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.134: mark_inode_dirty error [ 36.168340][ T26] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.188104][ T694] Quota error (device loop3): write_blk: dquota write failed [ 36.207475][ T694] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.134: Failed to acquire dquot type 0 [ 36.207900][ T26] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.238515][ T694] EXT4-fs (loop3): 1 orphan inode deleted [ 36.244109][ T694] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.255233][ T694] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038 (0x7fffffff) [ 36.275179][ T694] UDC core: couldn't find an available UDC or it's busy: -16 [ 36.282448][ T694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.291523][ T317] usb 4-1: USB disconnect, device number 3 [ 36.333031][ T20] usb 5-1: USB disconnect, device number 4 [ 36.408301][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 36.417259][ T26] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 36.438826][ T26] usb 2-1: Product: syz [ 36.442961][ T26] usb 2-1: Manufacturer: syz [ 36.508797][ T26] hub 2-1:4.0: USB hub found [ 36.778304][ T26] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 36.838930][ T26] usb 2-1: USB disconnect, device number 4 [ 36.969972][ T726] input: syz0 as /devices/virtual/input/input6 [ 37.029464][ T728] syz.3.147[728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.029545][ T728] syz.3.147[728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.060034][ T728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.147'. [ 37.238263][ T317] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 37.347926][ T742] device syzkaller0 entered promiscuous mode [ 37.382198][ T746] loop1: detected capacity change from 0 to 512 [ 37.481826][ T746] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.508519][ T317] usb 5-1: Using ep0 maxpacket: 32 [ 37.529821][ T746] EXT4-fs (loop1): 1 truncate cleaned up [ 37.535286][ T746] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,stripe=0x0000000000000200,,errors=continue. Quota mode: none. [ 37.658317][ T317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 37.678253][ T317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 37.698258][ T317] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 37.707513][ T317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.728908][ T317] usb 5-1: config 0 descriptor?? [ 37.749594][ T724] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 37.788839][ T317] hub 5-1:0.0: USB hub found [ 38.008296][ T317] hub 5-1:0.0: 2 ports detected [ 38.016101][ T758] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.033367][ T758] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.048788][ T758] device bridge_slave_0 entered promiscuous mode [ 38.069232][ T758] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.086182][ T758] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.093774][ T758] device bridge_slave_1 entered promiscuous mode [ 38.249521][ T8] device bridge_slave_1 left promiscuous mode [ 38.255881][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.278709][ T8] device bridge_slave_0 left promiscuous mode [ 38.284795][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.303300][ T8] device veth1_macvtap left promiscuous mode [ 38.309183][ T317] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 38.318267][ T317] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 38.321039][ T8] device veth0_vlan left promiscuous mode [ 38.428293][ T317] usbhid 5-1:0.0: can't add hid device: -71 [ 38.434087][ T317] usbhid: probe of 5-1:0.0 failed with error -71 [ 38.478706][ T317] usb 5-1: USB disconnect, device number 5 [ 38.546687][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 38.546703][ T30] audit: type=1400 audit(1726487570.171:271): avc: denied { create } for pid=762 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.597945][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.605627][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.617192][ T30] audit: type=1400 audit(1726487570.201:272): avc: denied { connect } for pid=762 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.648289][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.656642][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.683493][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.690371][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.708358][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.716520][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.748465][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.755315][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.772797][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.788984][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.790989][ T767] loop3: detected capacity change from 0 to 8192 [ 38.807213][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.827123][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.858007][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.867527][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.880224][ T767] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.890221][ T758] device veth0_vlan entered promiscuous mode [ 38.897091][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.917149][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.933835][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.948940][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.964392][ T758] device veth1_macvtap entered promiscuous mode [ 38.981046][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.996055][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.009182][ T772] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 39.020245][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.031594][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.038335][ T772] FAT-fs (loop3): Filesystem has been set read-only [ 39.121240][ T776] loop1: detected capacity change from 0 to 512 [ 39.228906][ T776] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 39.239235][ T776] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.278986][ T776] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.166: corrupted in-inode xattr [ 39.298623][ T776] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.166: couldn't read orphan inode 15 (err -117) [ 39.318497][ T776] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,mblk_io_submit,user_xattr,auto_da_alloc,block_validity,quota,,errors=continue. Quota mode: writeback. [ 39.690539][ T30] audit: type=1400 audit(1726487571.321:273): avc: denied { wake_alarm } for pid=784 comm="syz.1.169" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.834283][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.849670][ T789] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.871103][ T789] device bridge_slave_0 entered promiscuous mode [ 39.885694][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.892623][ T789] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.899899][ T789] device bridge_slave_1 entered promiscuous mode [ 40.045481][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.052459][ T789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.059560][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.066304][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.104926][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.115376][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.123438][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.124011][ T30] audit: type=1400 audit(1726487571.751:274): avc: