last executing test programs: 55.176626273s ago: executing program 4 (id=32): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d00000524060001052400ff7f0d240f010500000000000000fd06241a00000008241c01000049e9090581e5ff020000000904010000020d00000904010102"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x80, 0x1c, {0x10, 0x209, 0x8, 0x1000, 0x1, 0x10, 0x10, 0xe, 0x800, 0x2, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 53.039494347s ago: executing program 4 (id=72): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x1) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 52.98893724s ago: executing program 4 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 52.885487219s ago: executing program 4 (id=79): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1222068, &(0x7f0000000bc0)=ANY=[], 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x4000) 52.474361872s ago: executing program 4 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1ff}, 0x8) close(r0) 52.280185538s ago: executing program 4 (id=92): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) 52.225126502s ago: executing program 32 (id=92): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) 42.060146505s ago: executing program 2 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) time(0x0) 42.019117039s ago: executing program 2 (id=345): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/72, 0x48}], 0x1, 0x10003, 0x1bf, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 41.852730142s ago: executing program 2 (id=348): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="fa2b250caf7a13a7", 0x8}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0xc, 0x1, 0x872}], 0xc}}], 0x2, 0x0) 41.806034056s ago: executing program 2 (id=350): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1200009, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x400, 0x30) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[]) 41.62695149s ago: executing program 2 (id=355): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc4"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000008c0)={0x7, 0x8000000003ff, 0x0, 0x100}) 41.420564417s ago: executing program 2 (id=358): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00'}, 0x18) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 41.38699232s ago: executing program 33 (id=358): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00'}, 0x18) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 15.249652296s ago: executing program 1 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13.264141686s ago: executing program 1 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 11.004171859s ago: executing program 1 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 9.010820461s ago: executing program 1 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 4.192161271s ago: executing program 1 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.063152523s ago: executing program 3 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) capget(0x0, 0x0) 2.016920476s ago: executing program 3 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x80}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000040), &(0x7f00000002c0)=""/102}, 0x20) 1.943229702s ago: executing program 3 (id=993): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000240), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x2, 0x2, 0x5, 0x6, 0x1, 0x4}) 1.926922224s ago: executing program 6 (id=994): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) 1.914075865s ago: executing program 1 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 558.536355ms ago: executing program 6 (id=996): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/25, 0x19}, 0x80000000}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 557.763245ms ago: executing program 5 (id=997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)=@newsa={0xec, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0xfe}}, 0xec}}, 0x0) 517.180678ms ago: executing program 5 (id=999): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) shutdown(r0, 0x1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 486.428211ms ago: executing program 5 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) set_robust_list(&(0x7f0000000080)={0x0, 0x3}, 0x18) 471.886752ms ago: executing program 6 (id=1002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) 437.569125ms ago: executing program 6 (id=1004): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@noinit_itable}, {@grpjquota}, {@jqfmt_vfsv1}]}, 0x2, 0x544, &(0x7f0000000c00)="$eJzs3U9sI1cZAPBvJsk6u02bFHoAVGgphQWt1k687arqhXKqEKpU0SOHbUi8UbT2erV2ShP2kD1yR6ISN05I3DggcUDqiTsSB7hxQUJIBRZQg4SE0YzHu84fJ24a27vx7yeN/Gbe2N97sea90ZdkXgBT68WI2I2ICxHxbkQsFseTYos3ult23scP7q3tPbi3lkSn887fk7w+OxZ978k8VXzmfER8982I7ycHgv4+orW9c2u1Xq/dLQ5V2o07ldb2ztXNxupGbaN2u1q9vnJ9+bVrr1bPrK8vNH750cWI+M2vv/jn3+1+44dZsxaKuv5+nKVu1+cexsnMRsR3RhFsAmaK/lw4zZtP9SbOUhoRn4mIl/LrfzFm8m9zv/1f0zfH2DoAYBQ6ncXoLPbvAwDnXZrnwJK0XOQCFiJNy+VuDu+5uJTWm632lZvNrdvr3VzZUsylNzfrteUiV7gUc8nNzdnaSl7u7ddr1QP71yLi2Yj4celivl9ea9bXJ3njAwBT7KkD8/+/S935HwA45+YfFUuTbAcAMD7zk24AADB25n8AmD7mfwCYPuZ/AJg+5n8AmD7mfwCYKm+/9Va2dfaK51+vv7e9dav53tX1WutWubG1Vl5r3r1T3mg2N/Jn9jRO+rx6s3ln5ZXYer/SrrXaldb2zo1Gc+t2+0b+XO8btbmx9AoAOM6zL3z4xyQidl+/mG/R97z/E+fq50fdOmCU0kk3AJiYmUk3AJiYw6t9AdNiqHz8P0ffDmD8/tfpdKJv7d6IuP+w1Pcw0IF/IvTBUGFS64bC4+fy5z9F/h94osn/w/Q6Xf7fvTycB58s/+9uAc6TTiex5j8ATBk5fphq+RCQnHBS/+//lzt9Owd//29AAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYIos5FuSlovVPRciTcvliKcjYinmkpub9dpyRDwTEX8ozZWy/RXLfADAEy79a1Ks/3V58eWFg7UXSv8p5a8R8YOfvvOT91fb7bsrEReSfzw83v6gOF6dRPsBYIrNHlf5i7d7pd483ZvHez5+cG+tt422oft99K3u4qJZ3L1i69bMFl2az3MNl/6V7Otidr8ycwbxd+9HxOeO6n+S50aWipVPD8bPYj891vjpvvhpXtd9zX4Wnz1d+GT3DPoAT6oPs/HnjaOuvzRezF+Pvv7nTxpyh9Qb//YOjX/pw/Fv5oj4f4ko2jdEjFd+++1DBzuL3br7EV+YjdjrfXjf+NOLnwwYf18eMv6fnv/SS0Vx6UBVvuz05Tiq/8m+kyrtxp1Ka3vn6mZjdaO2UbtdrV5fub782rVXq5U8R13pZaoP+9vrV54Z1Las/5cGxJ8/of9fHbL/P/vvu9/78jHxv/6Vo7//546Jn82JXxsy/uqlX80Pqsvirw/o/0nf/5Uh48/FzvqQpwIAY9Da3rm1Wq/X7n76wvyx56RnEWKIQhKxO+IQjwqln//ozZNPLo2rPdlN4WneHoOqZsbwM5yuQunxaMYQhUmPTMCoPbroJ90SAAAAAAAAAAAAAABgkGP+DWguzujfiSbdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6v/wcAAP//Z2XUVA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 406.048037ms ago: executing program 5 (id=1005): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="dabfe85e", 0x4, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 386.869908ms ago: executing program 5 (id=1007): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwrite64(r1, &(0x7f00000022c0)="572654b114b1a9e1879a390786dd277fbc6b9ab23c3dabe05bc32e0b531932b3809e27eb3bba66c7a7879cc7f7e956d106ac020ef493", 0x36, 0x100000000) 333.865133ms ago: executing program 0 (id=1009): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 304.116655ms ago: executing program 0 (id=1010): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10000000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xfffffffe, 0x0, 0x0, 0xfffffffffdffffff}) 219.231692ms ago: executing program 3 (id=1011): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3426, 0x0, 0xa, 0x0, 0x0) 177.257896ms ago: executing program 3 (id=1012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x8, 0x6, 0x0, 0x100, 0x4, 0x540000, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r2}) 163.664687ms ago: executing program 0 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000c40)='asymmetric\x00', &(0x7f0000000000)='ed:cf2e') 151.545548ms ago: executing program 6 (id=1014): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 107.682161ms ago: executing program 0 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 55.293625ms ago: executing program 3 (id=1016): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x80, 0x5, 0x4, 0xffffff80}, 0x9, 0x1, 0x1, 0x4, 0x4, 0x5, 0x7, 0xf, 0x4, 0x6, {0x5, 0x80000001, 0x2, 0x0, 0xa0dd, 0x4}}}}]}, 0x78}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 36.127517ms ago: executing program 5 (id=1017): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000100)={0x20, 0x17, 0x2, "1817"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='@\x00M\x00'], 0x0, 0x0, 0x0, 0x0}) 27.718628ms ago: executing program 0 (id=1018): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80002, 0x64) flock(r1, 0x1) flock(r1, 0x5) 14.369569ms ago: executing program 6 (id=1019): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) 0s ago: executing program 0 (id=1020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) kernel console output (not intermixed with test programs): 2D50.0006: unknown main item tag 0x0 [ 34.084055][ T336] usb 3-1: Product: syz [ 34.091519][ T6] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 34.095526][ T336] usb 3-1: Manufacturer: syz [ 34.103458][ T6] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 34.110059][ T336] hub 3-1:4.0: USB hub found [ 34.115222][ T6] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 34.128147][ T6] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 34.136646][ T6] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 34.146275][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 34.154220][ T60] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 34.162542][ T60] usb 2-1: config 179 has no interface number 0 [ 34.168955][ T60] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 34.180258][ T60] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 34.192038][ T60] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 34.203384][ T60] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 34.215086][ T60] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 34.229136][ T60] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 34.238457][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.248547][ T1047] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 34.310971][ T336] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 34.478833][ T336] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 34.666337][ T358] usb 3-1: USB disconnect, device number 5 [ 34.684381][ T1047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.693107][ T6] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 34.696006][ T1047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.701899][ T6] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 34.719421][ T6] kovaplus: probe of 0003:1E7D:2D50.0006 failed with error -71 [ 34.729320][ T6] usb 6-1: USB disconnect, device number 2 [ 34.751457][ T1050] fido_id[1050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 34.925342][ T358] usb 2-1: USB disconnect, device number 4 [ 34.925340][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 34.925373][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 34.949495][ T358] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 34.950463][ T1008] Bluetooth: hci0: command 0x1003 tx timeout [ 34.960202][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.296316][ T336] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.496268][ T336] usb 4-1: Using ep0 maxpacket: 16 [ 35.503069][ T336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.543759][ T336] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 35.575598][ T336] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.596280][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 35.613338][ T336] usb 4-1: SerialNumber: syz [ 35.620273][ T1108] netlink: 164 bytes leftover after parsing attributes in process `syz.0.313'. [ 35.649271][ T1108] netlink: 164 bytes leftover after parsing attributes in process `syz.0.313'. [ 35.660497][ T1108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.313'. [ 35.700816][ T1112] Falling back ldisc for ttyS3. [ 35.806791][ T1126] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). [ 35.831113][ T336] usb 4-1: USB disconnect, device number 3 [ 35.916211][ T60] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.046205][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 36.103459][ T1135] loop0: detected capacity change from 0 to 40427 [ 36.115156][ T1135] F2FS-fs (loop0): Image doesn't support compression [ 36.117269][ T60] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 36.122494][ T1135] F2FS-fs (loop0): heap/no_heap options were deprecated [ 36.150673][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.162055][ T1135] F2FS-fs (loop0): invalid crc value [ 36.166201][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.180242][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 36.194837][ T1135] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.200977][ T60] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 36.212919][ T60] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 36.222081][ T60] usb 2-1: Manufacturer: syz [ 36.228336][ T60] usb 2-1: config 0 descriptor?? [ 36.242312][ T1135] F2FS-fs (loop0): Start checkpoint disabled! [ 36.242497][ T6] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 36.259458][ T6] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 36.262725][ T1135] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 36.289099][ T6] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 36.316275][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.324370][ T6] usb 6-1: Product: syz [ 36.329305][ T6] usb 6-1: Manufacturer: syz [ 36.334042][ T6] usb 6-1: SerialNumber: syz [ 36.342197][ T6] usb 6-1: config 0 descriptor?? [ 36.356032][ T1122] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 36.365593][ T1122] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 36.421310][ T335] kworker/u4:4: attempt to access beyond end of device [ 36.421310][ T335] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 36.440414][ T335] kworker/u4:4: attempt to access beyond end of device [ 36.440414][ T335] loop0: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 36.558319][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 36.558336][ T28] audit: type=1400 audit(1756508394.784:305): avc: denied { map } for pid=1158 comm="syz.0.332" path="socket:[19500]" dev="sockfs" ino=19500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 36.591603][ T1122] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 36.599305][ T1122] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 36.641935][ T60] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 36.649489][ T60] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 36.661853][ T60] appleir 0003:05AC:8243.0007: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 36.917366][ T39] usb 2-1: USB disconnect, device number 5 [ 37.006264][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.008673][ T6] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 37.187447][ T60] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 37.195839][ T60] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.206242][ T60] usb 1-1: config 0 has no interface number 0 [ 37.212622][ T60] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 37.226763][ T60] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 37.236705][ T60] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.249928][ T60] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 37.261659][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.265709][ T1175] xt_hashlimit: size too large, truncated to 1048576 [ 37.270964][ T60] usb 1-1: config 0 descriptor?? [ 37.292791][ T60] usb 1-1: MIDIStreaming interface descriptor not found [ 37.353738][ T28] audit: type=1400 audit(1756508395.574:306): avc: denied { read write } for pid=1179 comm="syz.2.345" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.378778][ T28] audit: type=1400 audit(1756508395.574:307): avc: denied { open } for pid=1179 comm="syz.2.345" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.403827][ T28] audit: type=1400 audit(1756508395.574:308): avc: denied { ioctl } for pid=1179 comm="syz.2.345" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.433438][ T6] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 37.444596][ T6] usb 6-1: USB disconnect, device number 3 [ 37.515072][ T60] usb 1-1: USB disconnect, device number 3 [ 37.524229][ T28] audit: type=1400 audit(1756508395.744:309): avc: denied { bind } for pid=1187 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.572233][ T1191] loop2: detected capacity change from 0 to 512 [ 37.588964][ T1191] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.617513][ T1191] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.350: bg 0: block 5: invalid block bitmap [ 37.630394][ T1191] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 37.639774][ T1191] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.350: invalid indirect mapped block 3 (level 2) [ 37.654014][ T1191] EXT4-fs (loop2): 2 truncates cleaned up [ 37.659958][ T1191] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.690694][ T1191] overlayfs: failed to set xattr on upper [ 37.701325][ T28] audit: type=1400 audit(1756508395.924:310): avc: denied { read append } for pid=1190 comm="syz.2.350" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.734032][ T286] EXT4-fs error (device loop2): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 37.747188][ T28] audit: type=1400 audit(1756508395.944:311): avc: denied { read append } for pid=1190 comm="syz.2.350" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.756417][ T286] EXT4-fs error (device loop2): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 37.779019][ T28] audit: type=1400 audit(1756508395.944:312): avc: denied { open } for pid=1190 comm="syz.2.350" path="/59/file0/file0/file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.826290][ T28] audit: type=1400 audit(1756508395.944:313): avc: denied { open } for pid=1190 comm="syz.2.350" path="/59/file0/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.859401][ T286] EXT4-fs (loop2): unmounting filesystem. [ 37.865474][ T28] audit: type=1400 audit(1756508395.944:314): avc: denied { ioctl } for pid=1190 comm="syz.2.350" path="/59/file0/file0/file1" dev="overlay" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.001468][ T1202] loop3: detected capacity change from 0 to 40427 [ 38.018383][ T1202] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 38.044506][ T1202] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 38.064117][ T1202] F2FS-fs (loop3): fault_injection options not supported [ 38.083465][ T1202] F2FS-fs (loop3): fault_type options not supported [ 38.111014][ T1202] F2FS-fs (loop3): invalid crc value [ 38.156050][ T1202] F2FS-fs (loop3): Found nat_bits in checkpoint [ 38.225746][ T1202] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 38.233382][ T1202] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.286586][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.293719][ T1219] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.301743][ T1219] device bridge_slave_0 entered promiscuous mode [ 38.310762][ T288] syz-executor: attempt to access beyond end of device [ 38.310762][ T288] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.324969][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.332232][ T1219] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.339899][ T1219] device bridge_slave_1 entered promiscuous mode [ 38.564148][ T1257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.377'. [ 38.575624][ T10] device bridge_slave_1 left promiscuous mode [ 38.582201][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.593809][ T10] device bridge_slave_0 left promiscuous mode [ 38.600320][ T1261] loop1: detected capacity change from 0 to 512 [ 38.600521][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.610701][ T1261] EXT4-fs: Ignoring removed oldalloc option [ 38.621564][ T10] device veth1_macvtap left promiscuous mode [ 38.628229][ T10] device veth0_vlan left promiscuous mode [ 38.630495][ T1261] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.378: Parent and EA inode have the same ino 15 [ 38.646981][ T1261] EXT4-fs (loop1): Remounting filesystem read-only [ 38.653680][ T1261] EXT4-fs (loop1): 1 orphan inode deleted [ 38.660022][ T1261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.676251][ T486] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 38.691894][ T1261] EXT4-fs (loop1): shut down requested (2) [ 38.705725][ T283] EXT4-fs (loop1): unmounting filesystem. [ 38.747847][ T1257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.377'. [ 38.763988][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.771157][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.778677][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.785800][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.805926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.813885][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.821253][ T358] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 38.829430][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.846583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.855063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.863700][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.870838][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.878542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.887090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.895239][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.902509][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.910062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.916928][ T486] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.918700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.928709][ T486] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.936670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.946933][ T486] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.953470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.962319][ T486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.978112][ T486] usb 6-1: Product: syz [ 38.982381][ T486] usb 6-1: Manufacturer: syz [ 38.987539][ T486] usb 6-1: SerialNumber: syz [ 38.995044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.004025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.017349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.025551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.034353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.042553][ T358] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 39.043125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.052988][ T358] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 39.061260][ T1219] device veth0_vlan entered promiscuous mode [ 39.075678][ T358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.086786][ T358] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 39.091931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.104992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.115394][ T1219] device veth1_macvtap entered promiscuous mode [ 39.131358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.139613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.148150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.158617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.167029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.196582][ T486] usb 6-1: 0:2 : does not exist [ 39.207311][ T486] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 39.221956][ T486] usb 6-1: USB disconnect, device number 4 [ 39.295509][ T60] usb 1-1: USB disconnect, device number 4 [ 39.439278][ T467] udevd[467]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.882210][ T1301] loop3: detected capacity change from 0 to 2048 [ 39.931543][ T1314] syz.0.399[1314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.931621][ T1314] syz.0.399[1314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.931797][ T1316] loop1: detected capacity change from 0 to 256 [ 39.969692][ T1301] Alternate GPT is invalid, using primary GPT. [ 40.003456][ T1301] loop3: p1 p2 p3 [ 40.039164][ T103] Alternate GPT is invalid, using primary GPT. [ 40.045461][ T103] loop3: p1 p2 p3 [ 40.087133][ T467] udevd[467]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.105446][ T468] udevd[468]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 40.117508][ T338] udevd[338]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 40.139597][ T1329] IPv6: sit1: Disabled Multicast RS [ 40.142743][ T467] udevd[467]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.159224][ T338] udevd[338]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 40.180568][ T468] udevd[468]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 40.285961][ T1332] syz.0.404 (1332) used greatest stack depth: 20928 bytes left [ 40.351646][ T1349] loop1: detected capacity change from 0 to 1024 [ 40.395863][ T1349] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.415: bg 0: block 10: padding at end of block bitmap is not set [ 40.426486][ T1349] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.415: Failed to acquire dquot type 0 [ 40.446718][ T1349] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.415: Failed to acquire dquot type 0 [ 40.464344][ T1349] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.415: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.486456][ T1349] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.415: Failed to acquire dquot type 0 [ 40.498537][ T1349] EXT4-fs (loop1): 1 orphan inode deleted [ 40.506558][ T1349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.564608][ T283] EXT4-fs (loop1): unmounting filesystem. [ 40.689659][ T1367] loop1: detected capacity change from 0 to 8192 [ 40.692683][ T1370] loop3: detected capacity change from 0 to 128 [ 40.712897][ T1367] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.753443][ T1370] FAT-fs (loop3): Directory bread(block 32) failed [ 40.796134][ T1370] FAT-fs (loop3): Directory bread(block 33) failed [ 40.808333][ T1370] FAT-fs (loop3): Directory bread(block 34) failed [ 40.829334][ T1370] FAT-fs (loop3): Directory bread(block 35) failed [ 40.842124][ T1370] FAT-fs (loop3): Directory bread(block 36) failed [ 40.860269][ T1370] FAT-fs (loop3): Directory bread(block 37) failed [ 40.867183][ T1370] FAT-fs (loop3): Directory bread(block 38) failed [ 40.873838][ T1370] FAT-fs (loop3): Directory bread(block 39) failed [ 40.880862][ T1370] FAT-fs (loop3): Directory bread(block 40) failed [ 40.887728][ T1370] FAT-fs (loop3): Directory bread(block 41) failed [ 40.994858][ T1370] +}[@: attempt to access beyond end of device [ 40.994858][ T1370] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 41.009605][ T1370] FAT-fs (loop3): Filesystem has been set read-only [ 41.018944][ T1370] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 41.206266][ T6] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 41.242934][ T1403] syz.3.438 (1403) used greatest stack depth: 20480 bytes left [ 41.387366][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.398638][ T6] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 41.406318][ T60] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.410753][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.425598][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.434122][ T6] usb 6-1: Product: syz [ 41.438379][ T6] usb 6-1: Manufacturer: syz [ 41.442991][ T6] usb 6-1: SerialNumber: syz [ 41.461726][ T6] cdc_mbim 6-1:1.0: skipping garbage [ 41.462216][ T1432] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 41.481945][ T1432] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.596229][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 41.604313][ T60] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 41.624102][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.644349][ T60] usb 1-1: Product: syz [ 41.648832][ T60] usb 1-1: Manufacturer: syz [ 41.653615][ T60] usb 1-1: SerialNumber: syz [ 41.660570][ T1388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 41.663285][ T60] usb 1-1: config 0 descriptor?? [ 41.685262][ T60] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 41.704811][ T60] usb 1-1: Detected FT232H [ 41.736214][ T486] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 41.744248][ T1442] loop3: detected capacity change from 0 to 40427 [ 41.764383][ T1442] F2FS-fs (loop3): Image doesn't support compression [ 41.773052][ T1442] F2FS-fs (loop3): heap/no_heap options were deprecated [ 41.792171][ T1442] F2FS-fs (loop3): invalid crc value [ 41.799090][ T1442] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.840400][ T1442] F2FS-fs (loop3): Start checkpoint disabled! [ 41.847438][ T1442] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 41.878138][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 41.933612][ T1447] loop1: detected capacity change from 0 to 40427 [ 41.946450][ T1447] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 41.947263][ T486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.953868][ T1447] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 41.966732][ T486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.983076][ T486] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.996143][ T486] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.003660][ T8] kworker/u4:0: attempt to access beyond end of device [ 42.003660][ T8] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 42.005436][ T486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.020373][ T8] kworker/u4:0: attempt to access beyond end of device [ 42.020373][ T8] loop3: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 42.027815][ T1447] F2FS-fs (loop1): fault_injection options not supported [ 42.049166][ T1447] F2FS-fs (loop1): fault_type options not supported [ 42.058384][ T486] usb 