last executing test programs: 41.958377608s ago: executing program 0 (id=525): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x54f6, &(0x7f0000005800)="$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") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r1, 0xb125b000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC, @ANYBLOB=',group_id', @ANYRESDEC=0x0, @ANYBLOB=',allow_other'], 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_subtree(r2, 0x0, 0x7ffffffff000) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x3, {0x3, 0x0, 'u'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) 38.832843109s ago: executing program 0 (id=528): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb240580403500000000000010902"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_usb_disconnect(r0) 35.529672905s ago: executing program 0 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 34.31277621s ago: executing program 0 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x8, 0x9, 0xef6, 0x1004, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x13) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000010000000000181100002c237541182c4e0f000000000000cd36243c58100dd183d18d7b0d8c43523a5fbe411cf5baf4e2fe7cafd0f01a919dfc76b3e7cf60eabbbb9656beb16c142ef72f38e88102766831e5c10d231e12ea782ced025751dd17", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)}, 0x20) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d323456536022e8dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) 34.214241338s ago: executing program 0 (id=542): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") 32.706339879s ago: executing program 0 (id=543): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) 24.014201762s ago: executing program 3 (id=582): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$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") r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)=ANY=[]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x3fd, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 23.762444063s ago: executing program 3 (id=584): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)="e4", &(0x7f0000000380), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) syslog(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x34}}, 0x0) 23.662915112s ago: executing program 3 (id=596): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r1, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44f, 0xb324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 21.192220936s ago: executing program 3 (id=605): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x54f6, &(0x7f0000005800)="$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") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r1, 0xb125b000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC, @ANYBLOB=',group_id', @ANYRESDEC=0x0, @ANYBLOB=',allow_other'], 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_subtree(r2, 0x0, 0x7ffffffff000) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x3, {0x3, 0x0, 'u'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) 11.644216302s ago: executing program 3 (id=600): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000010c0)='./file0/../file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000001000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0) 9.751854076s ago: executing program 3 (id=603): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) 8.039502134s ago: executing program 1 (id=604): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9}}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3}, 0x10}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = dup2(r3, r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000300)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.036573494s ago: executing program 4 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = eventfd2(0xffffffff, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) read$eventfd(r3, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) lseek(r4, 0x8e, 0x0) move_mount(0xffffffffffffff9c, 0x0, r2, 0x0, 0x4) 7.988399578s ago: executing program 4 (id=608): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) unshare(0x22020400) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0xef) 6.219001171s ago: executing program 1 (id=609): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b9, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sysinfo(&(0x7f00000003c0)=""/67) 6.217584181s ago: executing program 4 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) 6.186255655s ago: executing program 2 (id=612): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 4.206715956s ago: executing program 1 (id=613): mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b4d, &(0x7f00000000c0)) 4.206223176s ago: executing program 2 (id=614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000080000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup2(r1, r1) r3 = eventfd(0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, &(0x7f0000001f40)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) sync() 4.205762266s ago: executing program 4 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x48041}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x4050) 2.18639208s ago: executing program 1 (id=616): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) alarm(0x2) 2.185887281s ago: executing program 2 (id=617): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x0, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@multicast1, 0x8000}, {@empty}, {@multicast1}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@multicast2}, {@private=0xa010101}, {}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.185406451s ago: executing program 4 (id=618): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000300), 0xe, 0x4f8, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="85000000610000005400000000000000950000000000000015c5d2d381407590995e979c8ab80e29de2978c8f52cc29c2bff0766e0614b449dba3c3e908576de010eb930ccc2"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = open(&(0x7f0000000140)='./bus\x00', 0x14937e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r4, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) io_submit(0x0, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 85.675092ms ago: executing program 1 (id=619): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0xd19, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r0, 0x2) 84.737242ms ago: executing program 2 (id=620): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x7, &(0x7f0000000000)="fa794bfa", 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) symlink(&(0x7f0000000200)='./file0\x00', 0x0) readlink(0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0) 84.237582ms ago: executing program 4 (id=621): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDADDIO(r0, 0x4bfb, 0x300000000000000) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, "00207d20000000f0201b14700c1e0ac74f000000001200000000000900"}) 68.713944ms ago: executing program 1 (id=622): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x87, &(0x7f0000000180), 0x0, 0x594, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d00)={0x54, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x54}}, 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 23.030508ms ago: executing program 2 (id=623): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) utime(&(0x7f0000000180)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 0s ago: executing program 2 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x3}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): on_device_t tclass=chr_file permissive=1 [ 52.336112][ T818] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 52.353117][ T28] audit: type=1400 audit(1724270940.486:248): avc: denied { append } for pid=823 comm="syz.3.143" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.364935][ T60] usb 2-1: USB disconnect, device number 6 [ 52.395929][ T818] EXT4-fs (loop4): 1 truncate cleaned up [ 52.410836][ T818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.460549][ T28] audit: type=1400 audit(1724270941.366:249): avc: denied { getopt } for pid=816 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.519870][ T291] EXT4-fs (loop4): unmounting filesystem. [ 52.619570][ T28] audit: type=1400 audit(1724270941.526:250): avc: denied { read } for pid=834 comm="syz.1.146" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.658024][ T836] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.675027][ T836] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.685124][ T28] audit: type=1400 audit(1724270941.546:251): avc: denied { open } for pid=834 comm="syz.1.146" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.726254][ T836] device bridge_slave_0 entered promiscuous mode [ 52.775738][ T836] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.784121][ T847] x_tables: unsorted underflow at hook 3 [ 52.801666][ T836] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.820487][ T28] audit: type=1400 audit(1724270941.546:252): avc: denied { ioctl } for pid=834 comm="syz.1.146" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.847261][ T836] device bridge_slave_1 entered promiscuous mode [ 52.972580][ T439] device bridge_slave_1 left promiscuous mode [ 52.979922][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.014165][ T439] device bridge_slave_0 left promiscuous mode [ 53.039265][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.069948][ T439] device veth1_macvtap left promiscuous mode [ 53.085475][ T439] device veth0_vlan left promiscuous mode [ 53.272705][ T836] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.279570][ T836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.286662][ T836] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.293442][ T836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.363530][ T851] loop3: detected capacity change from 0 to 1024 [ 53.389255][ T851] EXT4-fs: Ignoring removed orlov option [ 53.394721][ T851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.405739][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.412963][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.456075][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.463964][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.493144][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.504607][ T851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.533305][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.540165][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.549289][ T28] audit: type=1400 audit(1724270942.456:253): avc: denied { nlmsg_write } for pid=852 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 53.590050][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.610335][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.617197][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.654839][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.667855][ T634] EXT4-fs (loop3): unmounting filesystem. [ 53.682033][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.710615][ T836] device veth0_vlan entered promiscuous mode [ 53.717561][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.729195][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.738763][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.746799][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.764100][ T836] device veth1_macvtap entered promiscuous mode [ 53.771371][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.780753][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.788134][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.796697][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.804649][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.832277][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.840767][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.850006][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.858247][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.929270][ T28] audit: type=1400 audit(1724270942.836:254): avc: denied { write } for pid=875 comm="syz.4.155" path="socket:[20089]" dev="sockfs" ino=20089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.235771][ T315] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 54.286394][ T28] audit: type=1400 audit(1724270943.196:255): avc: denied { name_bind } for pid=885 comm="syz.1.159" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 54.464058][ T891] loop1: detected capacity change from 0 to 2048 [ 54.655856][ T315] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.675860][ T315] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.696046][ T891] loop1: p1 < > p4 [ 54.700441][ T891] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.775798][ T315] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 54.784937][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.793053][ T315] usb 5-1: SerialNumber: syz [ 54.867579][ T859] loop0: detected capacity change from 0 to 131072 [ 54.882493][ T859] F2FS-fs (loop0): invalid crc value [ 54.907145][ T859] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 54.952424][ T859] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 54.983182][ T859] syz.0.151 (pid 859) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 54.994879][ T859] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 55.076494][ T315] usb 5-1: 0:2 : does not exist [ 55.081640][ T315] usb 5-1: unit 255 not found! [ 55.250599][ T911] loop1: detected capacity change from 0 to 1024 [ 55.265994][ T911] EXT4-fs: Ignoring removed oldalloc option [ 55.276969][ T911] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.288178][ T315] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 55.298762][ T315] usb 5-1: USB disconnect, device number 6 [ 55.321629][ T392] udevd[392]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.349523][ T911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.363163][ T918] loop0: detected capacity change from 0 to 128 [ 55.416546][ T918] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 55.440268][ T918] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 55.600294][ T911] syz.1.166 (911) used greatest stack depth: 19752 bytes left [ 55.609992][ T700] EXT4-fs (loop1): unmounting filesystem. [ 55.894860][ T939] loop4: detected capacity change from 0 to 128 [ 55.906099][ T60] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 56.085769][ T315] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 56.286167][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 56.345713][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 56.405792][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 56.415317][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 56.433489][ T942] loop3: detected capacity change from 0 to 512 [ 56.440062][ T942] ext4: Bad value for 'debug_want_extra_isize' [ 56.465830][ T315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.480097][ T315] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 56.497747][ T315] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 56.506723][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.517850][ T315] usb 2-1: config 0 descriptor?? [ 56.615802][ T60] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 56.625112][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.634534][ T60] usb 1-1: Product: syz [ 56.638656][ T60] usb 1-1: Manufacturer: syz [ 56.643051][ T60] usb 1-1: SerialNumber: syz [ 56.648231][ T60] usb 1-1: config 0 descriptor?? [ 57.707321][ T968] loop4: detected capacity change from 0 to 16 [ 57.715855][ T968] erofs: (device loop4): mounted with root inode @ nid 36. [ 57.723393][ T968] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 57.732773][ T968] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 57.742144][ T968] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 57.943914][ T975] netlink: 'syz.2.191': attribute type 9 has an invalid length. [ 57.951448][ T975] netlink: 'syz.2.191': attribute type 6 has an invalid length. [ 58.056953][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 58.056974][ T28] audit: type=1400 audit(1724270946.966:269): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.145732][ T28] audit: type=1400 audit(1724270946.996:270): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.167745][ T28] audit: type=1400 audit(1724270946.996:271): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.364168][ T60] usb 1-1: USB disconnect, device number 7 [ 58.373897][ T741] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 58.392171][ T741] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 58.415409][ T741] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 58.442767][ T741] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 58.466066][ T741] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 58.480288][ T741] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 58.493354][ T741] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 58.507467][ T741] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 58.521524][ T741] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 58.534532][ T741] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 58.638951][ T741] EXT4-fs (loop0): unmounting filesystem. [ 59.027458][ T28] audit: type=1400 audit(1724270947.936:272): avc: denied { remove_name } for pid=984 comm="syz.3.185" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.061824][ T28] audit: type=1400 audit(1724270947.936:273): avc: denied { unlink } for pid=984 comm="syz.3.185" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.228112][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.235088][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.242502][ T992] device bridge_slave_0 entered promiscuous mode [ 59.249506][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.256483][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.263812][ T992] device bridge_slave_1 entered promiscuous mode [ 59.340079][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.346971][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.354052][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.360848][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.385905][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.393559][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.401432][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.417530][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.425637][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.432506][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.439884][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.448161][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.455010][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.462771][ T8] device bridge_slave_1 left promiscuous mode [ 59.468922][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.480299][ T8] device bridge_slave_0 left promiscuous mode [ 59.490962][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.503188][ T8] device veth1_macvtap left promiscuous mode [ 59.514268][ T8] device veth0_vlan left promiscuous mode [ 59.524830][ T28] audit: type=1400 audit(1724270948.426:274): avc: denied { write } for pid=999 comm="syz.4.189" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.686423][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.694642][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.702525][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.712395][ T992] device veth0_vlan entered promiscuous mode [ 59.719390][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.727757][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.735552][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.742839][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.757125][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.775898][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.785014][ T992] device veth1_macvtap entered promiscuous mode [ 59.798950][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.806743][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.816143][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.825717][ T315] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 59.834885][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.843092][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.846928][ T19] usb 2-1: USB disconnect, device number 7 [ 60.375796][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.386555][ T315] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.395421][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.403914][ T315] usb 5-1: config 0 descriptor?? [ 60.499621][ T1018] device syzkaller0 entered promiscuous mode [ 60.886109][ T315] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 60.896640][ T315] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input7 [ 60.918539][ T1030] loop2: detected capacity change from 0 to 512 [ 60.928389][ T1030] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.198: casefold flag without casefold feature [ 60.941073][ T1030] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.198: missing EA_INODE flag [ 60.952865][ T1030] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.198: error while reading EA inode 12 err=-117 [ 60.964996][ T1030] EXT4-fs (loop2): 1 orphan inode deleted [ 60.970541][ T1030] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.981695][ T28] audit: type=1400 audit(1724270949.886:275): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=444 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.006450][ T315] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 61.027035][ T28] audit: type=1400 audit(1724270949.886:276): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=444 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.055942][ T28] audit: type=1400 audit(1724270949.886:277): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=444 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.080399][ T28] audit: type=1400 audit(1724270949.886:278): avc: denied { setattr } for pid=1029 comm="syz.2.198" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.138210][ T836] EXT4-fs (loop2): unmounting filesystem. [ 61.254953][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 61.867903][ T1053] overlayfs: statfs failed on './file0' [ 61.961032][ T60] usb 5-1: USB disconnect, device number 7 [ 62.386906][ T1060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 62.420986][ T1062] loop3: detected capacity change from 0 to 512 [ 62.427778][ T1062] EXT4-fs (loop3): Test dummy encryption mode enabled [ 62.464054][ T1062] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.208: invalid block [ 62.474919][ T1062] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.208: couldn't read orphan inode 11 (err -117) [ 62.486791][ T1062] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 62.503156][ T634] EXT4-fs (loop3): unmounting filesystem. [ 62.520235][ T1068] loop3: detected capacity change from 0 to 512 [ 62.532490][ T1068] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 62.541084][ T1068] EXT4-fs (loop3): invalid journal inode [ 62.547222][ T1068] EXT4-fs (loop3): can't get journal size [ 62.553854][ T1068] EXT4-fs (loop3): 1 truncate cleaned up [ 62.559632][ T1068] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 62.579952][ T634] EXT4-fs (loop3): unmounting filesystem. [ 62.826501][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 62.887569][ T1086] overlayfs: statfs failed on './file0' [ 63.011400][ T1087] xt_hashlimit: max too large, truncated to 1048576 [ 64.400946][ T1107] loop4: detected capacity change from 0 to 256 [ 64.419467][ T1107] FAT-fs (loop4): bogus logical sector size 0 [ 64.430103][ T1107] FAT-fs (loop4): Can't find a valid FAT filesystem [ 64.486255][ T1110] device syzkaller0 entered promiscuous mode [ 64.584413][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 64.584428][ T28] audit: type=1400 audit(1724270953.486:293): avc: denied { read } for pid=1112 comm="syz.3.225" dev="nsfs" ino=4026532621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.611529][ T1111] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.222'. [ 64.675899][ T28] audit: type=1400 audit(1724270953.486:294): avc: denied { open } for pid=1112 comm="syz.3.225" path="net:[4026532621]" dev="nsfs" ino=4026532621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.699312][ T28] audit: type=1400 audit(1724270953.526:295): avc: denied { listen } for pid=1112 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.720542][ T1122] loop3: detected capacity change from 0 to 512 [ 64.736827][ T1122] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.758461][ T1122] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.228: corrupted inode contents [ 64.776946][ T1122] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz.3.228: mark_inode_dirty error [ 64.813248][ T1122] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.228: corrupted inode contents [ 64.829188][ T1122] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.228: mark_inode_dirty error [ 64.840736][ T1122] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.228: corrupted inode contents [ 64.853316][ T1122] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 64.861965][ T1122] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.228: corrupted inode contents [ 64.884431][ T1122] EXT4-fs error (device loop3): ext4_truncate:4302: inode #16: comm syz.3.228: mark_inode_dirty error [ 64.895871][ T1122] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 64.915063][ T1122] EXT4-fs (loop3): 1 truncate cleaned up [ 64.924737][ T1122] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 64.934044][ T10] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.943694][ T1122] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038 (0x7fffffff) [ 64.948989][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6787: comm kworker/u4:1: Failed to release dquot type 1 [ 64.985023][ T28] audit: type=1400 audit(1724270953.886:296): avc: denied { map } for pid=1121 comm="syz.3.228" path="/38/file1/bus" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.172254][ T1132] syz.2.230 uses obsolete (PF_INET,SOCK_PACKET) [ 65.288969][ T28] audit: type=1400 audit(1724270954.196:297): avc: denied { unmount } for pid=634 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 65.312593][ T634] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 65.334097][ T634] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #18: comm syz-executor: corrupted xattr block 14 [ 65.347032][ T634] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -74) [ 65.356554][ T634] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 65.372736][ T634] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 65.385239][ T634] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 65.394347][ T634] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 65.406752][ T634] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 65.415858][ T634] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 65.428918][ T634] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 65.437952][ T28] audit: type=1400 audit(1724270954.346:298): avc: denied { unlink } for pid=634 comm="syz-executor" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.460392][ T634] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 65.470737][ T634] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 65.481368][ T634] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz-executor: Failed to acquire dquot type 1 [ 65.585251][ T634] EXT4-fs (loop3): unmounting filesystem. [ 65.980494][ T1142] loop4: detected capacity change from 0 to 1024 [ 66.001300][ T1142] EXT4-fs: Ignoring