denied { read } for pid=806 comm="syz.4.175" name="usbmon7" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.155130][ T30] audit: type=1400 audit(1726487571.751:275): avc: denied { open } for pid=806 comm="syz.4.175" path="/dev/usbmon7" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.158768][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.180151][ T807] loop4: detected capacity change from 0 to 128 [ 40.208913][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.215868][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.223677][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.231840][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.238733][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.264738][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.273345][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.293080][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.307079][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.315566][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.323787][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.331968][ T789] device veth0_vlan entered promiscuous mode [ 40.347039][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.357534][ T789] device veth1_macvtap entered promiscuous mode [ 40.371033][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.385813][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.504905][ T811] syz.1.176[811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.504984][ T811] syz.1.176[811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.601951][ T30] audit: type=1326 audit(1726487572.231:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96fd36ef9 code=0x7ffc0000 [ 40.647596][ T30] audit: type=1326 audit(1726487572.271:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc96fd36ef9 code=0x7ffc0000 [ 40.674056][ T30] audit: type=1326 audit(1726487572.271:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96fd36ef9 code=0x7ffc0000 [ 40.698526][ T30] audit: type=1326 audit(1726487572.271:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc96fd36ef9 code=0x7ffc0000 [ 40.721642][ T30] audit: type=1326 audit(1726487572.271:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96fd36ef9 code=0x7ffc0000 [ 40.728330][ T317] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.188318][ T317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.199183][ T317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.212058][ T317] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.220978][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.232205][ T317] usb 1-1: config 0 descriptor?? [ 41.699365][ T317] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 41.708544][ T317] plantronics 0003:047F:FFFF.0007: unbalanced collection at end of report description [ 41.718108][ T317] plantronics 0003:047F:FFFF.0007: parse failed [ 41.724370][ T317] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22 [ 41.918913][ T317] usb 1-1: USB disconnect, device number 3 [ 42.441156][ T829] input: syz0 as /devices/virtual/input/input7 [ 42.734387][ T831] loop0: detected capacity change from 0 to 40427 [ 42.838657][ T831] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 42.849575][ T831] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.869226][ T831] F2FS-fs (loop0): invalid crc value [ 42.895573][ T831] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.968468][ T831] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.975322][ T831] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.216108][ T847] device wireguard0 entered promiscuous mode [ 43.365442][ T863] netlink: 'syz.4.194': attribute type 4 has an invalid length. [ 43.421746][ T863] netlink: 'syz.4.194': attribute type 4 has an invalid length. [ 43.431812][ T865] loop1: detected capacity change from 0 to 2048 [ 43.509558][ T865] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: none. [ 43.529314][ T868] device syzkaller0 entered promiscuous mode [ 43.538267][ T476] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 43.548430][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 43.548442][ T30] audit: type=1400 audit(1726487575.171:326): avc: denied { mount } for pid=864 comm="syz.1.195" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.586233][ T873] netlink: 48 bytes leftover after parsing attributes in process `syz.3.197'. [ 43.594982][ T873] device bridge_slave_1 left promiscuous mode [ 43.600961][ T873] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.608742][ T873] device bridge_slave_0 left promiscuous mode [ 43.614873][ T873] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.635033][ T30] audit: type=1400 audit(1726487575.261:327): avc: denied { write } for pid=864 comm="syz.1.195" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.635636][ T865] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.195: bg 0: bad block bitmap checksum [ 43.668697][ T30] audit: type=1400 audit(1726487575.261:328): avc: denied { ioctl } for pid=864 comm="syz.1.195" path="/11/file0/file2" dev="loop1" ino=16 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.694472][ T875] EXT4-fs error (device loop1): ext4_ind_map_blocks:604: inode #15: comm syz.1.195: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 43.711374][ T875] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 117 [ 43.723858][ T875] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.723858][ T875] [ 43.767726][ T30] audit: type=1400 audit(1726487575.391:329): avc: denied { unmount } for pid=758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.788567][ T758] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 43.804133][ T30] audit: type=1400 audit(1726487575.421:330): avc: denied { unmount } for pid=758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 43.831510][ T758] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 43.856615][ T758] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 43.872729][ T758] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 43.888891][ T758] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 43.898331][ T476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 43.913737][ T758] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /11/file0/lost+found: directory fails checksum at offset 0 [ 43.928619][ T758] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 43.938276][ T476] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 43.949774][ T758] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /11/file0/lost+found: directory fails checksum at offset 2048 [ 43.970348][ T758] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 43.989025][ T885] loop4: detected capacity change from 0 to 256 [ 43.992200][ T758] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /11/file0/lost+found: directory fails checksum at offset 4096 [ 44.013202][ T885] exfat: Deprecated parameter 'utf8' [ 44.024899][ T887] input: syz0 as /devices/virtual/input/input9 [ 44.029950][ T885] exfat: Deprecated parameter 'utf8' [ 44.032749][ T758] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 44.052189][ T30] audit: type=1400 audit(1726487575.681:331): avc: denied { read } for pid=85 comm="acpid" name="event3" dev="devtmpfs" ino=451 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.075338][ T758] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /11/file0/lost+found: directory fails checksum at offset 6144 [ 44.079908][ T885] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 44.090313][ T30] audit: type=1400 audit(1726487575.681:332): avc: denied { open } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=451 