7-1: config 0 descriptor?? [ 42.064258][ T1447] F2FS-fs (loop1): invalid crc value [ 42.072440][ T1447] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.111792][ T1447] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 42.118989][ T1447] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.194845][ T283] syz-executor: attempt to access beyond end of device [ 42.194845][ T283] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 42.279163][ T1458] loop3: detected capacity change from 0 to 512 [ 42.285752][ T1388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 42.287710][ T60] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 42.299091][ T6] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 42.309780][ T1458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.326453][ T6] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 42.340848][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 42.340863][ T28] audit: type=1400 audit(1756508400.564:331): avc: denied { read } for pid=1461 comm="syz.1.460" path="socket:[21246]" dev="sockfs" ino=21246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.341847][ T1458] EXT4-fs (loop3): 1 truncate cleaned up [ 42.376537][ T1458] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.395469][ T1458] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.461: bg 0: block 256: padding at end of block bitmap is not set [ 42.412637][ T1458] EXT4-fs (loop3): Remounting filesystem read-only [ 42.419856][ T1466] netlink: 'syz.1.463': attribute type 6 has an invalid length. [ 42.420268][ T1458] EXT4-fs error (device loop3): ext4_find_extent:900: inode #15: comm syz.3.461: inode has invalid extent depth: 25964 [ 42.427776][ T28] audit: type=1400 audit(1756508400.644:332): avc: denied { write } for pid=1457 comm="syz.3.461" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.463270][ T1458] EXT4-fs (loop3): Remounting filesystem read-only [ 42.470195][ T1458] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 42.474309][ T486] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.491521][ T486] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.503424][ T288] EXT4-fs (loop3): unmounting filesystem. [ 42.517878][ T486] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.521839][ T60] usb 1-1: USB disconnect, device number 5 [ 42.526896][ T6] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 42.538412][ T486] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.545980][ T486] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.554250][ T486] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.559001][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 42.561852][ T6] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 42.571460][ T1470] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 42.591501][ T486] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.593574][ T60] ftdi_sio 1-1:0.0: device disconnected [ 42.601198][ T6] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 4e:5f:77:a8:39:2c [ 42.616449][ T486] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 42.633029][ T486] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 42.666371][ T6] usb 6-1: USB disconnect, device number 5 [ 42.679985][ T6] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 42.706252][ T28] audit: type=1400 audit(1756508400.924:333): avc: denied { validate_trans } for pid=1477 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.769855][ T28] audit: type=1400 audit(1756508400.994:334): avc: denied { mounton } for pid=1484 comm="syz.3.470" path="/91/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 42.836761][ T28] audit: type=1400 audit(1756508401.014:335): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.872157][ T1496] netlink: 104 bytes leftover after parsing attributes in process `syz.3.474'. [ 42.872233][ T28] audit: type=1400 audit(1756508401.094:336): avc: denied { nlmsg_read } for pid=1495 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.922146][ T1499] 9pnet: p9_errstr2errno: server reported unknown error @í [ 42.960371][ T486] usb 7-1: USB disconnect, device number 2 [ 42.990119][ T1508] loop3: detected capacity change from 0 to 1024 [ 42.998551][ T1508] EXT4-fs: Ignoring removed orlov option [ 43.028235][ T1508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.039757][ T1508] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2748: inode #15: comm syz.3.478: corrupted in-inode xattr [ 43.055697][ T1508] EXT4-fs (loop3): Remounting filesystem read-only [ 43.063263][ T28] audit: type=1400 audit(1756508401.284:337): avc: denied { map } for pid=1507 comm="syz.3.478" path="/96/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.087230][ T28] audit: type=1400 audit(1756508401.314:338): avc: denied { execute } for pid=1507 comm="syz.3.478" path="/96/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.126649][ T288] EXT4-fs (loop3): unmounting filesystem. [ 43.176925][ T1531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 43.202488][ T1531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 43.213714][ T1531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 43.225854][ T28] audit: type=1400 audit(1756508401.444:339): avc: denied { ioctl } for pid=1538 comm="syz.1.485" path="/dev/usbmon2" dev="devtmpfs" ino=165 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.296707][ T1548] syz.5.487[1548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.296791][ T1548] syz.5.487[1548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.339890][ T1548] netlink: 20 bytes leftover after parsing attributes in process `syz.5.487'. [ 43.509548][ T1583] loop0: detected capacity change from 0 to 128 [ 43.534146][ T1583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.545691][ T1583] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.549132][ T28] audit: type=1400 audit(1756508401.774:340): avc: denied { append } for pid=1586 comm="syz.6.506" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.585946][ T1583] EXT4-fs warning (device loop0): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 43.603283][ T285] EXT4-fs (loop0): unmounting filesystem. [ 43.766246][ T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 43.866198][ T358] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 43.947443][ T6] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 43.955776][ T6] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.966389][ T486] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.973962][ T6] usb 6-1: config 0 has no interface number 0 [ 43.980452][ T6] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 43.991973][ T6] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 44.002734][ T6] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.015977][ T6] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 44.025291][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.037669][ T6] usb 6-1: config 0 descriptor?? [ 44.045414][ T6] usb 6-1: MIDIStreaming interface descriptor not found [ 44.060600][ T358] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.080561][ T358] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.090688][ T358] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.105254][ T358] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 44.114554][ T358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 44.123546][ T358] usb 7-1: Product: syz [ 44.127985][ T358] usb 7-1: Manufacturer: syz [ 44.132684][ T358] usb 7-1: SerialNumber: syz [ 44.176248][ T486] usb 4-1: Using ep0 maxpacket: 8 [ 44.192409][ T486] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 44.216194][ T486] usb 4-1: config 179 has no interface number 0 [ 44.222503][ T486] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 44.246212][ T486] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 44.252609][ T1127] usb 6-1: USB disconnect, device number 6 [ 44.266210][ T486] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 44.296187][ T486] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 44.316208][ T486] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 44.340044][ T486] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 44.340839][ T358] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 44.360783][ T486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.370185][ T1607] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 44.428821][ T1615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 44.544099][ T358] usb 7-1: USB disconnect, device number 3 [ 44.557264][ T358] usblp0: removed [ 44.635709][ T1617] loop1: detected capacity change from 0 to 40427 [ 44.637653][ T486] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 44.671681][ T1617] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 46.486163][ C1] sched: RT throttling activated [ 46.505794][ T1617] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 47.498923][ T1127] usb 4-1: USB disconnect, device number 4 [ 47.499039][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 47.513336][ T1127] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 47.513523][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 47.538469][ T1617] F2FS-fs (loop1): invalid crc value [ 47.550559][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 47.550574][ T28] audit: type=1400 audit(1756508405.774:344): avc: denied { create } for pid=1621 comm="syz.6.523" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.582492][ T1623] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.603321][ T1617] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 47.625666][ T1623] FAT-fs (loop13): unable to read boot sector [ 47.686224][ T28] audit: type=1400 audit(1756508405.804:345): avc: denied { mounton } for pid=1621 comm="syz.6.523" path="/18/file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.764315][ T28] audit: type=1400 audit(1756508405.914:346): avc: denied { unlink } for pid=1219 comm="syz-executor" name="file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.937853][ T1653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 47.967803][ T1653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 48.068703][ T28] audit: type=1400 audit(1756508406.294:347): avc: denied { read write } for pid=1667 comm="syz.3.544" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.094364][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.122589][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.143037][ T28] audit: type=1400 audit(1756508406.294:348): avc: denied { open } for pid=1667 comm="syz.3.544" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.151471][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.188389][ T28] audit: type=1326 audit(1756508406.414:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.6.548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87e2f8ebe9 code=0x0 [ 48.188490][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.221108][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.229204][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.246937][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.256718][ T28] audit: type=1400 audit(1756508406.484:350): avc: denied { mounton } for pid=1677 comm="syz.6.548" path="/proc/55/task/56/net" dev="proc" ino=22697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 48.257716][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.282101][ T1682] loop6: detected capacity change from 0 to 256 [ 48.288182][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.302060][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.309764][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.317289][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.324872][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.332812][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.341263][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.349011][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.356594][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.364254][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.372041][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.379949][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.387810][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.395320][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.403611][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.411295][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.418801][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.420923][ T1619] loop5: detected capacity change from 0 to 131072 [ 48.426315][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.433557][ T1619] F2FS-fs (loop5): Test dummy encryption mode enabled [ 48.440241][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.448256][ T1619] F2FS-fs (loop5): invalid crc value [ 48.454762][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.461766][ T1619] F2FS-fs (loop5): Found nat_bits in checkpoint [ 48.467746][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.481926][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.489656][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.497301][ T358] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 48.500213][ T1619] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 48.513931][ T358] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 48.663364][ T1693] fido_id[1693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.881353][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 48.929240][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 48.946572][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.983746][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 49.002444][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.016688][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.044371][ T1708] loop0: detected capacity change from 0 to 512 [ 49.054060][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.102470][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.146993][ T1708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.162251][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.174571][ T1708] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.205619][ T1708] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.556: directory missing '..' [ 49.217255][ T28] audit: type=1400 audit(1756508407.424:351): avc: denied { rmdir } for pid=1707 comm="syz.0.556" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.291259][ T285] EXT4-fs (loop0): unmounting filesystem. [ 49.352253][ T1710] loop6: detected capacity change from 0 to 40427 [ 49.353664][ T1726] xt_hashlimit: size too large, truncated to 1048576 [ 49.365953][ T1710] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 49.373277][ T1710] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 49.444882][ T1710] F2FS-fs (loop6): Found nat_bits in checkpoint [ 49.517429][ T1710] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 49.528346][ T1710] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 49.688176][ T1732] f2fs_ckpt-7:6: attempt to access beyond end of device [ 49.688176][ T1732] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.569647][ T1743] loop5: detected capacity change from 0 to 40427 [ 50.580316][ T1743] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 50.599956][ T1743] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 50.669201][ T1743] F2FS-fs (loop5): Found nat_bits in checkpoint [ 50.744884][ T1743] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 50.756247][ T1743] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 50.863668][ T28] audit: type=1400 audit(1756508409.084:352): avc: denied { rmdir } for pid=1742 comm="syz.5.569" name="bus" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.935216][ T1790] loop6: detected capacity change from 0 to 128 [ 51.078003][ T1802] loop8: detected capacity change from 0 to 79 [ 51.236371][ T60] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 51.331721][ T1820] loop0: detected capacity change from 0 to 256 [ 51.436195][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 51.442596][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.481515][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.501790][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.508496][ T1832] Illegal XDP return value 4294967274 on prog (id 281) dev syz_tun, expect packet loss! [ 51.518757][ T60] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 51.534105][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.549140][ T60] usb 7-1: config 0 descriptor?? [ 51.636433][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 51.695430][ T28] audit: type=1400 audit(1756508409.914:353): avc: denied { sys_module } for pid=1839 comm="syz.1.609" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 51.716431][ T1127] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 51.765865][ T1846] tipc: Started in network mode [ 51.770876][ T1846] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 51.780641][ T1846] tipc: Enabling of bearer rejected, failed to enable media [ 51.817397][ T6] usb 1-1: config 0 has an invalid interface number: 164 but max is 0 [ 51.828924][ T6] usb 1-1: config 0 has no interface number 0 [ 51.841949][ T6] usb 1-1: config 0 interface 164 altsetting 32 endpoint 0x8 has an invalid bInterval 254, changing to 11 [ 51.866230][ T6] usb 1-1: config 0 interface 164 has no altsetting 0 [ 51.879344][ T6] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=15.06 [ 51.889451][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.898488][ T6] usb 1-1: Product: syz [ 51.903014][ T6] usb 1-1: Manufacturer: syz [ 51.906929][ T1127] usb 4-1: Using ep0 maxpacket: 16 [ 51.908021][ T6] usb 1-1: SerialNumber: syz [ 51.913955][ T1127] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 51.926248][ T1127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.926445][ T6] usb 1-1: config 0 descriptor?? [ 51.941546][ T1127] usb 4-1: config 0 has no interface number 0 [ 51.949975][ T1127] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 51.965138][ T60] hid (null): report_id 0 is invalid [ 51.972954][ T6] snd-usb-audio: probe of 1-1:0.164 failed with error -2 [ 51.978423][ T60] hid (null): bogus close delimiter [ 51.988675][ T1127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.997146][ T60] hid (null): invalid report_count 1939077990 [ 52.009610][ T1127] usb 4-1: Product: syz [ 52.014523][ T1127] usb 4-1: Manufacturer: syz [ 52.017608][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.164/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.019790][ T60] hid (null): invalid report_count 56161 [ 52.041573][ T1127] usb 4-1: SerialNumber: syz [ 52.049426][ T60] hid (null): bogus close delimiter [ 52.054838][ T60] hid (null): nested delimiters [ 52.060536][ T1127] usb 4-1: config 0 descriptor?? [ 52.067588][ T60] hid (null): unknown global tag 0xd [ 52.074554][ T1127] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 52.086262][ T1127] usb 4-1: No valid video chain found. [ 52.186260][ T486] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 52.194320][ T1127] usb 7-1: USB disconnect, device number 4 [ 52.283068][ T6] usb 4-1: USB disconnect, device number 5 [ 52.367450][ T486] usb 2-1: config 0 has no interfaces? [ 52.374378][ T486] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.383802][ T486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.392047][ T486] usb 2-1: Product: syz [ 52.396392][ T486] usb 2-1: Manufacturer: syz [ 52.401012][ T486] usb 2-1: SerialNumber: syz [ 52.406290][ T486] usb 2-1: config 0 descriptor?? [ 52.616665][ T1127] usb 2-1: USB disconnect, device number 6 [ 52.667352][ T486] usb 1-1: USB disconnect, device number 6 [ 52.679670][ T1860] loop0: detected capacity change from 0 to 512 [ 52.686663][ T1860] EXT4-fs: Ignoring removed oldalloc option [ 52.693084][ T1860] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.707638][ T1860] EXT4-fs (loop0): 1 truncate cleaned up [ 52.713609][ T1860] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.738236][ T1860] EXT4-fs (loop0): shut down requested (2) [ 52.744606][ T28] audit: type=1400 audit(1756508410.964:354): avc: denied { ioctl } for pid=1859 comm="syz.0.618" path="/164/bus/file1" dev="loop0" ino=15 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.770648][ T285] EXT4-fs (loop0): unmounting filesystem. [ 52.811454][ T1870] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1870 comm=syz.3.622 [ 52.824085][ T1870] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1870 comm=syz.3.622 [ 52.965500][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 52.979818][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 53.002008][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 53.011038][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.020926][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 53.030413][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.044082][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.052542][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.061311][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.069829][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.071164][ T28] audit: type=1400 audit(1756508411.294:355): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.109122][ T28] audit: type=1326 audit(1756508411.334:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.0.635" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f07b8ebe9 code=0x0 [ 53.138798][ T1903] loop5: detected capacity change from 0 to 2048 [ 53.168057][ T1908] loop0: detected capacity change from 0 to 256 [ 53.183863][ T1903] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 53.216678][ T1903] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.282528][ T1903] fs-verity: sha512 using implementation "sha512-avx2" [ 53.292722][ T655] tipc: Left network mode [ 53.338632][ T577] EXT4-fs (loop5): unmounting filesystem. [ 53.446511][ T1925] loop5: detected capacity change from 0 to 2048 [ 53.524895][ T1925] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 53.566132][ T1925] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 53.582005][ T577] EXT4-fs (loop5): unmounting filesystem. [ 53.621377][ T1928] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.629914][ T1928] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.638346][ T1928] device bridge_slave_0 entered promiscuous mode [ 53.663790][ T1928] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.672571][ T1928] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.692933][ T1928] device bridge_slave_1 entered promiscuous mode [ 53.716325][ T1935] kvm: MWAIT instruction emulated as NOP! [ 53.817752][ T1940] netlink: 'syz.6.651': attribute type 12 has an invalid length. [ 53.825655][ T1940] netlink: 'syz.6.651': attribute type 29 has an invalid length. [ 53.830966][ T1944] loop5: detected capacity change from 0 to 1024 [ 53.833758][ T1940] netlink: 148 bytes leftover after parsing attributes in process `syz.6.651'. [ 53.850557][ T1940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.651'. [ 53.871895][ T655] device bridge_slave_1 left promiscuous mode [ 53.879239][ T655] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.887455][ T1944] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 53.903258][ T655] device bridge_slave_0 left promiscuous mode [ 53.909953][ T28] audit: type=1326 audit(1756508412.134:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.6.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e2f8ebe9 code=0x7ffc0000 [ 53.913886][ T655] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.961993][ T28] audit: type=1326 audit(1756508412.174:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.6.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e2f8ebe9 code=0x7ffc0000 [ 53.989250][ T655] device veth1_macvtap left promiscuous mode [ 53.995342][ T655] device veth0_vlan left promiscuous mode [ 54.032246][ T577] EXT4-fs (loop5): unmounting filesystem. [ 54.037865][ T28] audit: type=1326 audit(1756508412.174:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.6.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e2f8ebe9 code=0x7ffc0000 [ 54.062261][ T1955] SELinux: Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped). [ 54.077531][ T28] audit: type=1326 audit(1756508412.174:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.6.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e2f8ebe9 code=0x7ffc0000 [ 54.115616][ T1958] device syz_tun entered promiscuous mode [ 54.123854][ T28] audit: type=1326 audit(1756508412.174:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.6.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e2f8ebe9 code=0x7ffc0000 [ 54.124956][ T1958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 54.147738][ T28] audit: type=1326 audit(1756508412.174:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.6.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e2f8ebe9 code=0x7ffc0000 [ 54.179627][ T1958] device syz_tun left promiscuous mode [ 54.266735][ T28] audit: type=1326 audit(1756508412.174:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.6.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e2f8ebe9 code=0x7ffc0000 [ 54.299632][ T1966] loop6: detected capacity change from 0 to 128 [ 54.363699][ T1970] mmap: syz.0.663 (1970) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.409732][ T1976] loop6: detected capacity change from 0 to 512 [ 54.458612][ T1976] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 54.469334][ T1976] System zones: 0-2, 18-18, 34-35 [ 54.486958][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.497186][ T1976] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 54.508727][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.529354][ T1976] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.551680][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.609658][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.638581][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.645845][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.658519][ T1219] EXT4-fs (loop6): unmounting filesystem. [ 54.671806][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.707054][ T1988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 54.737096][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.785935][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.800584][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.807787][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.862021][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.886782][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.905108][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.937236][ T1928] device veth0_vlan entered promiscuous mode [ 54.945895][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.958660][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.960098][ T2024] loop0: detected capacity change from 0 to 128 [ 54.968555][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.998312][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.015281][ T1928] device veth1_macvtap entered promiscuous mode [ 55.025021][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.033654][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.044119][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.052663][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.166317][ T1127] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 55.246485][ T486] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 55.258388][ T2034] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.265503][ T2034] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.274248][ T2034] device bridge_slave_0 entered promiscuous mode [ 55.284076][ T2034] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.291744][ T2034] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.299637][ T2034] device bridge_slave_1 entered promiscuous mode [ 55.357873][ T1127] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.372030][ T1127] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.388954][ T1127] usb 4-1: config 0 interface 0 has no altsetting 0 [ 55.404805][ T1127] usb 4-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 55.424098][ T1127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.442478][ T1127] usb 4-1: config 0 descriptor?? [ 55.456046][ T2034] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.463200][ T2034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.470508][ T2034] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.477587][ T2034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.485413][ T486] usb 1-1: Using ep0 maxpacket: 16 [ 55.491837][ T486] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.505101][ T486] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.515423][ T486] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.522594][ T486] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 55.547920][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.548195][ T486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.563812][ T655] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.567619][ T486] usb 1-1: config 0 descriptor?? [ 55.576787][ T655] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.591404][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.599920][ T655] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.607015][ T655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.617532][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.625908][ T655] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.633150][ T655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.655299][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.667031][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.687365][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.701074][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.709465][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.717982][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.726798][ T334] device bridge_slave_1 left promiscuous mode [ 55.733023][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.741833][ T334] device bridge_slave_0 left promiscuous mode [ 55.748127][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.756796][ T334] device veth1_macvtap left promiscuous mode [ 55.762998][ T334] device veth0_vlan left promiscuous mode [ 55.854877][ T1127] ntrig 0003:1B96:000E.000B: hidraw0: USB HID v0.00 Device [HID 1b96:000e] on usb-dummy_hcd.3-1/input0 [ 55.869719][ T2034] device veth0_vlan entered promiscuous mode [ 55.885354][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.901921][ T2034] device veth1_macvtap entered promiscuous mode [ 55.917396][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.937514][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.984891][ T486] hid (null): report_id 0 is invalid [ 55.997003][ T486] hid (null): bogus close delimiter [ 56.002433][ T486] hid (null): invalid report_count 1939077990 [ 56.008784][ T486] hid (null): invalid report_count 56161 [ 56.014488][ T486] hid (null): bogus close delimiter [ 56.020265][ T486] hid (null): nested delimiters [ 56.025312][ T486] hid (null): unknown global tag 0xd [ 56.053908][ T1127] ntrig 0003:1B96:000E.000B: Firmware version: 4.7.18.33.3 (5ed9 335c) [ 56.063017][ T2053] loop6: detected capacity change from 0 to 131072 [ 56.089385][ T2053] F2FS-fs (loop6): invalid crc value [ 56.109338][ T2053] F2FS-fs (loop6): Found nat_bits in checkpoint [ 56.149117][ T2053] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 56.197749][ T2053] F2FS-fs (loop6): Corrupted max_depth of 3: 16842753 [ 56.206834][ T2074] loop5: detected capacity change from 0 to 256 [ 56.227985][ T2074] FAT-fs (loop5): bogus logical sector size 133 [ 56.235775][ T1219] F2FS-fs (loop6): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 56.242278][ T2074] FAT-fs (loop5): Can't find a valid FAT filesystem [ 56.251768][ T486] usb 1-1: USB disconnect, device number 7 [ 56.287372][ T6] usb 4-1: USB disconnect, device number 6 [ 56.343005][ T2076] loop5: detected capacity change from 0 to 1024 [ 56.360633][ T2076] EXT4-fs: Ignoring removed orlov option [ 56.394522][ T2076] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 56.421594][ T2077] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.428938][ T2077] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.438837][ T2077] device bridge_slave_0 entered promiscuous mode [ 56.446721][ T577] EXT4-fs (loop5): unmounting filesystem. [ 56.452587][ T2077] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.469891][ T2077] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.486705][ T2077] device bridge_slave_1 entered promiscuous mode [ 56.721661][ T334] device bridge_slave_1 left promiscuous mode [ 56.728090][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.738175][ T334] device bridge_slave_0 left promiscuous mode [ 56.744701][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.753078][ T334] device veth1_macvtap left promiscuous mode [ 56.760077][ T334] device veth0_vlan left promiscuous mode [ 56.813124][ T2110] loop3: detected capacity change from 0 to 2048 [ 56.832773][ T2110] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.900341][ T288] EXT4-fs (loop3): unmounting filesystem. [ 56.961880][ T2107] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.972396][ T2077] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.979670][ T2077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.986992][ T2077] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.994113][ T2077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.026570][ T2130] netlink: 165 bytes leftover after parsing attributes in process `syz.6.719'. [ 57.055556][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.065386][ T655] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.073047][ T655] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.089388][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.106688][ T655] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.114075][ T655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.121992][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.131202][ T655] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.138288][ T655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.162453][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.170859][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.193573][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.204541][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.220990][ T2077] device veth0_vlan entered promiscuous mode [ 57.227526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.235600][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.244726][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.252364][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.265647][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.274420][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.284288][ T2077] device veth1_macvtap entered promiscuous mode [ 57.296884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.304638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.313267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.345467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.366338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.377648][ T2160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.732'. [ 57.388299][ T2158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.731'. [ 57.900045][ T8] device bridge_slave_1 left promiscuous mode [ 57.909881][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.918651][ T8] device bridge_slave_0 left promiscuous mode [ 57.925184][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.934642][ T8] device veth1_macvtap left promiscuous mode [ 57.942022][ T8] device veth0_vlan left promiscuous mode [ 58.068148][ T2173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 58.075443][ T2173] IPv6: NLM_F_CREATE should be set when creating new route [ 58.086030][ T2183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.164526][ T2182] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.171980][ T2182] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.179998][ T2182] device bridge_slave_0 entered promiscuous mode [ 58.188028][ T2182] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.195684][ T2182] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.203984][ T2182] device bridge_slave_1 entered promiscuous mode [ 58.392555][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.454766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.465540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.483040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.499102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.506367][ T2197] loop5: detected capacity change from 0 to 40427 [ 58.517468][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.524339][ T2197] F2FS-fs (loop5): heap/no_heap options were deprecated [ 58.524539][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.531561][ T2197] F2FS-fs (loop5): fault_injection options not supported [ 58.546227][ T2197] F2FS-fs (loop5): fault_type options not supported [ 58.553782][ T2197] F2FS-fs (loop5): invalid crc value [ 58.566452][ T2197] F2FS-fs (loop5): Found nat_bits in checkpoint [ 58.573717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.581689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.590412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.617655][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.624751][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.627165][ T2201] loop6: detected capacity change from 0 to 40427 [ 58.632275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.654966][ T2201] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 58.663326][ T2197] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 58.663653][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.676077][ T2201] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 58.689960][ T2201] F2FS-fs (loop6): invalid crc value [ 58.719903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.739680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.741528][ T2201] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 58.748509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.767424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.788291][ T2182] device veth0_vlan entered promiscuous mode [ 58.807623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.816588][ T2224] loop3: detected capacity change from 0 to 1024 [ 58.817578][ T2201] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 58.825122][ T2182] device veth1_macvtap entered promiscuous mode [ 58.834965][ T2201] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 58.844395][ T577] syz-executor: attempt to access beyond end of device [ 58.844395][ T577] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.884613][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.905276][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.913569][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 58.913584][ T28] audit: type=1326 audit(1756508417.134:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f07b8ebe9 code=0x7ffc0000 [ 58.971770][ T2224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.997283][ T28] audit: type=1326 audit(1756508417.134:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1f07b8ebe9 code=0x7ffc0000 [ 59.021602][ T28] audit: type=1326 audit(1756508417.134:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f07b8ebe9 code=0x7ffc0000 [ 59.042336][ T2201] syz.6.748: attempt to access beyond end of device [ 59.042336][ T2201] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 59.045572][ T2224] EXT4-fs warning (device loop3): ext4_rmdir:3243: inode #11: comm syz.3.753: empty directory 'file1' has too many links (111) [ 59.072472][ T28] audit: type=1326 audit(1756508417.134:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f07b8ebe9 code=0x7ffc0000 [ 59.096371][ T28] audit: type=1326 audit(1756508417.134:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f07b8ebe9 code=0x7ffc0000 [ 59.120851][ T28] audit: type=1326 audit(1756508417.134:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1f07b8ebe9 code=0x7ffc0000 [ 59.147572][ T28] audit: type=1326 audit(1756508417.134:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f07b8ebe9 code=0x7ffc0000 [ 59.171301][ T28] audit: type=1326 audit(1756508417.134:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f1f07b8ebe9 code=0x7ffc0000 [ 59.194991][ T28] audit: type=1326 audit(1756508417.134:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f07b8ebe9 code=0x7ffc0000 [ 59.221846][ T288] EXT4-fs (loop3): unmounting filesystem. [ 59.340319][ T1219] syz-executor: attempt to access beyond end of device [ 59.340319][ T1219] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.657017][ T655] device bridge_slave_1 left promiscuous mode [ 59.663187][ T655] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.670857][ T655] device bridge_slave_0 left promiscuous mode [ 59.677128][ T655] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.685103][ T655] device veth1_macvtap left promiscuous mode [ 59.691195][ T655] device veth0_vlan left promiscuous mode [ 59.895501][ T28] audit: type=1400 audit(1756508418.114:391): avc: denied { bind } for pid=2248 comm="syz.6.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.987958][ T2261] loop0: detected capacity change from 0 to 512 [ 60.021927][ T2261] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.082449][ T2261] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 60.111132][ T285] EXT4-fs (loop0): unmounting filesystem. [ 60.136811][ T2266] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.144031][ T2266] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.153465][ T2266] device bridge_slave_0 entered promiscuous mode [ 60.179599][ T2266] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.188361][ T2266] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.212365][ T2266] device bridge_slave_1 entered promiscuous mode [ 60.344256][ T2281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 60.408859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.417186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.434016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.442992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.452611][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.459692][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.468127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.476796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.485191][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.492358][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.508243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.516387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.524762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.542500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.555790][ T2266] device veth0_vlan entered promiscuous mode [ 60.562568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.570886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.578715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.586764][ T1127] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.593104][ T2266] device veth1_macvtap entered promiscuous mode [ 60.602279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.616371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.634840][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.777415][ T1127] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.788491][ T1127] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.799088][ T1127] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.814046][ T1127] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.823306][ T1127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.832113][ T1127] usb 7-1: config 0 descriptor?? [ 61.187103][ T8] device bridge_slave_1 left promiscuous mode [ 61.193377][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.201215][ T8] device bridge_slave_0 left promiscuous mode [ 61.207484][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.215516][ T8] device veth1_macvtap left promiscuous mode [ 61.221630][ T8] device veth0_vlan left promiscuous mode [ 61.240894][ T1127] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 61.262231][ T1127] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 61.595664][ T2314] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.619958][ T2318] loop0: detected capacity change from 0 to 8192 [ 61.636219][ T2314] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.644013][ T2314] device bridge_slave_0 entered promiscuous mode [ 61.651846][ T2314] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.659192][ T2314] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.667060][ T2314] device bridge_slave_1 entered promiscuous mode [ 61.797307][ T2326] loop5: detected capacity change from 0 to 256 [ 61.857413][ T2326] syz.5.788: attempt to access beyond end of device [ 61.857413][ T2326] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 61.953514][ T2314] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.960638][ T2314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.968183][ T2314] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.975684][ T2314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.035225][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.046882][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.065793][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.097502][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.107399][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.114586][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.127208][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.135683][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.142915][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.156482][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.165997][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.181772][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.194525][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.203364][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.211418][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.220170][ T2314] device veth0_vlan entered promiscuous mode [ 62.232160][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.241972][ T2314] device veth1_macvtap entered promiscuous mode [ 62.253594][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.264240][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.426298][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 62.607409][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.618603][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.628799][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.641753][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.650969][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.659992][ T39] usb 4-1: config 0 descriptor?? [ 62.826805][ T335] device bridge_slave_1 left promiscuous mode [ 62.833198][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.840996][ T335] device bridge_slave_0 left promiscuous mode [ 62.847460][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.855505][ T335] device veth1_macvtap left promiscuous mode [ 62.861761][ T335] device veth0_vlan left promiscuous mode [ 63.068615][ T39] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 63.077179][ T39] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 63.093943][ T39] plantronics 0003:047F:FFFF.000E: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 63.334955][ T2395] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.349160][ T486] usb 4-1: USB disconnect, device number 7 [ 63.367618][ T6] usb 7-1: USB disconnect, device number 5 [ 63.379633][ T2395] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.404962][ T2391] loop6: detected capacity change from 0 to 40427 [ 63.415570][ T2391] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 63.424112][ T2391] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 63.435953][ T2395] device bridge_slave_0 entered promiscuous mode [ 63.442734][ T2391] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 63.455497][ T2395] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.462897][ T2395] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.470811][ T2395] device bridge_slave_1 entered promiscuous mode [ 63.478269][ T2391] F2FS-fs (loop6): Found nat_bits in checkpoint [ 63.538129][ T2391] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 63.545485][ T2391] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 63.625318][ T2391] syz.6.814: attempt to access beyond end of device [ 63.625318][ T2391] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.651892][ T1219] syz-executor: attempt to access beyond end of device [ 63.651892][ T1219] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 63.708414][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.716129][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.740068][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.750130][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.761230][ T655] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.768321][ T655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.777205][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.785763][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.794181][ T655] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.801241][ T655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.809160][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.817419][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.834898][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.845757][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.867215][ T2395] device veth0_vlan entered promiscuous mode [ 63.875592][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.885108][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.915086][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.962219][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.977026][ T2395] device veth1_macvtap entered promiscuous mode [ 63.997718][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.019015][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.046286][ T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 64.257354][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.268374][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.278351][ T6] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 64.287624][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.298502][ T6] usb 1-1: config 0 descriptor?? [ 64.676704][ T335] device bridge_slave_1 left promiscuous mode [ 64.682997][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.690694][ T335] device bridge_slave_0 left promiscuous mode [ 64.697305][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.705393][ T335] device veth1_macvtap left promiscuous mode [ 64.706657][ T6] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 64.711899][ T335] device veth0_vlan left promiscuous mode [ 64.719086][ T6] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 64.906999][ T6] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 65.107349][ T6] cp2112 0003:10C4:EA90.000F: error requesting SMBus config [ 65.126130][ T6] cp2112: probe of 0003:10C4:EA90.000F failed with error -32 [ 65.172485][ T6] usb 1-1: USB disconnect, device number 8 [ 65.202386][ T2496] fido_id[2496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 65.258691][ T2487] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.273347][ T2487] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.289989][ T2487] device bridge_slave_0 entered promiscuous mode [ 65.300696][ T2487] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.308438][ T2487] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.315986][ T2487] device bridge_slave_1 entered promiscuous mode [ 65.448329][ T2498] loop6: detected capacity change from 0 to 40427 [ 65.474316][ T2498] F2FS-fs (loop6): heap/no_heap options were deprecated [ 65.484993][ T2498] F2FS-fs (loop6): invalid crc value [ 65.486654][ T2509] cgroup: fork rejected by pids controller in /syz3 [ 65.506271][ T2498] F2FS-fs (loop6): Found nat_bits in checkpoint [ 65.538772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.543569][ T2498] F2FS-fs (loop6): Start checkpoint disabled! [ 65.558496][ T2498] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 65.560489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.582831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.594951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.603455][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.610539][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.620934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.633441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.636907][ T2498] F2FS-fs (loop6): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 65.641861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.663691][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.670765][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.690928][ T2498] F2FS-fs (loop6): ino:10, start:0, end:0, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 65.712834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.727723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.729752][ T334] kworker/u4:3: attempt to access beyond end of device [ 65.729752][ T334] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 65.746338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.767031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.788860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.799820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.818258][ T2487] device veth0_vlan entered promiscuous mode [ 65.831326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.842606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.858639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.866678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.874350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.884156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.900470][ T2487] device veth1_macvtap entered promiscuous mode [ 65.912587][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.936647][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.976657][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.990561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.006903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.101035][ T2526] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.108634][ T2526] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.117318][ T2526] device bridge_slave_0 entered promiscuous mode [ 66.136811][ T2526] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.154356][ T2526] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.165784][ T2526] device bridge_slave_1 entered promiscuous mode [ 66.223137][ T2526] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.230329][ T2526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.237648][ T2526] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.244790][ T2526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.265045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.272822][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.280557][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.288355][ T358] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 66.298711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.307562][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.314693][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.326440][ T6] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 66.334879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.343349][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.350503][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.358329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.367087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.380675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.392464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.400798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.408383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.416937][ T2526] device veth0_vlan entered promiscuous mode [ 66.430965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.440505][ T2526] device veth1_macvtap entered promiscuous mode [ 66.450485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.461116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.487370][ T358] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.497767][ T358] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.507843][ T358] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.517197][ T358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.525332][ T358] usb 6-1: SerialNumber: syz [ 66.546394][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 66.552778][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.563908][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.573706][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.586761][ T6] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.595856][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.605430][ T6] usb 7-1: config 0 descriptor?? [ 66.647012][ T335] device bridge_slave_1 left promiscuous mode [ 66.653283][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.661001][ T335] device bridge_slave_0 left promiscuous mode [ 66.667333][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.675531][ T335] device veth1_macvtap left promiscuous mode [ 66.681642][ T335] device veth0_vlan left promiscuous mode [ 66.735428][ T358] usb 6-1: 0:2 : does not exist [ 66.744780][ T358] usb 6-1: USB disconnect, device number 7 [ 66.967065][ T467] udevd[467]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.014010][ T6] HID 045e:07da: Invalid code 65791 type 1 [ 67.022259][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0010/input/input10 [ 67.035785][ T6] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 67.099808][ T2546] loop0: detected capacity change from 0 to 512 [ 67.110455][ T2546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.139401][ T2546] EXT4-fs (loop0): 1 truncate cleaned up [ 67.145108][ T2546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 67.209750][ T285] EXT4-fs (loop0): unmounting filesystem. [ 67.291251][ T1127] usb 7-1: USB disconnect, device number 6 [ 67.365331][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.374044][ T2552] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.384219][ T2552] device bridge_slave_0 entered promiscuous mode [ 67.392608][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.400126][ T2552] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.410123][ T2552] device bridge_slave_1 entered promiscuous mode [ 67.423390][ T2577] 9pnet: p9_errstr2errno: server reported unknown error @c˙˙˙˙˙˙˙˙D†üB€|˜Ü‘…–0xffffffffffffffff [ 67.504252][ T2588] loop3: detected capacity change from 0 to 128 [ 67.524990][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 67.525007][ T28] audit: type=1400 audit(1756508425.744:403): avc: denied { getopt } for pid=2590 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.575527][ T28] audit: type=1400 audit(1756508425.784:404): avc: denied { wake_alarm } for pid=2593 comm="syz.0.885" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.582988][ T2592] incfs: Options parsing error. -22 [ 67.608280][ T335] device bridge_slave_1 left promiscuous mode [ 67.614698][ T2592] incfs: mount failed -22 [ 67.614886][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.626898][ T335] device bridge_slave_0 left promiscuous mode [ 67.633090][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.655856][ T335] device veth1_macvtap left promiscuous mode [ 67.662380][ T335] device veth0_vlan left promiscuous mode [ 67.682349][ T28] audit: type=1400 audit(1756508425.904:405): avc: denied { create } for pid=2597 comm="syz.5.