removed orlov option [ 66.007036][ T1142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.031360][ T1142] EXT4-fs (loop4): Test dummy encryption mode enabled [ 66.048137][ T1142] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.126499][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.133351][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.141446][ T1140] device bridge_slave_0 entered promiscuous mode [ 66.157239][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.164073][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.171731][ T1140] device bridge_slave_1 entered promiscuous mode [ 66.196717][ T43] device bridge_slave_1 left promiscuous mode [ 66.202663][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.211976][ T291] EXT4-fs (loop4): unmounting filesystem. [ 66.215710][ T315] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 66.225113][ T43] device bridge_slave_0 left promiscuous mode [ 66.241203][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.253153][ T43] device veth1_macvtap left promiscuous mode [ 66.259391][ T43] device veth0_vlan left promiscuous mode [ 66.322094][ T1153] loop0: detected capacity change from 0 to 512 [ 66.328956][ T1153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.337368][ T1153] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.347869][ T1153] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.354592][ T1153] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3845: comm syz.0.237: Allocating blocks 41-42 which overlap fs metadata [ 66.368600][ T1153] Quota error (device loop0): write_blk: dquota write failed [ 66.375837][ T1153] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.237: Failed to acquire dquot type 0 [ 66.387198][ T1153] EXT4-fs (loop0): 1 truncate cleaned up [ 66.392883][ T1153] EXT4-fs (loop0): pa ffff8881005ff930: logic 1, phys. 41, len 23 [ 66.400994][ T1153] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 66.411043][ T1153] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 66.445295][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.452189][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.459331][ T1146] device bridge_slave_0 entered promiscuous mode [ 66.465830][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 66.475508][ T1161] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.237: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 66.493886][ T1161] EXT4-fs error (device loop0): __ext4_remount:6412: comm syz.0.237: Abort forced by user [ 66.504701][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.512566][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.520705][ T1146] device bridge_slave_1 entered promiscuous mode [ 66.595748][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.610602][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.612100][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.620498][ T315] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 66.627020][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.636071][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.642952][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.653917][ T315] usb 3-1: config 0 descriptor?? [ 66.657580][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.670632][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.678067][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.716333][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.723525][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.731326][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.739492][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.747465][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.754280][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.761478][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.769558][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.777534][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.784356][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.807377][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.825356][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.836434][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.856009][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.873881][ T1140] device veth0_vlan entered promiscuous mode [ 66.886721][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.895250][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.904591][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.913233][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.931011][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.938282][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.945394][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.953274][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.963577][ T1140] device veth1_macvtap entered promiscuous mode [ 66.973815][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.981604][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.003425][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.024086][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.032273][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.041406][ T992] EXT4-fs (loop0): unmounting filesystem. [ 67.041871][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.055291][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.063472][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.071668][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.081087][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.087950][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.109293][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.118206][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.136005][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.143995][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.150838][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.176299][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.198509][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.206542][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.214454][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.234810][ T1146] device veth0_vlan entered promiscuous mode [ 67.505408][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.526129][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.533313][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.541515][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.549909][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.562096][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.571596][ T1146] device veth1_macvtap entered promiscuous mode [ 67.595381][ T1139] loop2: detected capacity change from 0 to 40427 [ 67.601930][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.611831][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.629204][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.637754][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.646423][ T1139] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.711756][ T1139] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 67.755896][ T1139] syz.2.234: attempt to access beyond end of device [ 67.755896][ T1139] loop2: rw=2049, sector=53248, nr_sectors = 4680 limit=40427 [ 67.825533][ T1139] syz.2.234: attempt to access beyond end of device [ 67.825533][ T1139] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 67.840100][ T315] greenasia 0003:0E8F:0012.0006: item fetching failed at offset 0/3 [ 67.849648][ T43] device bridge_slave_1 left promiscuous mode [ 67.855864][ T315] greenasia 0003:0E8F:0012.0006: parse failed [ 67.861752][ T315] greenasia: probe of 0003:0E8F:0012.0006 failed with error -22 [ 67.863124][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.886310][ T43] device bridge_slave_0 left promiscuous mode [ 67.898426][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.910600][ T43] device veth1_macvtap left promiscuous mode [ 67.919625][ T43] device veth0_vlan left promiscuous mode [ 68.059250][ T19] usb 3-1: USB disconnect, device number 10 [ 68.416112][ T1207] loop1: detected capacity change from 0 to 256 [ 69.658753][ T1230] loop2: detected capacity change from 0 to 512 [ 69.726960][ T1230] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters [ 69.741294][ T1230] EXT4-fs (loop2): Remounting filesystem read-only [ 69.747875][ T1230] EXT4-fs (loop2): 1 orphan inode deleted [ 69.753493][ T1230] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 69.762479][ T1230] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 69.773390][ T1233] tipc: MTU too low for tipc bearer [ 69.778743][ T321] __quota_error: 8 callbacks suppressed [ 69.778754][ T321] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 69.806824][ T321] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:3: Failed to release dquot type 1 [ 69.818690][ T321] EXT4-fs (loop2): Remounting filesystem read-only [ 69.825329][ T1230] EXT4-fs error (device loop2): __ext4_remount:6412: comm syz.2.255: Abort forced by user [ 69.840368][ T836] EXT4-fs (loop2): unmounting filesystem. [ 69.855763][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 70.226051][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.301627][ T28] audit: type=1400 audit(1724270959.206:306): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.337963][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.425781][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 70.434744][ T24] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 70.442724][ T24] usb 1-1: Product: syz [ 70.464265][ T24] usb 1-1: config 0 descriptor?? [ 70.931747][ T1258] loop3: detected capacity change from 0 to 256 [ 71.031454][ T24] konepure 0003:1E7D:2DB4.0007: item fetching failed at offset 10/11 [ 71.054472][ T24] konepure 0003:1E7D:2DB4.0007: parse failed [ 71.082090][ T24] konepure: probe of 0003:1E7D:2DB4.0007 failed with error -22 [ 71.228307][ T315] usb 1-1: USB disconnect, device number 8 [ 71.595884][ T1273] xt_l2tp: unknown flags: 3b [ 73.666550][ T1296] syz.2.282 (1296) used greatest stack depth: 19000 bytes left [ 74.786878][ T1326] loop4: detected capacity change from 0 to 256 [ 75.801751][ T1345] loop2: detected capacity change from 0 to 256 [ 75.808160][ T1345] exfat: Bad value for 'uid' [ 76.061283][ T1351] loop2: detected capacity change from 0 to 1024 [ 76.164260][ T1351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.672495][ T836] EXT4-fs (loop2): unmounting filesystem. [ 76.765850][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.125767][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 77.136702][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.146516][ T24] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 77.155489][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.166894][ T24] usb 4-1: config 0 descriptor?? [ 77.207720][ T24] usb 4-1: MIDIStreaming interface descriptor not found [ 77.323766][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 77.410260][ T814] usb 4-1: USB disconnect, device number 3 [ 77.702569][ T28] audit: type=1400 audit(1724270966.606:307): avc: denied { read } for pid=1380 comm="syz.2.296" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.726886][ T28] audit: type=1400 audit(1724270966.606:308): avc: denied { open } for pid=1380 comm="syz.2.296" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.785628][ T1388] binder: 1387:1388 ioctl c0306201 0 returned -14 [ 77.793916][ T1388] input: syz0 as /devices/virtual/input/input8 [ 77.907845][ T1393] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.926920][ T1393] kvm: pic: non byte read [ 77.931287][ T1393] kvm: pic: level sensitive irq not supported [ 77.931331][ T1393] kvm: pic: non byte read [ 78.711977][ T1413] loop2: detected capacity change from 0 to 512 [ 78.721751][ T1413] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.307: invalid indirect mapped block 2185560079 (level 0) [ 78.736413][ T1413] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.307: invalid indirect mapped block 2683928664 (level 1) [ 78.750769][ T1413] EXT4-fs (loop2): 1 truncate cleaned up [ 78.756527][ T1413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.783087][ T836] EXT4-fs (loop2): unmounting filesystem. [ 78.795795][ T312] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 78.839776][ T1422] fuse: Bad value for 'fd' [ 79.020100][ T28] audit: type=1400 audit(1724270967.926:309): avc: denied { watch } for pid=1430 comm="syz.2.312" path="/35/control" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.078036][ T1435] loop2: detected capacity change from 0 to 1024 [ 79.106038][ T1435] ext2: Bad value for 'debug_want_extra_isize' [ 79.158867][ T1435] process 'syz.2.313' launched './file0/file0' with NULL argv: empty string added [ 79.187500][ T1438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.314'. [ 79.197280][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.211415][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.226722][ T312] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 79.241111][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.251969][ T312] usb 1-1: config 0 descriptor?? [ 79.655712][ T19] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 79.726443][ T312] petalynx 0003:18B1:0037.0008: collection stack underflow [ 79.733708][ T312] petalynx 0003:18B1:0037.0008: item 0 1 0 12 parsing failed [ 79.743065][ T312] petalynx 0003:18B1:0037.0008: parse failed [ 79.749595][ T312] petalynx: probe of 0003:18B1:0037.0008 failed with error -22 [ 79.905695][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 79.927705][ T24] usb 1-1: USB disconnect, device number 9 [ 80.025721][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.041908][ T19] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 80.055977][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.071345][ T19] usb 2-1: config 0 descriptor?? [ 