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.125571][ T30] audit: type=1400 audit(1726487575.681:333): avc: denied { ioctl } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=451 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.138356][ T476] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 44.150114][ T758] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 44.174508][ T758] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /11/file0/lost+found: directory fails checksum at offset 8192 [ 44.192919][ T30] audit: type=1400 audit(1726487575.821:334): avc: denied { add_name } for pid=884 comm="syz.4.201" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.193145][ T476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.214522][ T758] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 44.237502][ T30] audit: type=1400 audit(1726487575.821:335): avc: denied { associate } for pid=884 comm="syz.4.201" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 44.259703][ T758] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /11/file0/lost+found: directory fails checksum at offset 10240 [ 44.274998][ T758] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /11/file0/lost+found: directory fails checksum at offset 12288 [ 44.291852][ T758] EXT4-fs error (device loop1): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 44.303956][ T476] usb 1-1: Product: syz [ 44.307929][ T476] usb 1-1: Manufacturer: syz [ 44.328331][ T476] usb 1-1: SerialNumber: syz [ 44.358794][ T476] usb 1-1: config 0 descriptor?? [ 44.415000][ T892] syz.4.204[892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.415084][ T892] syz.4.204[892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.568408][ T895] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.586299][ T895] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.610441][ T895] device bridge_slave_0 entered promiscuous mode [ 44.623549][ T904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 44.637374][ T895] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.648609][ T476] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 44.654426][ T895] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.657480][ T476] usb 1-1: USB disconnect, device number 4 [ 44.701896][ T895] device bridge_slave_1 entered promiscuous mode [ 44.835518][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.842792][ T907] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.850547][ T907] device bridge_slave_0 entered promiscuous mode [ 44.869886][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.876740][ T907] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.884608][ T907] device bridge_slave_1 entered promiscuous mode [ 44.894170][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.901643][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.933117][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.941443][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.949617][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.956448][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.964534][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.972722][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.980923][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.987763][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.995247][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.016493][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.024201][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.047145][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.059668][ T895] device veth0_vlan entered promiscuous mode [ 45.082305][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.090610][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.097917][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.113458][ T895] device veth1_macvtap entered promiscuous mode [ 45.120943][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.141812][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.151060][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.186666][ T10] device bridge_slave_1 left promiscuous mode [ 45.197508][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.207625][ T10] device bridge_slave_0 left promiscuous mode [ 45.213791][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.222148][ T10] device veth1_macvtap left promiscuous mode [ 45.228073][ T10] device veth0_vlan left promiscuous mode [ 45.260645][ T925] loop0: detected capacity change from 0 to 512 [ 45.297047][ T925] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.308429][ T925] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 45.322126][ T925] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #2: comm syz.0.216: corrupted inode contents [ 45.333872][ T925] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #2: comm syz.0.216: mark_inode_dirty error [ 45.345060][ T921] tipc: New replicast peer: fe88:0000:0000:0000:0000:0000:0000:0004 [ 45.353028][ T921] tipc: Enabled bearer , priority 10 [ 45.353122][ T925] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #2: comm syz.0.216: corrupted inode contents [ 45.371992][ T925] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.216: mark_inode_dirty error [ 45.409194][ T925] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 45.433076][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.442762][ T929] loop2: detected capacity change from 0 to 256 [ 45.444294][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.456905][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.463777][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.482198][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.509599][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.517620][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.524490][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.532177][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.540364][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.573797][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.599441][ T907] device veth0_vlan entered promiscuous mode [ 45.607545][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.615565][ T942] syz.4.222[942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.615630][ T942] syz.4.222[942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.634333][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.653868][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.688955][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.705953][ T907] device veth1_macvtap entered promiscuous mode [ 45.733673][ T953] overlayfs: invalid redirect ((null)) [ 45.737048][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.777767][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.877246][ T957] kvm: pic: non byte write [ 45.927844][ T984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=984 comm=syz.4.239 [ 46.000959][ T995] input: syz0 as /devices/virtual/input/input10 [ 46.130811][ T1008] loop4: detected capacity change from 0 to 2048 [ 46.193072][ T1008] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.212479][ T1008] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.227246][ T1008] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 46.239682][ T1008] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.239682][ T1008] [ 46.250122][ T1008] EXT4-fs (loop4): Total free blocks count 0 [ 46.256055][ T1008] EXT4-fs (loop4): Free/Dirty block details [ 46.270689][ T1008] EXT4-fs (loop4): free_blocks=2415919104 [ 46.280518][ T1008] EXT4-fs (loop4): dirty_blocks=16 [ 46.286805][ T1008] EXT4-fs (loop4): Block