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 67.703251][ T28] audit: type=1400 audit(1756508425.904:406): avc: denied { sys_admin } for pid=2597 comm="syz.5.888" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.728304][ T2603] loop3: detected capacity change from 0 to 256 [ 67.742202][ T2603] FAT-fs (loop3): bogus logical sector size 133 [ 67.753921][ T2603] FAT-fs (loop3): Can't find a valid FAT filesystem [ 67.801992][ T2609] loop5: detected capacity change from 0 to 1024 [ 67.818361][ T2609] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 67.828006][ T2609] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.850452][ T2609] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: block 3: comm syz.5.892: lblock 3 mapped to illegal pblock 3 (length 3) [ 67.872725][ T2609] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 67.885307][ T2609] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.885307][ T2609] [ 67.900331][ T2609] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: comm syz.5.892: lblock 0 mapped to illegal pblock 0 (length 3) [ 67.921813][ T655] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 67.937270][ T655] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 67.937618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.957935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.958183][ T655] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.958183][ T655] [ 67.975719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.977134][ T577] EXT4-fs (loop5): unmounting filesystem. [ 67.984888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.998970][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.006057][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.013827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.023614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.032536][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.039638][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.047790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.056105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.064708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.073587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.087489][ T2626] netlink: 96 bytes leftover after parsing attributes in process `syz.5.896'. [ 68.101633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.114476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.123746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.138377][ T2552] device veth0_vlan entered promiscuous mode [ 68.144946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.153460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.162734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.171426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.186742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.196821][ T2552] device veth1_macvtap entered promiscuous mode [ 68.214320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.224022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.236464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.245235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.329434][ T2628] loop6: detected capacity change from 0 to 40427 [ 68.344027][ T2628] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 68.367493][ T2628] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 68.392280][ T2628] F2FS-fs (loop6): Found nat_bits in checkpoint [ 68.432969][ T2628] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 68.440179][ T2628] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 68.476609][ T1219] syz-executor: attempt to access beyond end of device [ 68.476609][ T1219] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.356762][ T335] device bridge_slave_1 left promiscuous mode [ 69.363010][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.370583][ T335] device bridge_slave_0 left promiscuous mode [ 69.376785][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.384732][ T335] device veth1_macvtap left promiscuous mode [ 69.390847][ T335] device veth0_vlan left promiscuous mode [ 69.463608][ T28] audit: type=1400 audit(1756508427.684:407): avc: denied { remount } for pid=2638 comm="syz.6.900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 69.495149][ T2641] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 69.526692][ T2641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.658754][ T2656] netlink: 20 bytes leftover after parsing attributes in process `syz.5.906'. [ 69.761202][ T2648] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.776362][ T2648] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.784082][ T2648] device bridge_slave_0 entered promiscuous mode [ 69.796867][ T2648] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.804239][ T2648] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.813611][ T2648] device bridge_slave_1 entered promiscuous mode [ 69.901661][ T2648] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.908848][ T2648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.916295][ T2648] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.923336][ T2648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.931151][ T358] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 69.951975][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.960146][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.969153][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.978116][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.987610][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.994835][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.023310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.038443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.070689][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.094375][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.114029][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.125642][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.134798][ T2648] device veth0_vlan entered promiscuous mode [ 70.146345][ T358] usb 7-1: Using ep0 maxpacket: 32 [ 70.149446][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.154572][ T358] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 70.166927][ T2648] device veth1_macvtap entered promiscuous mode [ 70.184545][ T358] usb 7-1: config 0 has no interface number 0 [ 70.184970][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.191721][ T358] usb 7-1: config 0 interface 184 has no altsetting 0 [ 70.208614][ T2705] netlink: 'syz.0.925': attribute type 4 has an invalid length. [ 70.216784][ T2705] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.925'. [ 70.227435][ T358] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 70.237706][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.256214][ T358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.271793][ T358] usb 7-1: Product: syz [ 70.276061][ T358] usb 7-1: Manufacturer: syz [ 70.281381][ T358] usb 7-1: SerialNumber: syz [ 70.290863][ T358] usb 7-1: config 0 descriptor?? [ 70.303437][ T358] smsc75xx v1.0.0 [ 70.312443][ T2712] loop0: detected capacity change from 0 to 512 [ 70.313765][ T358] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 70.322309][ T2712] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.346007][ T358] smsc75xx: probe of 7-1:0.184 failed with error -22 [ 70.355345][ T2712] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.397379][ T2712] EXT4-fs (loop0): 1 truncate cleaned up [ 70.415183][ T2712] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 70.442694][ T285] EXT4-fs (loop0): unmounting filesystem. [ 70.520695][ T1127] usb 7-1: USB disconnect, device number 7 [ 70.816761][ T655] device bridge_slave_1 left promiscuous mode [ 70.823193][ T655] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.830991][ T655] device bridge_slave_0 left promiscuous mode [ 70.837283][ T655] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.845381][ T655] device veth1_macvtap left promiscuous mode [ 70.851723][ T655] device veth0_vlan left promiscuous mode [ 71.542495][ T2721] loop3: detected capacity change from 0 to 512 [ 71.587390][ T28] audit: type=1400 audit(1756508429.814:408): avc: denied { relabelto } for pid=2728 comm="syz.6.936" name="NETLINK" dev="sockfs" ino=28996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 71.629651][ T2721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.656847][ T2721] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.503484][ T2751] loop0: detected capacity change from 0 to 40427 [ 74.476189][ T2751] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 74.489666][ T2751] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.500361][ T2751] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.517610][ T2526] EXT4-fs (loop3): unmounting filesystem. [ 74.555516][ T2751] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.560566][ T103] udevd[103]: worker [467] terminated by signal 33 (Unknown signal 33) [ 74.562988][ T2751] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.584043][ T2739] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.592287][ T103] udevd[103]: worker [467] failed while handling '/devices/virtual/block/loop3' [ 74.602059][ T2739] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.609856][ T2739] device bridge_slave_0 entered promiscuous mode [ 74.637885][ T28] audit: type=1400 audit(1756508432.864:409): avc: denied { link } for pid=2750 comm="syz.0.946" name="file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.648742][ T2739] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.669884][ T2739] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.690832][ T2739] device bridge_slave_1 entered promiscuous mode [ 74.779790][ T2739] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.786898][ T2739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.794213][ T2739] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.801291][ T2739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.829937][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.838818][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.847789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.855817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.872533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.880827][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.888021][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.896884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.899022][ T2790] loop0: detected capacity change from 0 to 512 [ 74.905144][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.913223][ T2790] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.918415][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.933354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.937756][ T2790] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.942210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.949936][ T2790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 74.962241][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.966218][ T2790] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 74.974054][ T1127] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 74.983515][ T358] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 74.998761][ T2790] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 75.008008][ T2790] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 75.011525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.024868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.032636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.041858][ T2739] device veth0_vlan entered promiscuous mode [ 75.056859][ T2790] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.957: dx entry: limit 65535 != root limit 120 [ 75.060503][ T2739] device veth1_macvtap entered promiscuous mode [ 75.070177][ T2790] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.957: Corrupt directory, running e2fsck is recommended [ 75.089600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.099759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.108645][ T285] EXT4-fs (loop0): unmounting filesystem. [ 75.108745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.197399][ T1127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.197403][ T358] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.197438][ T1127] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.207951][ T358] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.227851][ T1127] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 75.240484][ T358] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.249904][ T1127] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.258033][ T358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.274697][ T1127] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.278900][ T358] usb 6-1: SerialNumber: syz [ 75.292819][ T1127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.301162][ T1127] usb 4-1: Product: syz [ 75.305428][ T1127] usb 4-1: Manufacturer: syz [ 75.310113][ T1127] usb 4-1: SerialNumber: syz [ 75.315971][ T2772] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.325413][ T1127] cdc_mbim 4-1:1.0: skipping garbage [ 75.500454][ T358] usb 6-1: 0:2 : does not exist [ 75.505875][ T358] usb 6-1: unit 1 not found! [ 75.515959][ T358] usb 6-1: USB disconnect, device number 8 [ 75.726990][ T8] device bridge_slave_1 left promiscuous mode [ 75.733290][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.741137][ T8] device bridge_slave_0 left promiscuous mode [ 75.747356][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.755788][ T8] device veth1_macvtap left promiscuous mode [ 75.761914][ T8] device veth0_vlan left promiscuous mode [ 76.329536][ T1127] cdc_mbim 4-1:1.0: bind() failure [ 76.335315][ T1127] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 76.342343][ T1127] cdc_ncm 4-1:1.1: bind() failure [ 76.352534][ T1127] usb 4-1: USB disconnect, device number 8 [ 76.507373][ T2809] netlink: 'syz.0.965': attribute type 3 has an invalid length. [ 76.532035][ T28] audit: type=1400 audit(1756508434.754:410): avc: denied { read write } for pid=2810 comm="syz.6.966" name="file1" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.532871][ T2809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 76.564519][ T28] audit: type=1400 audit(1756508434.754:411): avc: denied { open } for pid=2810 comm="syz.6.966" path="/108/file1" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.659291][ T2812] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.668051][ T2812] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.675596][ T2812] device bridge_slave_0 entered promiscuous mode [ 76.682770][ T28] audit: type=1400 audit(1756508434.904:412): avc: denied { append } for pid=2821 comm="syz.0.970" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.707138][ T2812] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.714337][ T2812] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.722171][ T2812] device bridge_slave_1 entered promiscuous mode [ 76.776312][ T358] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 76.819643][ T2812] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.826849][ T2812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.834386][ T2812] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.841656][ T2812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.874917][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.892410][ T655] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.900190][ T655] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.917265][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.925740][ T655] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.932906][ T655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.940670][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.950194][ T655] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.957533][ T655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.966201][ T358] usb 6-1: Using ep0 maxpacket: 32 [ 76.972791][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.981432][ T358] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 76.991444][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.998947][ T358] usb 6-1: config 0 has no interface number 0 [ 77.005446][ T358] usb 6-1: config 0 interface 184 has no altsetting 0 [ 77.030883][ T358] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 77.048006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.063052][ T2812] device veth0_vlan entered promiscuous mode [ 77.069420][ T358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.078058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.086721][ T358] usb 6-1: Product: syz [ 77.091249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.098684][ T358] usb 6-1: Manufacturer: syz [ 77.103317][ T358] usb 6-1: SerialNumber: syz [ 77.108853][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.120634][ T358] usb 6-1: config 0 descriptor?? [ 77.124646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.135762][ T2812] device veth1_macvtap entered promiscuous mode [ 77.144101][ T2850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 77.153073][ T358] smsc75xx v1.0.0 [ 77.168165][ T2850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 77.180133][ T2857] loop6: detected capacity change from 0 to 128 [ 77.186723][ T2850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 77.203376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.212828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.230266][ T2850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 77.272668][ T2862] ip_tunnel: non-ECT from 100.1.1.1 with TOS=0x92 [ 77.696220][ T1127] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 77.877456][ T1127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.888417][ T1127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.898280][ T1127] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.911324][ T1127] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.920474][ T1127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.929300][ T1127] usb 4-1: config 0 descriptor?? [ 77.957139][ T8] device bridge_slave_1 left promiscuous mode [ 77.963416][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.971082][ T8] device bridge_slave_0 left promiscuous mode [ 77.977401][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.985622][ T8] device veth1_macvtap left promiscuous mode [ 77.991987][ T8] device veth0_vlan left promiscuous mode [ 78.140840][ T358] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 78.151751][ T358] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 78.161344][ T358] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 78.172593][ T358] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 78.182514][ T358] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 78.193094][ T358] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 78.202791][ T358] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 78.210628][ T358] usb 6-1: USB disconnect, device number 9 [ 78.338283][ T1127] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xe [ 78.345716][ T1127] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 78.353506][ T1127] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 78.362624][ T1127] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 78.606893][ T1127] usb 4-1: USB disconnect, device number 9 [ 78.935565][ T2904] loop6: detected capacity change from 0 to 512 [ 78.969440][ T2904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.001497][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.036915][ T2904] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 79.046738][ T2904] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.066099][ T2922] loop0: detected capacity change from 0 to 512 [ 79.066236][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 79.084718][ T28] audit: type=1400 audit(1756508437.304:413): avc: denied { setattr } for pid=2903 comm="syz.6.1004" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.094366][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.107756][ T2904] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 79.115144][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 79.125835][ T2904] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 79.144092][ T2904] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.1004: Failed to acquire dquot type 0 [ 79.150241][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.164657][ T2922] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.173764][ T2922] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.198428][ T285] EXT4-fs (loop0): unmounting filesystem. [ 79.204650][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.213909][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.214312][ T1219] EXT4-fs (loop6): unmounting filesystem. [ 79.222642][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.236737][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.265982][ T2901] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.280681][ T2901] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.289042][ T2901] device bridge_slave_0 entered promiscuous mode [ 79.298717][ T2901] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.306122][ T2901] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.314059][ T2901] device bridge_slave_1 entered promiscuous mode [ 79.361024][ T2937] general protection fault, probably for non-canonical address 0xdffffc0000000037: 0000 [#1] PREEMPT SMP KASAN [ 79.372975][ T2937] KASAN: null-ptr-deref in range [0x00000000000001b8-0x00000000000001bf] [ 79.381492][ T2937] CPU: 0 PID: 2937 Comm: syz.3.1016 Not tainted syzkaller #0 [ 79.388932][ T2937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.399109][ T2937] RIP: 0010:htb_qlen_notify+0x30/0xc0 [ 79.404931][ T2937] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 0e ed 6b fd 4d 8d ae b8 01 00 00 4c 89 eb 48 c1 eb 03 <42> 0f b6 04 23 84 c0 75 56 45 8b 65 00 31 ff 44 89 e6 e8 09 f1 6b [ 79.424802][ T2937] RSP: 0018:ffffc90000986df0 EFLAGS: 00010202 [ 79.431035][ T2937] RAX: ffffffff84041c62 RBX: 0000000000000037 RCX: 0000000000080000 [ 79.439017][ T2937] RDX: ffffc90004ed8000 RSI: 000000000000017a RDI: 000000000000017b [ 79.447096][ T2937] RBP: ffffc90000986e18 R08: ffff888116e40000 R09: 0000000000000002 [ 79.455077][ T2937] R10: 0000000000000000 R11: ffffffff84041c40 R12: dffffc0000000000 [ 79.463068][ T2937] R13: 00000000000001b8 R14: 0000000000000000 R15: ffff88811df66000 [ 79.471134][ T2937] FS: 00007f7fda0fa6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 79.480260][ T2937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.486843][ T2937] CR2: 00007f87d96f7e00 CR3: 00000001119b2000 CR4: 00000000003506b0 [ 79.494919][ T2937] DR0: 0000000000008009 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.503062][ T2937] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 79.511124][ T2937] Call Trace: [ 79.514572][ T2937] [ 79.517611][ T2937] qdisc_tree_reduce_backlog+0x20a/0x360 [ 79.523263][ T2937] fq_codel_change+0xafd/0x1010 [ 79.528206][ T2937] ? __cfi_fq_codel_change+0x10/0x10 [ 79.533487][ T2937] ? netlink_sendmsg+0x8aa/0xbc0 [ 79.538521][ T2937] fq_codel_init+0x384/0xa90 [ 79.543114][ T2937] ? __cfi_fq_codel_init+0x10/0x10 [ 79.548393][ T2937] qdisc_create+0x7f3/0x1040 [ 79.553075][ T2937] ? qdisc_notify+0x360/0x360 [ 79.557754][ T2937] tc_modify_qdisc+0x8ea/0x1900 [ 79.562707][ T2937] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 79.568264][ T2937] ? __kasan_check_write+0x14/0x20 [ 79.573739][ T2937] ? mutex_lock+0x8d/0x1a0 [ 79.578170][ T2937] ? __cfi_mutex_lock+0x10/0x10 [ 79.583029][ T2937] ? ns_capable+0x8c/0xf0 [ 79.587443][ T2937] ? netlink_net_capable+0x125/0x160 [ 79.592731][ T2937] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 79.598126][ T2937] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 79.603096][ T2937] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 79.608678][ T2937] ? kernel_text_address+0xa0/0xd0 [ 79.613812][ T2937] ? __kernel_text_address+0xd/0x30 [ 79.619025][ T2937] ? unwind_get_return_address+0x4d/0x90 [ 79.624659][ T2937] ? memcpy+0x56/0x70 [ 79.628736][ T2937] ? avc_has_perm_noaudit+0x2f4/0x460 [ 79.634207][ T2937] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 79.640051][ T2937] ? slab_post_alloc_hook+0x4f/0x2d0 [ 79.645347][ T2937] ? kmem_cache_alloc_node+0x181/0x340 [ 79.650837][ T2937] ? __alloc_skb+0xea/0x4b0 [ 79.655444][ T2937] ? avc_has_perm+0x158/0x240 [ 79.660124][ T2937] ? __alloc_skb+0x236/0x4b0 [ 79.664717][ T2937] ? netlink_sendmsg+0x626/0xbc0 [ 79.669654][ T2937] ? __cfi_avc_has_perm+0x10/0x10 [ 79.674706][ T2937] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 79.680096][ T2937] netlink_rcv_skb+0x1f2/0x440 [ 79.684879][ T2937] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 79.690427][ T2937] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 79.695716][ T2937] ? __netlink_lookup+0x387/0x3b0 [ 79.700759][ T2937] rtnetlink_rcv+0x1c/0x20 [ 79.705177][ T2937] netlink_unicast+0x8b1/0xa30 [ 79.709941][ T2937] netlink_sendmsg+0x8aa/0xbc0 [ 79.714703][ T2937] ? _raw_spin_unlock+0x4c/0x70 [ 79.719559][ T2937] ? __cfi_netlink_sendmsg+0x10/0x10 [ 79.724931][ T2937] ? __schedule+0xb8f/0x14e0 [ 79.729524][ T2937] ? security_socket_sendmsg+0x93/0xb0 [ 79.735153][ T2937] ? __cfi_netlink_sendmsg+0x10/0x10 [ 79.740473][ T2937] ____sys_sendmsg+0x5a9/0x990 [ 79.745327][ T2937] ? __sys_sendmsg_sock+0x40/0x40 [ 79.750462][ T2937] ? import_iovec+0x7c/0xb0 [ 79.754973][ T2937] ___sys_sendmsg+0x21c/0x290 [ 79.759914][ T2937] ? __sys_sendmsg+0x270/0x270 [ 79.764692][ T2937] ? __fdget+0x19c/0x220 [ 79.768956][ T2937] __x64_sys_sendmsg+0x1f0/0x2c0 [ 79.773913][ T2937] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 79.779481][ T2937] ? __kasan_check_write+0x14/0x20 [ 79.784956][ T2937] ? fpregs_restore_userregs+0x128/0x260 [ 79.790587][ T2937] ? switch_fpu_return+0xe/0x10 [ 79.795528][ T2937] x64_sys_call+0x171/0x9a0 [ 79.800057][ T2937] do_syscall_64+0x4c/0xa0 [ 79.804472][ T2937] ? clear_bhb_loop+0x30/0x80 [ 79.809149][ T2937] ? clear_bhb_loop+0x30/0x80 [ 79.813826][ T2937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.819718][ T2937] RIP: 0033:0x7f7fd918ebe9 [ 79.824132][ T2937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.843735][ T2937] RSP: 002b:00007f7fda0fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.852412][ T2937] RAX: ffffffffffffffda RBX: 00007f7fd93c5fa0 RCX: 00007f7fd918ebe9 [ 79.860480][ T2937] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 79.868467][ T2937] RBP: 00007f7fd9211e19 R08: 0000000000000000 R09: 0000000000000000 [ 79.876787][ T2937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.884759][ T2937] R13: 00007f7fd93c6038 R14: 00007f7fd93c5fa0 R15: 00007ffed7c6ee98 [ 79.893038][ T2937] [ 79.896058][ T2937] Modules linked in: [ 79.900005][ T2937] ---[ end trace 0000000000000000 ]--- [ 79.905559][ T2937] RIP: 0010:htb_qlen_notify+0x30/0xc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 79.911142][ T2937] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 0e ed 6b fd 4d 8d ae b8 01 00 00 4c 89 eb 48 c1 eb 03 <42> 0f b6 04 23 84 c0 75 56 45 8b 65 00 31 ff 44 89 e6 e8 09 f1 6b [ 79.916196][ T28] audit: type=1400 audit(1756508438.134:414): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[14135]" dev="pipefs" ino=14135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 79.930873][ T2937] RSP: 0018:ffffc90000986df0 EFLAGS: 00010202 [ 79.960350][ T2937] RAX: ffffffff84041c62 RBX: 0000000000000037 RCX: 0000000000080000 [ 79.968465][ T2937] RDX: ffffc90004ed8000 RSI: 000000000000017a RDI: 000000000000017b [ 79.976659][ T2937] RBP: ffffc90000986e18 R08: ffff888116e40000 R09: 0000000000000002 [ 79.984832][ T2937] R10: 0000000000000000 R11: ffffffff84041c40 R12: dffffc0000000000 [ 79.992871][ T2937] R13: 00000000000001b8 R14: 0000000000000000 R15: ffff88811df66000 [ 80.001072][ T2937] FS: 00007f7fda0fa6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 80.010325][ T2937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.016956][ T2937] CR2: 00007f87d96f7e00 CR3: 00000001119b2000 CR4: 00000000003506b0 [ 80.025046][ T2937] DR0: 0000000000008009 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.033062][ T2937] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 80.041149][ T2937] Kernel panic - not syncing: Fatal exception in interrupt [ 80.050866][ T2937] Kernel Offset: disabled [ 80.055212][ T2937] Rebooting in 86400 seconds..