80.116100][ T19] usb 2-1: bad CDC descriptors [ 80.378868][ T19] usb 2-1: USB disconnect, device number 8 [ 80.683082][ T28] audit: type=1400 audit(1724270969.586:310): avc: denied { bind } for pid=1466 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.715726][ T28] audit: type=1400 audit(1724270969.616:311): avc: denied { write } for pid=1466 comm="syz.0.322" path="socket:[23935]" dev="sockfs" ino=23935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.019847][ T1477] loop1: detected capacity change from 0 to 512 [ 81.066626][ T1477] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.336: bg 0: block 393: padding at end of block bitmap is not set [ 81.093665][ T1477] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 81.102684][ T1477] EXT4-fs (loop1): 2 truncates cleaned up [ 81.108587][ T1477] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.466922][ T19] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 81.556871][ T1485] kvm: vcpu 0: requested 504 ns lapic timer period limited to 200000 ns [ 81.569884][ T1485] kvm: pic: non byte write [ 81.575056][ T1140] EXT4-fs (loop1): unmounting filesystem. [ 81.719566][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 82.822877][ T1502] loop0: detected capacity change from 0 to 1024 [ 82.849197][ T1502] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 82.858213][ T1502] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.864516][ T1502] EXT4-fs error (device loop0): ext4_free_blocks:6211: comm syz.0.332: Freeing blocks not in datazone - block = 0, count = 4096 [ 82.878173][ T1502] EXT4-fs (loop0): 1 orphan inode deleted [ 82.895191][ T1502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.986875][ T992] EXT4-fs (loop0): unmounting filesystem. [ 82.999605][ T1511] loop1: detected capacity change from 0 to 2048 [ 83.009963][ T1511] EXT4-fs: Ignoring removed bh option [ 83.024453][ T1511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.035320][ T1511] EXT4-fs: Ignoring removed nobh option [ 83.048243][ T1511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.425810][ T19] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 83.434655][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.442690][ T19] usb 5-1: Product: syz [ 83.447064][ T19] usb 5-1: Manufacturer: syz [ 83.451512][ T19] usb 5-1: SerialNumber: syz [ 83.459927][ T19] usb 5-1: config 0 descriptor?? [ 83.496229][ T19] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 83.503699][ T19] usb 5-1: Detected FT232H [ 83.543569][ T1523] syz.2.340[1523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.543661][ T1523] syz.2.340[1523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.066325][ T1530] loop3: detected capacity change from 0 to 512 [ 84.124215][ T1530] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.341: bg 0: block 393: padding at end of block bitmap is not set [ 84.138499][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 84.145352][ T1140] EXT4-fs (loop1): unmounting filesystem. [ 84.145989][ T1530] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 84.159796][ T1530] EXT4-fs (loop3): 2 truncates cleaned up [ 84.165374][ T1530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.165801][ T19] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 84.437480][ T19] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 84.447315][ T19] usb 5-1: USB disconnect, device number 8 [ 84.469042][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.481133][ T19] ftdi_sio 5-1:0.0: device disconnected [ 84.722860][ T1146] EXT4-fs (loop3): unmounting filesystem. [ 84.735716][ T451] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 84.873619][ T1547] loop4: detected capacity change from 0 to 40427 [ 84.900196][ T1547] F2FS-fs (loop4): Found nat_bits in checkpoint [ 84.934813][ T28] audit: type=1400 audit(1724270973.836:312): avc: denied { create } for pid=1555 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.949890][ T1547] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 84.956644][ T28] audit: type=1400 audit(1724270973.836:313): avc: denied { write } for pid=1555 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.975917][ T291] syz-executor: attempt to access beyond end of device [ 84.975917][ T291] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 84.983818][ T28] audit: type=1400 audit(1724270973.876:314): avc: denied { unlink } for pid=1546 comm="syz.4.346" name="#10" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.995544][ T291] syz-executor: attempt to access beyond end of device [ 84.995544][ T291] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 85.047148][ T28] audit: type=1400 audit(1724270973.956:315): avc: denied { setopt } for pid=1560 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.048265][ T43] kworker/u4:2: attempt to access beyond end of device [ 85.048265][ T43] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 85.081272][ T1539] syz.1.343[1539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.081344][ T1539] syz.1.343[1539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.083748][ T28] audit: type=1400 audit(1724270973.986:316): avc: denied { read } for pid=1560 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.142313][ T1539] netlink: 52 bytes leftover after parsing attributes in process `syz.1.343'. [ 85.225739][ T451] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.286016][ T451] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 85.293401][ T451] usb 2-1: can't read configurations, error -71 [ 85.368604][ T1569] Driver unsupported XDP return value 0 on prog (id 232) dev N/A, expect packet loss! [ 85.462389][ T28] audit: type=1400 audit(1724270974.366:317): avc: denied { mounton } for pid=1573 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 85.491609][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.525811][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.745140][ T1578] block device autoloading is deprecated and will be removed. [ 85.855282][ T1573] device bridge_slave_0 entered promiscuous mode [ 85.939818][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.946786][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.953837][ T1573] device bridge_slave_1 entered promiscuous mode [ 85.994323][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.001176][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.008264][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.015047][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.033235][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.040634][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.048278][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.058340][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.066317][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.073138][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.081249][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.089194][ T814] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.096039][ T814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.108888][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.124521][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.132711][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.140463][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.148168][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.155313][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.164187][ T1573] device veth0_vlan entered promiscuous mode [ 86.177513][ T1573] device veth1_macvtap entered promiscuous mode [ 86.213989][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.226574][ T1582] loop0: detected capacity change from 0 to 512 [ 86.256360][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.276812][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.289213][ T439] device bridge_slave_1 left promiscuous mode [ 86.295381][ T1582] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.356: bg 0: block 393: padding at end of block bitmap is not set [ 86.313638][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.326193][ T439] device bridge_slave_0 left promiscuous mode [ 86.332272][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.339427][ T1582] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 86.356699][ T439] device veth1_macvtap left promiscuous mode [ 86.362652][ T1582] EXT4-fs (loop0): 2 truncates cleaned up [ 86.370843][ T439] device veth0_vlan left promiscuous mode [ 86.385838][ T1582] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.586855][ T1585] loop4: detected capacity change from 0 to 40427 [ 86.596216][ T1585] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 86.603875][ T1585] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 86.614887][ T992] EXT4-fs (loop0): unmounting filesystem. [ 86.615612][ T1585] F2FS-fs (loop4): invalid crc value [ 86.653509][ T1585] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.693967][ T1585] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 86.701245][ T1585] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.102353][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.855828][ T1617] loop4: detected capacity change from 0 to 2048 [ 87.887541][ T1617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.929234][ T1621] loop3: detected capacity change from 0 to 512 [ 87.935495][ T1621] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.942062][ T1621] EXT4-fs: Ignoring removed i_version option [ 87.952494][ T1621] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.363: invalid block [ 87.991597][ T1621] EXT4-fs (loop3): Remounting filesystem read-only [ 88.006170][ T1621] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.363: couldn't read orphan inode 11 (err -117) [ 88.024552][ T1625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1625 comm=syz.1.362 [ 88.077373][ T1621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.185941][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 88.585748][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.596537][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.609614][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.618884][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.627448][ T24] usb 5-1: config 0 descriptor?? [ 88.803523][ T1146] EXT4-fs (loop3): unmounting filesystem. [ 89.106580][ T24] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 89.113976][ T24] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 89.134688][ T24] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 89.406028][ T313] usb 5-1: USB disconnect, device number 9 [ 89.921015][ T1573] EXT4-fs (loop4): unmounting filesystem. [ 89.957264][ T1641] loop4: detected capacity change from 0 to 512 [ 89.966788][ T1641] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.369: bg 0: block 393: padding at end of block bitmap is not set [ 89.981243][ T1641] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 89.989996][ T1641] EXT4-fs (loop4): 2 truncates cleaned up [ 89.995566][ T1641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 90.012087][ T28] audit: type=1400 audit(1724270978.916:318): avc: denied { write } for pid=1644 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.098540][ T28] audit: type=1400 audit(1724270979.006:319): avc: denied { write } for pid=1642 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.264338][ T1659] loop3: detected capacity change from 0 to 512 [ 90.286004][ T1573] EXT4-fs (loop4): unmounting filesystem. [ 90.298187][ T1659] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters [ 90.319785][ T1659] EXT4-fs (loop3): Remounting filesystem read-only [ 90.326678][ T1659] EXT4-fs (loop3): 1 orphan inode deleted [ 90.332291][ T1659] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.341164][ T1659] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 90.354152][ T1659] EXT4-fs error (device loop3): __ext4_remount:6412: comm syz.3.373: Abort forced by user [ 90.355803][ T439] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.364799][ T1659] EXT4-fs (loop3): Remounting filesystem read-only [ 90.373528][ T439] EXT4-fs error (device loop3): ext4_release_dquot:6787: comm kworker/u4:4: Failed to release dquot type 1 [ 90.373694][ T439] EXT4-fs (loop3): Remounting filesystem read-only [ 90.406077][ T1146] EXT4-fs (loop3): unmounting filesystem. [ 90.417865][ T1666] loop0: detected capacity change from 0 to 512 [ 90.432192][ T1666] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.386: bg 0: block 393: padding at end of block bitmap is not set [ 90.446676][ T1666] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 90.476040][ T1666] EXT4-fs (loop0): 2 truncates cleaned up [ 90.481727][ T1666] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 90.917401][ T992] EXT4-fs (loop0): unmounting filesystem. [ 91.085237][ T28] audit: type=1400 audit(1724270979.986:320): avc: denied { map } for pid=1675 comm="syz.2.377" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.109207][ T28] audit: type=1400 audit(1724270979.986:321): avc: denied { write } for pid=1675 comm="syz.2.377" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.462007][ T1693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 91.735706][ T315] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.936271][ T1699] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.943098][ T1699] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.965315][ T1704] loop0: detected capacity change from 0 to 256 [ 91.971720][ T1699] device bridge_slave_0 entered promiscuous mode [ 91.979656][ T1706] loop1: detected capacity change from 0 to 512 [ 91.985767][ T315] usb 4-1: Using ep0 maxpacket: 16 [ 91.998293][ T1699] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.005115][ T1699] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.008110][ T1706] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.018865][ T1706] EXT4-fs: Ignoring removed i_version option [ 92.019385][ T1699] device bridge_slave_1 entered promiscuous mode [ 92.032876][ T1706] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.385: invalid block [ 92.044659][ T1706] EXT4-fs (loop1): Remounting filesystem read-only [ 92.045277][ T392] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.051326][ T1706] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.385: couldn't read orphan inode 11 (err -117) [ 92.072016][ T1706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.147540][ T8] device bridge_slave_1 left promiscuous mode [ 92.154023][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.175805][ T8] device bridge_slave_0 left promiscuous mode [ 92.181790][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.189797][ T8] device veth1_macvtap left promiscuous mode [ 92.195636][ T8] device veth0_vlan left promiscuous mode [ 92.525780][ T315] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 92.534619][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.543010][ T315] usb 4-1: Product: syz [ 92.547493][ T19] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 92.555437][ T315] usb 4-1: Manufacturer: syz [ 92.561279][ T315] usb 4-1: SerialNumber: syz [ 92.573730][ T315] usb 4-1: config 0 descriptor?? [ 92.577600][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.586363][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.603695][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.612087][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.621240][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.626318][ T315] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 92.628119][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.635610][ T315] usb 4-1: Detected FT232H [ 92.643859][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.654974][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.663040][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.669907][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.687337][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.694799][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.702689][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.710370][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.718228][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.732250][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.740525][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.750792][ T1699] device veth0_vlan entered promiscuous mode [ 92.757055][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.764649][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.777004][ T1699] device veth1_macvtap entered promiscuous mode [ 92.783505][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.790920][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.798155][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.816352][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.824656][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.843623][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.851938][ T1140] EXT4-fs (loop1): unmounting filesystem. [ 92.852010][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.869909][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.878417][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.905768][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.917556][ T1715] loop2: detected capacity change from 0 to 512 [ 92.924235][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.934421][ T1715] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.940837][ T19] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.950431][ T1715] EXT4-fs: Ignoring removed i_version option [ 92.956288][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.963963][ T1715] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.399: invalid block [ 92.966980][ T19] usb 1-1: config 0 descriptor?? [ 92.975108][ T1715] EXT4-fs (loop2): Remounting filesystem read-only [ 92.985815][ T1715] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.399: couldn't read orphan inode 11 (err -117) [ 92.997634][ T1715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.066479][ T1722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.288246][ T315] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 93.315778][ T315] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 93.323069][ T315] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 93.332352][ T315] usb 4-1: USB disconnect, device number 4 [ 93.338907][ T315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 93.348421][ T315] ftdi_sio 4-1:0.0: device disconnected [ 93.778883][ T836] EXT4-fs (loop2): unmounting filesystem. [ 93.995932][ T28] audit: type=1400 audit(1724270982.896:322): avc: denied { write } for pid=1732 comm="syz.3.391" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.285713][ T315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.442495][ T1742] loop1: detected capacity change from 0 to 2048 [ 94.462919][ T1742] journal_path: Lookup failure for './bus' [ 94.468698][ T1742] EXT4-fs: error: could not find journal device path [ 94.485759][ T19] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 94.494326][ T19] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 94.501790][ T19] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 94.510722][ T19] usb 1-1: USB disconnect, device number 10 [ 94.675796][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.713856][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.732848][ T315] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 94.742094][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.429489][ T315] usb 4-1: config 0 descriptor?? [ 95.835750][ T315] usbhid 4-1:0.0: can't add hid device: -71 [ 95.841523][ T315] usbhid: probe of 4-1:0.0 failed with error -71 [ 95.856305][ T315] usb 4-1: USB disconnect, device number 5 [ 96.005709][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 96.167094][ T1760] loop1: detected capacity change from 0 to 131072 [ 96.178257][ T1760] F2FS-fs (loop1): invalid crc value [ 96.187493][ T1760] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 96.232912][ T1760] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 96.345395][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.515872][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.575801][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.596449][ T24] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 96.608468][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.623588][ T1780] loop4: detected capacity change from 0 to 512 [ 96.633029][ T24] usb 3-1: config 0 descriptor?? [ 96.635942][ T1780] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.644068][ T1780] EXT4-fs: Ignoring removed i_version option [ 96.671619][ T1780] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.405: invalid block [ 96.684789][ T1780] EXT4-fs (loop4): Remounting filesystem read-only [ 96.691524][ T1780] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.405: couldn't read orphan inode 11 (err -117) [ 96.703696][ T1780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.795779][ T451] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 97.136919][ T24] hid-multitouch 0003:1FD2:6007.000B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 97.155743][ T451] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 97.166648][ T451] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.335844][ T451] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.339688][ T822] usb 3-1: USB disconnect, device number 11 [ 97.344794][ T451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.358358][ T451] usb 1-1: Product: syz [ 97.362304][ T451] usb 1-1: Manufacturer: syz [ 97.366759][ T451] usb 1-1: SerialNumber: syz [ 97.385781][ T1772] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.478290][ T1699] EXT4-fs (loop4): unmounting filesystem. [ 97.489680][ T1788] loop3: detected capacity change from 0 to 256 [ 97.527094][ T342] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.659167][ T1794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 97.673390][ T1772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.684048][ T1772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.745765][ T451] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 97.753831][ T451] usb 1-1: USB disconnect, device number 11 [ 97.825711][ T315] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.226940][ T1799] loop2: detected capacity change from 0 to 2048 [ 98.236370][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.251324][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.261142][ T315] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.270299][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.276019][ T1799] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.281089][ T315] usb 4-1: config 0 descriptor?? [ 99.400147][ T836] EXT4-fs (loop2): unmounting filesystem. [ 99.463950][ T1817] loop2: detected capacity change from 0 to 256 [ 99.497147][ T1817] exfat: Bad value for 'uid' [ 99.557828][ T1817] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 100.515724][ T315] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71 [ 100.524390][ T315] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 100.545426][ T315] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 100.585234][ T315] usb 4-1: USB disconnect, device number 6 [ 100.593607][ T1837] loop2: detected capacity change from 0 to 512 [ 100.601550][ T1837] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.607853][ T1837] EXT4-fs: Ignoring removed i_version option [ 100.616357][ T1837] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.419: invalid block [ 100.627131][ T1837] EXT4-fs (loop2): Remounting filesystem read-only [ 100.633463][ T1837] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.419: couldn't read orphan inode 11 (err -117) [ 100.645288][ T1837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.080910][ T1843] loop4: detected capacity change from 0 to 1024 [ 101.092571][ T1843] EXT4-fs: Ignoring removed nobh option [ 101.162476][ T1843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.291227][ T28] audit: type=1400 audit(1724270990.186:323): avc: denied { execute_no_trans } for pid=1846 comm="syz.3.422" path="/30/file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.443018][ T1699] EXT4-fs (loop4): unmounting filesystem. [ 101.468392][ T836] EXT4-fs (loop2): unmounting filesystem. [ 102.222704][ T1871] x_tables: unsorted underflow at hook 3 [ 102.600383][ T1880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 102.609793][ T814] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.975714][ T814] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.985727][ T814] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.065750][ T814] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.074641][ T814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.082462][ T814] usb 4-1: SerialNumber: syz [ 103.095726][ T315] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 103.103126][ T19] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 103.369439][ T814] usb 4-1: 0:2 : does not exist [ 103.374514][ T814] usb 4-1: unit 255 not found! [ 103.585529][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 103.590533][ T315] usb 1-1: Using ep0 maxpacket: 32 [ 103.645923][ T814] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 103.663666][ T814] usb 4-1: USB disconnect, device number 7 [ 103.715757][ T315] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 103.725474][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.925799][ T315] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 103.934809][ T19] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 103.951665][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.959588][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.967346][ T19] usb 2-1: Product: syz [ 103.971367][ T315] usb 1-1: Product: syz [ 103.975268][ T315] usb 1-1: Manufacturer: syz [ 103.979723][ T19] usb 2-1: Manufacturer: syz [ 103.984207][ T19] usb 2-1: SerialNumber: syz [ 103.989023][ T315] usb 1-1: SerialNumber: syz [ 103.994007][ T19] usb 2-1: config 0 descriptor?? [ 103.999057][ T315] usb 1-1: config 0 descriptor?? [ 104.015842][ T1884] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.036005][ T315] hub 1-1:0.0: bad descriptor, ignoring hub [ 104.042317][ T315] hub: probe of 1-1:0.0 failed with error -5 [ 104.313763][ T1884] request_module fs-romfs succeeded, but still no fs? [ 104.489647][ T313] usb 1-1: USB disconnect, device number 12 [ 105.092684][ T1896] loop3: detected capacity change from 0 to 131072 [ 105.099209][ T19] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 105.105405][ T19] usb 2-1: No valid video chain found. [ 105.123167][ T1896] F2FS-fs (loop3): invalid crc value [ 105.132893][ T19] usb 2-1: USB disconnect, device number 11 [ 105.145101][ T1896] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 105.184468][ T1896] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 105.234028][ T1918] loop2: detected capacity change from 0 to 512 [ 105.261804][ T1918] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 105.276295][ T1918] EXT4-fs (loop2): 1 truncate cleaned up [ 105.290830][ T1918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.334248][ T836] EXT4-fs (loop2): unmounting filesystem. [ 105.643570][ T1930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.715701][ T451] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 106.839222][ T1945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.444'. [ 106.955685][ T451] usb 1-1: Using ep0 maxpacket: 16 [ 107.124913][ T1926] loop4: detected capacity change from 0 to 131072 [ 107.140366][ T1926] F2FS-fs (loop4): invalid crc value [ 107.175077][ T1926] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 107.231277][ T1926] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 