reservation details [ 46.294528][ T1008] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 46.301132][ T1022] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 46.316205][ T1022] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.316205][ T1022] [ 46.326449][ T10] device bridge_slave_1 left promiscuous mode [ 46.332685][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.341719][ T10] device bridge_slave_0 left promiscuous mode [ 46.347855][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.361389][ T10] device veth1_macvtap left promiscuous mode [ 46.367709][ T10] device veth0_vlan left promiscuous mode [ 46.445434][ T1038] loop2: detected capacity change from 0 to 128 [ 46.468306][ T476] tipc: Node number set to 796208252 [ 46.507454][ T1047] loop1: detected capacity change from 0 to 512 [ 46.546500][ T1049] ÿÿÿÿÿÿ: renamed from vlan0 [ 46.552060][ T1047] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.263: casefold flag without casefold feature [ 46.574194][ T1047] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 46.583412][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.584175][ T1047] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.672191][ T1065] loop1: detected capacity change from 0 to 512 [ 46.811468][ T1065] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.830614][ T1065] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 46.847907][ T1065] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.269: corrupted inode contents [ 46.860054][ T1065] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz.1.269: mark_inode_dirty error [ 46.872111][ T1065] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.269: corrupted inode contents [ 46.885935][ T1065] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.269: corrupted inode contents [ 46.895830][ T1080] loop3: detected capacity change from 0 to 512 [ 46.898605][ T1065] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz.1.269: mark_inode_dirty error [ 46.916989][ T1065] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.269: corrupted inode contents [ 46.929116][ T1065] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.269: mark_inode_dirty error [ 46.940800][ T1080] EXT4-fs (loop3): Ignoring removed orlov option [ 46.947233][ T1065] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.269: corrupted inode contents [ 46.950609][ T1080] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 46.959027][ T338] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 46.972317][ T26] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 46.980154][ T1065] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz.1.269: mark_inode_dirty error [ 46.989716][ T1080] ext4 filesystem being mounted at /83/bus supports timestamps until 2038 (0x7fffffff) [ 47.010040][ T26] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 47.019061][ T26] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.030151][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.089113][ T1085] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 47.368560][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.387619][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.397678][ T338] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 47.406590][ T338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.415427][ T338] usb 5-1: config 0 descriptor?? [ 47.429588][ T1093] Zero length message leads to an empty skb [ 47.458350][ T26] usb 1-1: string descriptor 0 read error: -71 [ 47.466839][ T26] usb 1-1: USB disconnect, device number 5 [ 47.504036][ T1102] loop2: detected capacity change from 0 to 128 [ 47.530517][ T1102] attempt to access beyond end of device [ 47.530517][ T1102] loop2: rw=0, want=248, limit=128 [ 47.668467][ T1107] loop2: detected capacity change from 0 to 512 [ 47.720207][ T1107] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.731143][ T1107] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 47.919282][ T338] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 47.937913][ T338] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 47.956541][ T338] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 47.964934][ T338] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 47.971949][ T338] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 47.982279][ T338] samsung 0003:0419:0600.0008: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 48.063964][ T1121] loop3: detected capacity change from 0 to 512 [ 48.116408][ T1121] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.138356][ T311] usb 5-1: USB disconnect, device number 6 [ 48.146805][ T1121] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038 (0x7fffffff) [ 48.168261][ T338] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 48.418574][ T338] usb 3-1: Using ep0 maxpacket: 32 [ 48.662664][ T1151] loop4: detected capacity change from 0 to 512 [ 48.696325][ T1155] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 48.703146][ T1151] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.703776][ T1155] EXT4-fs warning (device sda1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 48.714624][ T1151] ext4 filesystem being mounted at /51/bus supports timestamps until 2038 (0x7fffffff) [ 48.733427][ T338] usb 3-1: New USB device found, idVendor=0424, idProduct=9907, bcdDevice= 3.2c [ 48.742861][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.755145][ T338] usb 3-1: Product: syz [ 48.759309][ T338] usb 3-1: Manufacturer: syz [ 48.760641][ T1151] EXT4-fs warning (device loop4): ext4_group_add:1676: Can't resize non-sparse filesystem further [ 48.763793][ T338] usb 3-1: SerialNumber: syz [ 48.779747][ T338] usb 3-1: config 0 descriptor?? [ 48.818738][ T338] smsc95xx v2.0.0 [ 48.822998][ T338] smsc95xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 48.834049][ T338] smsc95xx: probe of 3-1:0.0 failed with error -22 [ 48.888793][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 48.888807][ T30] audit: type=1400 audit(1726487580.521:391): avc: denied { remount } for pid=1164 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 48.949654][ T30] audit: type=1400 audit(1726487580.581:392): avc: denied { validate_trans } for pid=1173 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.039185][ T26] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 49.064129][ T311] usb 3-1: USB disconnect, device number 4 [ 49.098981][ T1184] loop1: detected capacity change from 0 to 256 [ 49.315753][ T1190] loop0: detected capacity change from 0 to 40427 [ 49.358303][ T1190] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 49.384163][ T1190] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 49.385093][ T30] audit: type=1400 audit(1726487581.011:393): avc: denied { bind } for pid=1197 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.428884][ T1190] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.436395][ T30] audit: type=1400 audit(1726487581.041:394): avc: denied { write } for pid=1197 comm="syz.3.318" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.486169][ T30] audit: type=1400 audit(1726487581.111:395): avc: denied { listen } for pid=1204 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.508999][ T26] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 49.519081][ T1207] loop3: detected capacity change from 0 to 128 [ 49.524382][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.526750][ T30] audit: type=1400 audit(1726487581.141:396): avc: denied { accept } for pid=1204 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.538701][ T26] usb 5-1: config 0 descriptor?? [ 49.557765][ T1190] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 49.564950][ T1190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.586235][ T1207] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.604442][ T1207] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038 (0x7fffffff) [ 49.620436][ T30] audit: type=1400 audit(1726487581.251:397): avc: denied { unlink } for pid=1189 comm="syz.0.314" name="#b" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.673114][ T789] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 49.673137][ T789] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 49.680581][ T789] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 49.687920][ T789] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 49.695416][ T789] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 49.703430][ T789] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 49.712009][ T789] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 49.779264][ T1207] syz.3.322 (pid 1207) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 50.118319][ T1238] syz.0.324[1238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.118393][ T1238] syz.0.324[1238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.200468][ T1250] loop0: detected capacity change from 0 to 2048 [ 50.239363][ T1252] device ip6_vti0 entered promiscuous mode [ 50.247056][ T1252] device vlan2 entered promiscuous mode [ 50.253505][ T1252] device ip6_vti0 left promiscuous mode [ 50.267156][ T30] audit: type=1326 audit(1726487581.891:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.2.340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41a4284ef9 code=0x0 [ 50.293321][ T1250] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.389149][ T1268] kvm: emulating exchange as write [ 50.405096][ T1271] loop1: detected capacity change from 0 to 2048 [ 50.489624][ T1271] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000401,errors=remount-ro,. Quota mode: none. [ 50.535374][ T1280] netlink: 'syz.3.346': attribute type 322 has an invalid length. [ 50.638302][ T26] usb 5-1: Cannot set autoneg [ 50.642840][ T26] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 50.651918][ T26] usb 5-1: USB disconnect, device number 7 [ 50.688421][ T1291] loop3: detected capacity change from 0 to 256 [ 50.791636][ T30] audit: type=1400 audit(1726487582.421:399): avc: denied { append } for pid=1296 comm="syz.1.353" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.897223][ T30] audit: type=1400 audit(1726487582.521:400): avc: denied { listen } for pid=1301 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.228308][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 51.228449][ T1328] loop0: detected capacity change from 0 to 256 [ 51.353250][ T1336] device pim6reg1 entered promiscuous mode [ 51.358985][ T500] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 51.427179][ T1346] loop4: detected capacity change from 0 to 256 [ 51.434668][ T1344] netlink: 168 bytes leftover after parsing attributes in process `syz.0.373'. [ 51.456110][ T1348] loop0: detected capacity change from 0 to 512 [ 51.479895][ T1348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.490966][ T1348] ext4 filesystem being mounted at /35/bus supports timestamps until 2038 (0x7fffffff) [ 51.508390][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 51.509202][ T1348] EXT4-fs warning (device loop0): ext4_group_add:1676: Can't resize non-sparse filesystem further [ 51.658377][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 51.669381][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 51.680463][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 51.689332][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.697935][ T311] usb 4-1: config 0 descriptor?? [ 51.728342][ T1305] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 51.748816][ T311] hub 4-1:0.0: USB hub found [ 51.768327][ T500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.779138][ T500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.788499][ T317] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 51.789350][ T500] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.804874][ T500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.813631][ T500] usb 3-1: config 0 descriptor?? [ 52.058293][ T311] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 52.078279][ T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 52.148413][ T317] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 52.157354][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.166185][ T317] usb 1-1: config 0 descriptor?? [ 52.200134][ T1365] device pim6reg1 entered promiscuous mode [ 52.329291][ T311] hid-generic 0003:046D:C314.000A: unknown main item tag 0x0 [ 52.338294][ T311] hid-generic 0003:046D:C314.000A: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0 [ 52.438335][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.448399][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.459137][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.528330][ T500] usb 3-1: string descriptor 0 read error: -22 [ 52.628307][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.637930][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.645711][ T26] usb 5-1: Product: syz [ 52.649739][ T26] usb 5-1: Manufacturer: syz [ 52.654082][ T26] usb 5-1: SerialNumber: syz [ 52.659511][ T313] usb 4-1: USB disconnect, device number 4 [ 52.699015][ T26] usb 5-1: selecting invalid altsetting 1 [ 52.809252][ T500] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0009/input/input11 [ 52.821955][ T500] uclogic 0003:256C:006D.0009: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 52.958337][ T26] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 52.964219][ T26] cdc_ncm 5-1:1.0: bind() failure [ 52.970772][ T26] usb 5-1: USB disconnect, device number 8 [ 53.010241][ T311] usb 3-1: USB disconnect, device number 5 [ 53.050954][ T1368] loop1: detected capacity change from 0 to 128 [ 53.082528][ T1368] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 53.094808][ T1368] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038 (0x7fffffff) [ 53.206244][ T1381] loop1: detected capacity change from 0 to 512 [ 53.212424][ T317] usb 1-1: Cannot set autoneg [ 53.216941][ T317] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 53.225461][ T317] usb 1-1: USB disconnect, device number 6 [ 53.249083][ T1381] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 53.378297][ T298] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 53.526219][ T1384] loop4: detected capacity change from 0 to 256 [ 53.532459][ T1385] loop2: detected capacity change from 0 to 256 [ 53.778300][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.789080][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.798936][ T298] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 53.807980][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.816686][ T298] usb 4-1: config 0 descriptor?? [ 53.888361][ T317] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 54.097110][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 54.097127][ T30] audit: type=1400 audit(1726487585.721:405): avc: denied { bind } for pid=1415 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.108257][ T500] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 54.142272][ T30] audit: type=1400 audit(1726487585.771:406): avc: denied { watch } for pid=1417 comm="syz.2.405" path="/26/bus/file0" dev="overlay" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.180537][ T1420] loop2: detected capacity change from 0 to 512 [ 54.240256][ T1420] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.406: casefold flag without casefold feature [ 54.252756][ T1420] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 54.262463][ T1420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.278416][ T317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.291257][ T317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.301234][ T317] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 54.311782][ T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.323124][ T317] usb 2-1: config 0 descriptor?? [ 54.379439][ T30] audit: type=1400 audit(1726487586.011:407): avc: denied { ioctl } for pid=1435 comm="syz.2.412" path="socket:[22116]" dev="sockfs" ino=22116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.382582][ T1436] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 54.426622][ T1436] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 54.521431][ T1443] device syzkaller0 entered promiscuous mode [ 54.537622][ T298] usb 4-1: string descriptor 0 read error: -71 [ 54.543675][ T500] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 54.554443][ T500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.565532][ T500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.575366][ T298] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 54.585205][ T500] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 54.598187][ T298] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 54.606240][ T298] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 54.614309][ T500] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 54.623678][ T298] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 54.631283][ T500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.639513][ T298] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 54.648023][ T500] usb 1-1: config 0 descriptor?? [ 54.654141][ T298] usb 4-1: USB disconnect, device number 5 [ 54.819171][ T317] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 54.826190][ T317] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 54.833078][ T317] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 54.839897][ T317] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 54.846797][ T317] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 54.854610][ T317] samsung 0003:0419:0600.000C: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 54.878731][ T1459] loop4: detected capacity change from 0 to 256 [ 54.964405][ T1459] FAT-fs (loop4): Directory bread(block 64) failed [ 54.970811][ T1459] FAT-fs (loop4): Directory bread(block 65) failed [ 54.977121][ T1459] FAT-fs (loop4): Directory bread(block 66) failed [ 54.983463][ T1459] FAT-fs (loop4): Directory bread(block 67) failed [ 54.990177][ T1459] FAT-fs (loop4): Directory bread(block 68) failed [ 54.996588][ T1459] FAT-fs (loop4): Directory bread(block 69) failed [ 55.002973][ T1459] FAT-fs (loop4): Directory bread(block 70) failed [ 55.008266][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 55.009267][ T1459] FAT-fs (loop4): Directory bread(block 71) failed [ 55.022904][ T1459] FAT-fs (loop4): Directory bread(block 72) failed [ 55.031812][ T1459] FAT-fs (loop4): Directory bread(block 73) failed [ 55.039001][ T338] usb 2-1: USB disconnect, device number 5 [ 55.077314][ T1463] loop3: detected capacity change from 0 to 512 [ 55.088634][ T1463] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 55.109450][ T1463] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 55.117133][ T1463] System zones: 0-2, 18-18, 34-34 [ 55.130073][ T1463] EXT4-fs (loop3): 1 orphan inode deleted [ 55.135621][ T1463] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x000000000000000a,nolazytime,noquota,jqfmt=vfsold,minixdf,init_itable=0x0000000000000002,grpid,debug,,errors=continue. Quota mode: writeback. [ 55.159319][ T1463] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038 (0x7fffffff) [ 55.160673][ T500] hid-rmi 0003:17EF:6085.000D: unknown main item tag 0x0 [ 55.187366][ T500] hid-rmi 0003:17EF:6085.000D: unknown main item tag 0x0 [ 55.194987][ T500] hid-rmi 0003:17EF:6085.000D: unknown main item tag 0x0 [ 55.202152][ T500] hid-rmi 0003:17EF:6085.000D: unknown main item tag 0x0 [ 55.213255][ T500] hid-rmi 0003:17EF:6085.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.0-1/input0 [ 55.319964][ T30] audit: type=1107 audit(1726487586.951:408): pid=1474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¯Þ' [ 55.369019][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.379841][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.389810][ T311] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 55.398928][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.407629][ T311] usb 3-1: config 0 descriptor?? [ 55.413475][ T500] usb 1-1: USB disconnect, device number 7 [ 55.452702][ T30] audit: type=1326 audit(1726487587.081:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd129be5ef9 code=0x7ffc0000 [ 55.475943][ T30] audit: type=1326 audit(1726487587.081:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd129be5ef9 code=0x7ffc0000 [ 55.499298][ T30] audit: type=1326 audit(1726487587.081:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd129be5ef9 code=0x7ffc0000 [ 55.601845][ T30] audit: type=1400 audit(1726487587.231:412): avc: denied { name_bind } for pid=1486 comm="syz.1.433" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 55.693867][ T1489] EXT4-fs (sda1): shut down requested (1) [ 55.705232][ T1489] Aborting journal on device sda1-8. [ 55.879626][ T311] hid-steam 0003:28DE:1142.000E: item fetching failed at offset 2/5 [ 55.887653][ T311] hid-steam 0003:28DE:1142.000E: steam_probe:parse of hid interface failed [ 55.896095][ T311] hid-steam: probe of 0003:28DE:1142.000E failed with error -22 [ 55.966158][ T30] audit: type=1326 audit(1726487587.591:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1495 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c96cef9 code=0x7ffc0000 [ 55.989243][ T313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 56.005322][ T30] audit: type=1326 audit(1726487587.621:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1495 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c96cef9 code=0x7ffc0000 [ 56.037029][ T1502] tipc: Started in network mode [ 56.041806][ T1502] tipc: Node identity 46c439981865, cluster identity 4711 [ 56.049097][ T1502] tipc: Enabled bearer , priority 0 [ 56.056377][ T1502] ªªªªªª: renamed from syzkaller0 [ 56.062116][ T1502] tipc: Disabling bearer [ 56.082691][ T338] usb 3-1: USB disconnect, device number 6 [ 56.125103][ T1504] loop0: detected capacity change from 0 to 256 [ 56.228283][ T313] usb 2-1: Using ep0 maxpacket: 8 [ 56.310999][ T1519] loop3: detected capacity change from 0 to 512 [ 56.326731][ T1519] EXT4-fs (loop3): Ignoring removed bh option [ 56.337577][ T1519] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 56.347939][ T1519] EXT4-fs (loop3): 1 truncate cleaned up [ 56.353671][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.364465][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.374060][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 56.374448][ T1519] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 56.389240][ T313] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 56.412726][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.428548][ T313] usb 2-1: config 0 descriptor?? [ 56.458252][ T317] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 56.493763][ T1533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.452'. [ 56.556047][ T1541] loop0: detected capacity change from 0 to 256 [ 56.640035][ T1547] loop2: detected capacity change from 0 to 128 [ 56.677659][ T1538] loop3: detected capacity change from 0 to 40427 [ 56.689909][ T1547] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.700450][ T1547] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038 (0x7fffffff) [ 56.741996][ T1538] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 56.750376][ T1538] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 56.762170][ T1538] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.798160][ T1555] loop0: detected capacity change from 0 to 128 [ 56.818390][ T317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.829731][ T1538] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 56.830512][ T1555] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.836669][ T1538] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.854547][ T317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.855321][ T1556] kvm: vcpu 0: requested 34 ns lapic timer period limited to 200000 ns [ 56.864657][ T317] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 56.872762][ T1555] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 56.881806][ T317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.931292][ T1561] kvm: pic: non byte write [ 56.935706][ T313] pyra 0003:1E7D:2C24.000F: item fetching failed at offset 5/7 [ 56.948379][ T317] usb 5-1: config 0 descriptor?? [ 56.953444][ T313] pyra 0003:1E7D:2C24.000F: parse failed [ 56.958971][ T313] pyra: probe of 0003:1E7D:2C24.000F failed with error -22 [ 57.078177][ T1569] tipc: Started in network mode [ 57.085879][ T1569] tipc: Node identity 1, cluster identity 4711 [ 57.092643][ T1569] tipc: Node number set to 1 [ 57.147035][ T311] usb 2-1: USB disconnect, device number 6 [ 57.332207][ T1575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 57.422328][ T1585] loop3: detected capacity change from 0 to 1024 [ 57.481730][ T1585] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.510551][ T1585] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 57.528791][ T1585] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 21 with max blocks 44 with error 28 [ 57.541302][ T1585] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.541302][ T1585] [ 57.551398][ T1585] EXT4-fs (loop3): Total free blocks count 0 [ 57.557236][ T1585] EXT4-fs (loop3): Free/Dirty block details [ 57.563855][ T1585] EXT4-fs (loop3): free_blocks=68451041280 [ 57.572966][ T1585] EXT4-fs (loop3): dirty_blocks=64 [ 57.577979][ T1585] EXT4-fs (loop3): Block reservation details [ 57.583985][ T1585] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 57.591864][ T1592] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 48 with error 28 [ 57.604200][ T1592] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.604200][ T1592] [ 57.616685][ T1596] netlink: 'syz.2.474': attribute type 8 has an invalid length. [ 57.637610][ T1598] loop0: detected capacity change from 0 to 512 [ 57.648317][ T317] usb 5-1: language id specifier not provided by device, defaulting to English [ 57.691836][ T1605] device pim6reg1 entered promiscuous mode [ 57.719690][ T1598] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.730715][ T1598] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038 (0x7fffffff) [ 57.806529][ T1621] loop3: detected capacity change from 0 to 512 [ 57.850606][ T1621] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #3: comm syz.3.486: corrupted inode contents [ 57.862562][ T1621] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #3: comm syz.3.486: mark_inode_dirty error [ 57.874236][ T1621] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #3: comm syz.3.486: corrupted inode contents [ 57.886083][ T1621] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.486: mark_inode_dirty error [ 57.897806][ T1621] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.486: Failed to acquire dquot type 0 [ 57.911829][ T1621] EXT4-fs (loop3): 1 orphan inode deleted [ 57.917379][ T1621] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.928757][ T1621] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038 (0x7fffffff) [ 58.058285][ T311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 58.089597][ T317] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0010/input/input12 [ 58.116191][ T1655] loop3: detected capacity change from 0 to 512 [ 58.127514][ T317] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0010/input/input13 [ 58.141468][ T317] uclogic 0003:256C:006D.0010: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 58.156757][ T1655] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 58.165292][ T1655] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.172009][ T1655] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 58.187043][ T1655] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 58.198647][ T1655] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.498: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.217489][ T1655] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.498: couldn't read orphan inode 13 (err -117) [ 58.239429][ T1655] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 58.259931][ T1655] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 58.269388][ T1655] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 58.279897][ T1655] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 58.349038][ T313] usb 5-1: USB disconnect, device number 9 [ 58.406559][ T1673] loop1: detected capacity change from 0 to 8192 [ 58.478519][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.495319][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.498822][ T1677] loop0: detected capacity change from 0 to 1024 [ 58.511430][ T311] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 58.521000][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.529861][ T311] usb 3-1: config 0 descriptor?? [ 58.536968][ T1677] EXT4-fs (loop0): Ignoring removed oldalloc option [ 58.560263][ T1677] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 58.642723][ T1683] syz.1.510[1683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.642794][ T1683] syz.1.510[1683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.664660][ T1685] tipc: Cannot configure node identity twice [ 58.790290][ T1697] loop1: detected capacity change from 0 to 512 [ 58.829077][ T1697] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 58.850198][ T1697] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 58.869499][ T1697] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038 (0x7fffffff) [ 59.048556][ T311] hid (null): bogus close delimiter [ 59.268345][ T311] usb 3-1: string descriptor 0 read error: -22 [ 59.549908][ T311] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0011/input/input14 [ 59.568007][ T311] uclogic 0003:256C:006D.0011: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 59.585572][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 59.585586][ T30] audit: type=1400 audit(1726487591.211:446): avc: denied { getattr } for pid=1717 comm="syz.0.523" name="/" dev="incremental-fs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.615025][ T30] audit: type=1400 audit(1726487591.221:447): avc: denied { write } for pid=1717 comm="syz.0.523" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.637012][ T30] audit: type=1400 audit(1726487591.221:448): avc: denied { add_name } for pid=1717 comm="syz.0.523" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.659627][ T30] audit: type=1400 audit(1726487591.221:449): avc: denied { create } for pid=1717 comm="syz.0.523" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.679779][ T30] audit: type=1400 audit(1726487591.221:450): avc: denied { associate } for pid=1717 comm="syz.0.523" name="#13" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.701382][ T30] audit: type=1400 audit(1726487591.221:451): avc: denied { setattr } for pid=1717 comm="syz.0.523" name="#13" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.723603][ T30] audit: type=1400 audit(1726487591.221:452): avc: denied { rename } for pid=1717 comm="syz.0.523" name="#13" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.745600][ T30] audit: type=1400 audit(1726487591.221:453): avc: denied { reparent } for pid=1717 comm="syz.0.523" name="#13" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.770457][ T26] usb 3-1: USB disconnect, device number 7 [ 59.776770][ T30] audit: type=1400 audit(1726487591.221:454): avc: denied { associate } for pid=1717 comm="syz.0.523" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.798795][ T30] audit: type=1400 audit(1726487591.241:455): avc: denied { remove_name } for pid=789 comm="syz-executor" name="file0" dev="tmpfs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.148274][ T311] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 60.408359][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 60.538311][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.549126][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.558946][ T311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.571765][ T311] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 60.580754][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.592843][ T311] usb 5-1: config 0 descriptor?? [ 60.668260][ T500] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 60.888033][ T1758] device syzkaller0 entered promiscuous mode [ 61.038434][ T500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 61.050050][ T500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 61.062185][ T311] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 61.069171][ T500] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.082371][ T500] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.091422][ T311] koneplus 0003:1E7D:2E22.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 61.102796][ T500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.111050][ T338] Bluetooth: hci0: command 0x1003 tx timeout [ 61.116988][ T1716] Bluetooth: hci0: sending frame failed (-49) [ 61.117248][ T500] usb 3-1: config 0 descriptor?? [ 61.138307][ T1741] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 61.479584][ T311] usb 5-1: USB disconnect, device number 10 [ 61.598999][ T500] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 61.607511][ T500] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 61.617322][ T500] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 61.870552][ T1741] loop2: detected capacity change from 0 to 512 [ 61.985618][ T1741] EXT4-fs (loop2): 1 orphan inode deleted [ 61.991198][ T1741] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue,. Quota mode: writeback. [ 62.012552][ T1741] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff) [ 62.028749][ T500] usb 3-1: USB disconnect, device number 8 [ 62.599605][ T1781] loop2: detected capacity change from 0 to 512 [ 62.618339][ T1787] loop0: detected capacity change from 0 to 128 [ 62.633084][ T1781] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.644240][ T1781] ext4 filesystem being mounted at /51/bus supports timestamps until 2038 (0x7fffffff) [ 62.656964][ T1781] EXT4-fs warning (device loop2): ext4_group_add:1676: Can't resize non-sparse filesystem further [ 62.689023][ T1787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.699498][ T1787] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038 (0x7fffffff) [ 62.723798][ T1787] EXT4-fs error (device loop0): dx_make_map:1327: inode #2: block 20: comm syz.0.549: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 62.742698][ T1787] EXT4-fs error (device loop0) in do_split:2092: Corrupt filesystem [ 62.751652][ T1787] EXT4-fs error (device loop0): dx_make_map:1327: inode #2: block 20: comm syz.0.549: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 62.770761][ T1787] EXT4-fs error (device loop0) in do_split:2092: Corrupt filesystem [ 62.802323][ T789] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=1816, inode=1633771873, rec_len=220, size=1024 fake=0 [ 62.823390][ T789] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /91/file1/lost+found: directory fails checksum at offset 0 [ 62.838939][ T789] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /91/file1/lost+found: directory fails checksum at offset 1024 [ 62.854183][ T789] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 62.869816][ T789] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /91/file1/lost+found: directory fails checksum at offset 3072 [ 62.884999][ T789] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /91/file1/lost+found: directory fails checksum at offset 5120 [ 62.900082][ T789] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /91/file1/lost+found: directory fails checksum at offset 8192 [ 62.915774][ T789] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 62.932478][ T789] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 62.948250][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 62.949262][ T789] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 62.972966][ T789] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 62.989571][ T789] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.006318][ T789] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.023164][ T789] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.040143][ T789] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.056898][ T789] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.158257][ T313] Bluetooth: hci0: command 0x1001 tx timeout [ 63.164112][ T1716] Bluetooth: hci0: sending frame failed (-49) SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 63.233237][ T341] tipc: Left network mode [ 63.349531][ T26] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 63.356928][ T26] usb 3-1: can't read configurations, error -71 [ 64.028904][ T341] device bridge_slave_1 left promiscuous mode [ 64.034854][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.042256][ T341] device bridge_slave_0 left promiscuous mode [ 64.048161][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.056144][ T341] device veth1_macvtap left promiscuous mode [ 64.062206][ T341] device veth0_vlan left promiscuous mode [ 64.549422][ T341] tipc: Left network mode [ 65.246654][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 65.469273][ T341] device bridge_slave_1 left promiscuous mode [ 65.475212][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.482559][ T341] device bridge_slave_0 left promiscuous mode [ 65.488549][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.496153][ T341] device bridge_slave_1 left promiscuous mode [ 65.502114][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.509322][ T341] device bridge_slave_0 left promiscuous mode [ 65.515218][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.523261][ T341] device veth1_macvtap left promiscuous mode [ 65.529097][ T341] device veth0_vlan left promiscuous mode [ 65.535194][ T341] device veth1_macvtap left promiscuous mode [ 65.541042][ T341] device veth0_vlan left promiscuous mode [ 69.949057][ T341] device bridge_slave_1 left promiscuous mode [ 69.955117][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.962447][ T341] device bridge_slave_0 left promiscuous mode [ 69.968465][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.976186][ T341] device veth1_macvtap left promiscuous mode [ 69.982182][ T341] device veth0_vlan left promiscuous mode