107.235794][ T451] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 107.266485][ T451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.276847][ T451] usb 1-1: Product: syz [ 107.280910][ T451] usb 1-1: Manufacturer: syz [ 107.293288][ T451] usb 1-1: SerialNumber: syz [ 107.304803][ T451] r8152-cfgselector 1-1: config 0 descriptor?? [ 107.325798][ T313] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.578019][ T451] r8152-cfgselector 1-1: Unknown version 0x0000 [ 107.726270][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.752313][ T313] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.778516][ T1962] x_tables: unsorted underflow at hook 3 [ 107.784636][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.843332][ T313] usb 4-1: config 0 descriptor?? [ 107.855884][ T451] r8152-cfgselector 1-1: Unknown version 0x0000 [ 107.883319][ T451] r8152-cfgselector 1-1: bad CDC descriptors [ 107.925848][ T451] r8152-cfgselector 1-1: Unknown version 0x0000 [ 107.933002][ T451] r8152-cfgselector 1-1: USB disconnect, device number 13 [ 107.955705][ T315] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 108.195699][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 108.405082][ T313] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 108.414702][ T313] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000D/input/input10 [ 108.535778][ T315] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 108.555936][ T313] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 108.837152][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.845291][ T315] usb 2-1: Product: syz [ 108.849320][ T315] usb 2-1: Manufacturer: syz [ 108.853695][ T315] usb 2-1: SerialNumber: syz [ 108.866262][ T315] usb 2-1: config 0 descriptor?? [ 108.885720][ T451] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 108.906180][ T315] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 108.913654][ T315] usb 2-1: Detected FT232H [ 109.246071][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.257012][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.266891][ T451] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 109.290181][ T451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.300344][ T451] usb 1-1: config 0 descriptor?? [ 109.355761][ T315] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 109.409693][ T60] usb 4-1: USB disconnect, device number 8 [ 109.438446][ T28] audit: type=1400 audit(1724270998.346:324): avc: denied { nlmsg_write } for pid=1978 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.476036][ T315] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 109.484382][ T315] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 109.492971][ T315] usb 2-1: USB disconnect, device number 12 [ 109.499326][ T315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 109.508648][ T315] ftdi_sio 2-1:0.0: device disconnected [ 109.545713][ T19] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 109.815687][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 109.957325][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.982380][ T1988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.376034][ T19] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 110.520849][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.548334][ T19] usb 3-1: Product: syz [ 110.553367][ T19] usb 3-1: Manufacturer: syz [ 110.565039][ T19] usb 3-1: SerialNumber: syz [ 110.639447][ T19] usb 3-1: config 0 descriptor?? [ 111.119256][ T2006] loop1: detected capacity change from 0 to 256 [ 111.145384][ T2006] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d) [ 111.312987][ T2013] x_tables: unsorted underflow at hook 3 [ 111.465767][ T19] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 111.484212][ T19] usb 3-1: No valid video chain found. [ 111.498476][ T19] usb 3-1: USB disconnect, device number 12 [ 111.515718][ T451] usbhid 1-1:0.0: can't add hid device: -71 [ 111.521982][ T451] usbhid: probe of 1-1:0.0 failed with error -71 [ 111.536311][ T451] usb 1-1: USB disconnect, device number 14 [ 111.585395][ T2019] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.597746][ T2019] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.609560][ T2019] device bridge_slave_0 entered promiscuous mode [ 111.623753][ T2019] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.642157][ T2019] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.666181][ T2019] device bridge_slave_1 entered promiscuous mode [ 111.724586][ T2019] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.731469][ T2019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.738563][ T2019] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.745332][ T2019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.772885][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.781587][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.789091][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.806712][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.815009][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.821865][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.839431][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.898316][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.905167][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.912722][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.920585][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.938317][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.950752][ T2019] device veth0_vlan entered promiscuous mode [ 111.957235][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.965241][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.985998][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.993906][ T439] device bridge_slave_1 left promiscuous mode [ 112.003328][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.022022][ T439] device bridge_slave_0 left promiscuous mode [ 112.031990][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.050149][ T439] device veth1_macvtap left promiscuous mode [ 112.062516][ T439] device veth0_vlan left promiscuous mode [ 112.195708][ T451] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 112.233533][ T2019] device veth1_macvtap entered promiscuous mode [ 112.250456][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.271227][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.282748][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.435746][ T451] usb 3-1: Using ep0 maxpacket: 16 [ 112.658623][ T2042] loop1: detected capacity change from 0 to 256 [ 112.727230][ T392] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.774783][ T451] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 112.800507][ T451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.808485][ T451] usb 3-1: Product: syz [ 112.812476][ T451] usb 3-1: Manufacturer: syz [ 112.816972][ T451] usb 3-1: SerialNumber: syz [ 113.022945][ T451] usb 3-1: config 0 descriptor?? [ 113.270433][ T451] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 113.285189][ T451] usb 3-1: Detected FT232H [ 113.326036][ T313] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 113.685766][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.696596][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.707695][ T313] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.716573][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.724895][ T313] usb 2-1: config 0 descriptor?? [ 113.729735][ T451] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 113.756327][ T451] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 113.763002][ T451] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 113.772527][ T451] usb 3-1: USB disconnect, device number 13 [ 113.779683][ T451] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 113.788967][ T451] ftdi_sio 3-1:0.0: device disconnected [ 114.505696][ T19] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 114.517987][ T2061] loop2: detected capacity change from 0 to 131072 [ 114.526345][ T2061] F2FS-fs (loop2): invalid crc value [ 114.533684][ T2061] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 114.554458][ T2061] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 114.685719][ T60] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 114.729743][ T2073] loop2: detected capacity change from 0 to 512 [ 114.736519][ T2073] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.743245][ T2073] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.751291][ T2073] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.479: invalid block [ 114.762158][ T2073] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.479: couldn't read orphan inode 11 (err -117) [ 114.773928][ T2073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.799109][ T836] EXT4-fs (loop2): unmounting filesystem. [ 114.885728][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.896592][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.906076][ T19] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 114.915001][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.923376][ T19] usb 4-1: config 0 descriptor?? [ 115.055762][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 115.066344][ T60] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.095775][ T313] uclogic 0003:256C:006D.000E: failed retrieving Huion firmware version: -71 [ 115.104389][ T313] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 115.111710][ T313] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 115.119914][ T313] usb 2-1: USB disconnect, device number 13 [ 115.235804][ T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.244695][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.252509][ T60] usb 5-1: Product: syz [ 115.256474][ T60] usb 5-1: Manufacturer: syz [ 115.260891][ T60] usb 5-1: SerialNumber: syz [ 115.285766][ T2059] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 115.397031][ T19] hid-multitouch 0003:1FD2:6007.000F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 115.558077][ T2077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 115.567826][ T2059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.576219][ T2059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.608187][ T19] usb 4-1: USB disconnect, device number 9 [ 115.646340][ T60] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 115.653616][ T60] usb 5-1: USB disconnect, device number 10 [ 116.755761][ T2055] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 117.085497][ T2105] loop1: detected capacity change from 0 to 256 [ 117.092324][ T2105] FAT-fs (loop1): bogus logical sector size 0 [ 117.098537][ T2105] FAT-fs (loop1): Can't find a valid FAT filesystem [ 117.156121][ T2055] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 117.172041][ T2055] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.269821][ T2055] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.317432][ T2055] usb 3-1: config 0 descriptor?? [ 117.357052][ T2055] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 117.419959][ T2105] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.488'. [ 117.697928][ T312] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.847063][ T2055] usb 3-1: USB disconnect, device number 14 [ 117.955838][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 118.223345][ T2122] loop1: detected capacity change from 0 to 512 [ 118.229858][ T2122] journal_path: Lookup failure for './file0' [ 118.235816][ T2122] EXT4-fs: error: could not find journal device path [ 118.635750][ T312] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 118.644649][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.652678][ T312] usb 4-1: Product: syz [ 118.656790][ T312] usb 4-1: Manufacturer: syz [ 118.661213][ T312] usb 4-1: SerialNumber: syz [ 118.666616][ T312] usb 4-1: config 0 descriptor?? [ 118.706590][ T312] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 118.714337][ T312] usb 4-1: Detected FT232H [ 119.239122][ T312] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 119.275718][ T312] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 119.286004][ T312] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 119.305741][ T312] usb 4-1: USB disconnect, device number 10 [ 119.312831][ T312] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 119.321986][ T295] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 119.329708][ T312] ftdi_sio 4-1:0.0: device disconnected [ 119.396261][ T19] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 119.705746][ T19] usb 5-1: device descriptor read/64, error -71 [ 119.725789][ T295] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 119.759998][ T295] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.783559][ T2146] device syzkaller0 entered promiscuous mode [ 120.155258][ T2144] loop0: detected capacity change from 0 to 40427 [ 120.165106][ T2144] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 120.172820][ T2144] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 120.186429][ T2144] F2FS-fs (loop0): invalid crc value [ 120.192782][ T2144] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.214937][ T2144] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 120.226426][ T2144] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.233316][ T2144] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.241031][ T295] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.250036][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.264309][ T295] usb 3-1: Product: syz [ 120.268335][ T295] usb 3-1: Manufacturer: syz [ 120.272717][ T295] usb 3-1: SerialNumber: syz [ 120.315757][ T2127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.405733][ T19] usb 5-1: device descriptor read/64, error -71 [ 120.589039][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 120.599438][ T2127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.621130][ T2127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.675734][ T295] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 120.682203][ T19] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 120.693160][ T295] usb 3-1: USB disconnect, device number 15 [ 120.825702][ T2055] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 120.985688][ T19] usb 5-1: device descriptor read/64, error -71 [ 121.145790][ T451] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 121.185750][ T2055] usb 2-1: config 0 has no interfaces? [ 121.191207][ T2055] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 121.200692][ T2055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.212243][ T2055] usb 2-1: config 0 descriptor?? [ 121.397202][ T19] usb 5-1: device descriptor read/64, error -71 [ 121.404718][ T2179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.510'. [ 121.413443][ T451] usb 4-1: Using ep0 maxpacket: 16 [ 121.678329][ T19] usb usb5-port1: attempt power cycle [ 121.745750][ T451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.756526][ T451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.766008][ T451] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.782426][ T451] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 121.794422][ T451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.976896][ T1991] usb 2-1: USB disconnect, device number 14 [ 121.981214][ T451] usb 4-1: config 0 descriptor?? [ 122.265726][ T19] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 122.329639][ T2186] loop2: detected capacity change from 0 to 512 [ 122.336053][ T2186] EXT4-fs: dax option not supported [ 122.655749][ T451] usbhid 4-1:0.0: can't add hid device: -71 [ 122.661729][ T451] usbhid: probe of 4-1:0.0 failed with error -71 [ 122.669006][ T451] usb 4-1: USB disconnect, device number 11 [ 122.675810][ T19] usb 5-1: device descriptor read/8, error -71 [ 122.975738][ T19] usb 5-1: device descriptor read/8, error -71 [ 123.245792][ T19] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 123.465742][ T19] usb 5-1: device descriptor read/8, error -71 [ 123.975791][ T19] usb 5-1: device descriptor read/8, error -71 [ 124.095704][ T1991] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 124.103214][ T19] usb usb5-port1: unable to enumerate USB device [ 124.575682][ T1991] usb 1-1: Using ep0 maxpacket: 32 [ 124.695743][ T1991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.720575][ T1991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.735750][ T451] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 124.739880][ T1991] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 124.759763][ T1991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.774056][ T1991] usb 1-1: config 0 descriptor?? [ 124.933185][ T2222] incfs: Options parsing error. -22 [ 124.939382][ T2222] incfs: mount failed -22 [ 125.105863][ T451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.125702][ T451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.206012][ T451] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 125.215331][ T451] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 125.224976][ T451] usb 4-1: Product: syz [ 125.233753][ T451] usb 4-1: config 0 descriptor?? [ 125.721050][ T451] konepure 0003:1E7D:2DB4.0010: item fetching failed at offset 10/11 [ 125.744371][ T451] konepure 0003:1E7D:2DB4.0010: parse failed [ 125.765716][ T451] konepure: probe of 0003:1E7D:2DB4.0010 failed with error -22 [ 125.788478][ T2209] loop0: detected capacity change from 0 to 40427 [ 125.799342][ T2209] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.823400][ T2209] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.848946][ T2209] syz.0.525: attempt to access beyond end of device [ 125.848946][ T2209] loop0: rw=2049, sector=53248, nr_sectors = 2112 limit=40427 [ 125.865180][ T2209] syz.0.525: attempt to access beyond end of device [ 125.865180][ T2209] loop0: rw=2049, sector=55360, nr_sectors = 2048 limit=40427 [ 125.879922][ T2209] syz.0.525: attempt to access beyond end of device [ 125.879922][ T2209] loop0: rw=2049, sector=57408, nr_sectors = 520 limit=40427 [ 125.919999][ T19] usb 4-1: USB disconnect, device number 12 [ 125.926601][ T1991] greenasia 0003:0E8F:0012.0011: item fetching failed at offset 0/3 [ 125.939964][ T1991] greenasia 0003:0E8F:0012.0011: parse failed [ 125.945905][ T1991] greenasia: probe of 0003:0E8F:0012.0011 failed with error -22 [ 126.140045][ T1991] usb 1-1: USB disconnect, device number 15 [ 126.625699][ T19] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 126.710040][ T992] syz-executor: attempt to access beyond end of device [ 126.710040][ T992] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 126.925688][ T19] usb 3-1: device descriptor read/64, error -71 [ 127.035688][ T1991] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 127.325969][ T19] usb 3-1: device descriptor read/64, error -71 [ 127.425800][ T1991] usb 1-1: config 0 has no interfaces? [ 127.431090][ T1991] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 127.440031][ T1991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.549079][ T2258] loop3: detected capacity change from 0 to 2048 [ 127.558232][ T1991] usb 1-1: config 0 descriptor?? [ 127.597569][ T2258] loop3: p1 < > p4 [ 127.607548][ T2258] loop3: p4 size 8388608 extends beyond EOD, truncated [ 127.636250][ T19] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 127.703433][ T2260] xt_l2tp: unknown flags: 3b [ 128.081754][ T451] usb 1-1: USB disconnect, device number 16 [ 128.177605][ T19] usb 3-1: device descriptor read/64, error -71 [ 128.735701][ T19] usb 3-1: device descriptor read/64, error -71 [ 128.855798][ T19] usb usb3-port1: attempt power cycle [ 128.949021][ T2272] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.956267][ T2272] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.963400][ T2272] device bridge_slave_0 entered promiscuous mode [ 128.970062][ T2272] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.977038][ T2272] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.984120][ T2272] device bridge_slave_1 entered promiscuous mode [ 129.027389][ T2272] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.034314][ T2272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.041422][ T2272] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.048202][ T2272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.068814][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.076892][ T1991] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.083870][ T1991] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.093966][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.102001][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.108849][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.143663][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.152269][ T1991] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.159124][ T1991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.166539][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.174364][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.193448][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.205651][ T2272] device veth0_vlan entered promiscuous mode [ 129.211824][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.233073][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.240675][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.253830][ T2272] device veth1_macvtap entered promiscuous mode [ 129.260539][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.268357][ T19] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 129.526386][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.534698][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.638901][ T43] device bridge_slave_1 left promiscuous mode [ 129.645785][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.660721][ T43] device bridge_slave_0 left promiscuous mode [ 129.672867][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.681477][ T43] device veth1_macvtap left promiscuous mode [ 129.685718][ T19] usb 3-1: device descriptor read/8, error -71 [ 129.691472][ T43] device veth0_vlan left promiscuous mode [ 130.105819][ T19] usb 3-1: device descriptor read/8, error -71 [ 130.675945][ T28] audit: type=1400 audit(1724271019.566:325): avc: denied { connect } for pid=2295 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.239216][ T2314] loop1: detected capacity change from 0 to 256 [ 131.250375][ T2314] exfat: Bad value for 'uid' [ 131.256105][ T2309] netlink: 'syz.0.540': attribute type 15 has an invalid length. [ 131.266255][ T2309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.540'. [ 131.271664][ T392] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.385708][ T19] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 131.646904][ T2322] loop1: detected capacity change from 0 to 1024 [ 132.652205][ T2321] loop0: detected capacity change from 0 to 2048 [ 132.676926][ T2322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.697185][ T2321] loop0: p1 < > p4 [ 132.701303][ T2321] loop0: p4 size 8388608 extends beyond EOD, truncated [ 132.711658][ T102] loop0: p1 < > p4 [ 132.718414][ T102] loop0: p4 size 8388608 extends beyond EOD, truncated [ 132.765796][ T19] usb 3-1: device descriptor read/8, error -71 [ 132.844959][ T2019] EXT4-fs (loop1): unmounting filesystem. [ 132.927909][ T2328] overlayfs: failed to resolve './file1': -2 [ 132.929172][ T28] audit: type=1400 audit(1724271021.836:326): avc: denied { bind } for pid=2335 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.974514][ T28] audit: type=1400 audit(1724271021.866:327): avc: denied { listen } for pid=2335 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.993845][ T28] audit: type=1400 audit(1724271021.866:328): avc: denied { accept } for pid=2335 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.016481][ T19] usb 3-1: device descriptor read/8, error -71 [ 133.145813][ T19] usb usb3-port1: unable to enumerate USB device [ 133.255717][ T39] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 133.295713][ T295] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 133.595685][ T295] usb 1-1: device descriptor read/64, error -71 [ 133.615743][ T39] usb 5-1: config 0 has no interfaces? [ 133.621147][ T39] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 133.630040][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.638414][ T39] usb 5-1: config 0 descriptor?? [ 133.769415][ T2343] loop3: detected capacity change from 0 to 512 [ 133.770786][ T2344] loop1: detected capacity change from 0 to 512 [ 133.781751][ T2343] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 133.787201][ T2344] ext4: Bad value for 'debug_want_extra_isize' [ 133.796524][ T2343] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.550: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 133.814396][ T2343] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.550: couldn't read orphan inode 15 (err -117) [ 133.826255][ T2343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.834695][ T2343] ext2 filesystem being mounted at /60/file2 supports timestamps until 2038 (0x7fffffff) [ 133.857474][ T28] audit: type=1400 audit(1724271022.766:329): avc: denied { ioctl } for pid=2341 comm="syz.3.550" path="socket:[28555]" dev="sockfs" ino=28555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.926506][ T1146] EXT4-fs (loop3): unmounting filesystem. [ 133.932366][ T28] audit: type=1400 audit(1724271022.826:330): avc: denied { bind } for pid=2341 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.969091][ T28] audit: type=1400 audit(1724271022.826:331): avc: denied { setopt } for pid=2341 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.003713][ T28] audit: type=1400 audit(1724271022.826:332): avc: denied { write } for pid=2341 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.042486][ T28] audit: type=1400 audit(1724271022.826:333): avc: denied { read } for pid=2341 comm="syz.3.550" path="socket:[28555]" dev="sockfs" ino=28555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.077221][ T60] usb 5-1: USB disconnect, device number 15 [ 134.237606][ T295] usb 1-1: device descriptor read/64, error -71 [ 134.505696][ T295] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 134.855712][ T295] usb 1-1: device descriptor read/64, error -71 [ 135.265690][ T295] usb 1-1: device descriptor read/64, error -71 [ 135.385734][ T295] usb usb1-port1: attempt power cycle [ 135.795694][ T295] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 135.965718][ T295] usb 1-1: device descriptor read/8, error -71 [ 136.023714][ T2360] loop1: detected capacity change from 0 to 1024 [ 136.032817][ T2360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.045600][ T2360] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e801c01c, mo2=0003] [ 136.053883][ T2360] System zones: 0-1, 3-36 [ 136.059559][ T2360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.105011][ T2019] EXT4-fs (loop1): unmounting filesystem. [ 136.345756][ T39] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.445698][ T295] usb 1-1: device descriptor read/8, error -71 [ 136.500035][ T2371] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.506991][ T2371] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.514177][ T2371] device bridge_slave_0 entered promiscuous mode [ 136.521273][ T2371] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.528925][ T2371] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.536428][ T2371] device bridge_slave_1 entered promiscuous mode [ 136.609612][ T2371] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.616494][ T2371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.623565][ T2371] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.630367][ T2371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.659422][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.668112][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.675424][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.693872][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.701969][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.708838][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.716878][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.724857][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.731713][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.735729][ T39] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 136.739020][ T295] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 136.752814][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.764912][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.773064][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.773420][ T39] usb 4-1: config 0 descriptor?? [ 136.786922][ T2371] device veth0_vlan entered promiscuous mode [ 136.794056][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.802508][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.811649][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.819062][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.834529][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.843236][ T2371] device veth1_macvtap entered promiscuous mode [ 136.908109][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.920633][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.936397][ T295] usb 1-1: device descriptor read/8, error -71 [ 137.048714][ T2379] loop4: detected capacity change from 0 to 2048 [ 137.086433][ T2379] loop4: p1 < > p4 [ 137.116979][ T2379] loop4: p4 size 8388608 extends beyond EOD, truncated [ 137.249590][ T295] usb 1-1: device descriptor read/8, error -71 [ 137.296615][ T2286] device bridge_slave_1 left promiscuous mode [ 137.303595][ T2286] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.316226][ T2286] device bridge_slave_0 left promiscuous mode [ 137.322230][ T2286] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.330520][ T2286] device veth1_macvtap left promiscuous mode [ 137.340386][ T2286] device veth0_vlan left promiscuous mode [ 137.375770][ T39] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.375859][ T295] usb usb1-port1: unable to enumerate USB device [ 137.389744][ T39] asix: probe of 4-1:0.0 failed with error -71 [ 137.415810][ T39] usb 4-1: USB disconnect, device number 13 [ 137.539258][ T2389] loop2: detected capacity change from 0 to 2048 [ 137.567887][ T2389] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.695674][ T60] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 138.225714][ T60] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 138.234672][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.242472][ T60] usb 2-1: Product: syz [ 138.246487][ T60] usb 2-1: Manufacturer: syz [ 138.250837][ T60] usb 2-1: SerialNumber: syz [ 138.256451][ T60] usb 2-1: config 0 descriptor?? [ 138.394736][ T2371] EXT4-fs (loop2): unmounting filesystem. [ 138.431730][ T2405] loop2: detected capacity change from 0 to 8192 [ 138.498111][ T28] audit: type=1400 audit(1724271027.406:334): avc: denied { ioctl } for pid=2386 comm="syz.1.559" path="socket:[28796]" dev="sockfs" ino=28796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.500400][ T2387] device syz_tun entered promiscuous mode [ 138.530125][ T2387] device syz_tun left promiscuous mode [ 138.588456][ T1991] usb 2-1: USB disconnect, device number 15 [ 138.710166][ T2409] kvm: pic: non byte read [ 138.714853][ T2409] kvm: pic: non byte read [ 138.722201][ T2409] kvm: pic: level sensitive irq not supported [ 138.722628][ T2409] kvm: pic: non byte read [ 138.733344][ T2409] kvm: pic: non byte read [ 139.765683][ T451] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 140.456025][ T451] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 140.477059][ T451] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.685751][ T451] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.694728][ T451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.702835][ T451] usb 2-1: Product: syz [ 140.708035][ T451] usb 2-1: Manufacturer: syz [ 140.712485][ T451] usb 2-1: SerialNumber: syz [ 140.735773][ T2418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 140.903217][ T2450] binder: 2449:2450 ioctl c018620c 20000000 returned -14 [ 141.010340][ T2454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 141.024539][ T2418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.033953][ T2418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.095736][ T451] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 141.102997][ T451] usb 2-1: USB disconnect, device number 16 [ 141.328586][ T2465] loop4: detected capacity change from 0 to 256 [ 141.335951][ T2465] exfat: Deprecated parameter 'namecase' [ 141.427976][ T2465] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x973db221, utbl_chksum : 0xe619d30d) [ 141.541910][ T2469] loop3: detected capacity change from 0 to 512 [ 141.553752][ T2469] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.781275][ T1146] EXT4-fs (loop3): unmounting filesystem. [ 142.346478][ T2489] loop2: detected capacity change from 0 to 2048 [ 142.366077][ T2492] loop4: detected capacity change from 0 to 512 [ 142.385157][ T2492] ext4: Bad value for 'debug_want_extra_isize' [ 142.396234][ T2489] loop2: p1 < > p4 [ 142.400468][ T2489] loop2: p4 size 8388608 extends beyond EOD, truncated [ 142.625683][ T315] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 143.015735][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 143.030699][ T315] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.060256][ T2508] loop2: detected capacity change from 0 to 128 [ 143.066385][ T19] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 143.077046][ T2508] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.091588][ T2508] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.161679][ T2513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.593'. [ 143.238740][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.259204][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.275741][ T315] usb 4-1: Product: syz [ 143.284040][ T315] usb 4-1: Manufacturer: syz [ 143.292805][ T315] usb 4-1: SerialNumber: syz [ 143.315815][ T2486] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.588122][ T2518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 143.595715][ T39] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 143.604466][ T2486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.612900][ T2486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.620702][ T2286] device bridge_slave_1 left promiscuous mode [ 143.626728][ T2286] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.633908][ T2286] device bridge_slave_0 left promiscuous mode [ 143.640065][ T2286] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.647622][ T2286] device veth1_macvtap left promiscuous mode [ 143.653448][ T2286] device veth0_vlan left promiscuous mode [ 143.665776][ T315] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 143.673302][ T315] usb 4-1: USB disconnect, device number 14 [ 143.955711][ T39] usb 3-1: config 0 has no interfaces? [ 144.115721][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.124604][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.132527][ T39] usb 3-1: Product: syz [ 144.136673][ T39] usb 3-1: Manufacturer: syz [ 144.141068][ T39] usb 3-1: SerialNumber: syz [ 144.146045][ T39] usb 3-1: config 0 descriptor?? [ 144.685782][ T39] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 144.925671][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 145.045748][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.056602][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.066433][ T39] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 145.075356][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.086512][ T39] usb 4-1: config 0 descriptor?? [ 145.635906][ T2526] loop3: detected capacity change from 0 to 40427 [ 145.644706][ T2526] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.671341][ T2526] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.698107][ T2526] syz.3.605: attempt to access beyond end of device [ 145.698107][ T2526] loop3: rw=2049, sector=53248, nr_sectors = 3536 limit=40427 [ 145.713763][ T2526] syz.3.605: attempt to access beyond end of device [ 145.713763][ T2526] loop3: rw=2049, sector=56784, nr_sectors = 1144 limit=40427 [ 145.753085][ T2526] syz.3.605: attempt to access beyond end of device [ 145.753085][ T2526] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 145.787373][ T39] greenasia 0003:0E8F:0012.0012: item fetching failed at offset 0/3 [ 145.795325][ T39] greenasia 0003:0E8F:0012.0012: parse failed [ 145.801251][ T39] greenasia: probe of 0003:0E8F:0012.0012 failed with error -22 [ 145.990020][ T39] usb 4-1: USB disconnect, device number 15 [ 146.349002][ T295] usb 3-1: USB disconnect, device number 20 [ 154.349462][ T2564] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.357030][ T2564] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.364298][ T2564] device bridge_slave_0 entered promiscuous mode [ 154.373224][ T2564] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.380252][ T2564] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.387645][ T2564] device bridge_slave_1 entered promiscuous mode [ 154.450592][ T2564] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.457459][ T2564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.464546][ T2564] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.471353][ T2564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.498260][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.506342][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.513385][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.537007][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.544959][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.551808][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.560371][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.568356][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.575180][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.582623][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.590472][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.607926][ T2564] device veth0_vlan entered promiscuous mode [ 154.616065][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.624219][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.632257][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.639631][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.651780][ T2564] device veth1_macvtap entered promiscuous mode [ 154.662157][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.675860][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.684028][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.776487][ T43] device bridge_slave_1 left promiscuous mode [ 154.782430][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.795985][ T43] device bridge_slave_0 left promiscuous mode [ 154.801922][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.810541][ T43] device veth1_macvtap left promiscuous mode [ 154.816414][ T43] device veth0_vlan left promiscuous mode [ 155.857617][ T2578] loop2: detected capacity change from 0 to 512 [ 155.864563][ T2578] ext4: Bad value for 'debug_want_extra_isize' [ 155.906409][ T2560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.968853][ T2584] capability: warning: `syz.1.601' uses 32-bit capabilities (legacy support in use) [ 156.315681][ T19] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 156.595690][ T19] usb 4-1: device descriptor read/64, error -71 [ 156.985675][ T19] usb 4-1: device descriptor read/64, error -71 [ 157.255712][ T19] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 157.525681][ T19] usb 4-1: device descriptor read/64, error -71 [ 157.935667][ T19] usb 4-1: device descriptor read/64, error -71 [ 158.055746][ T19] usb usb4-port1: attempt power cycle [ 158.465726][ T19] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.635738][ T19] usb 4-1: device descriptor read/8, error -71 [ 158.905711][ T19] usb 4-1: device descriptor read/8, error -71 [ 159.185674][ T19] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 159.329779][ T2610] loop1: detected capacity change from 0 to 512 [ 159.365750][ T19] usb 4-1: device descriptor read/8, error -71 [ 159.383311][ T2610] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.400394][ T2610] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 159.825808][ T19] usb 4-1: device descriptor read/8, error -71 [ 159.945740][ T19] usb usb4-port1: unable to enumerate USB device [ 160.183603][ T2019] EXT4-fs (loop1): unmounting filesystem. [ 161.340426][ T28] audit: type=1400 audit(1724271050.246:335): avc: denied { read } for pid=2625 comm="syz.2.614" path="socket:[30393]" dev="sockfs" ino=30393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.688538][ T2636] device dummy0 entered promiscuous mode [ 163.367190][ T2645] loop4: detected capacity change from 0 to 512 [ 163.416370][ T2645] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.456583][ T2645] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 163.471444][ T2645] EXT4-fs (loop4): 1 truncate cleaned up [ 163.477128][ T2645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.531653][ T2564] EXT4-fs (loop4): unmounting filesystem. [ 165.463458][ T28] audit: type=1400 audit(1724271054.366:336): avc: denied { name_bind } for pid=2656 comm="syz.1.619" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 165.479843][ T2663] loop1: detected capacity change from 0 to 1024 [ 165.502797][ T2663] EXT4-fs (loop1): first meta block group too large: 50331648 (group descriptor block count 1) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=0 req=592 state=1 status=1 (errno 11: Resource temporarily unavailable) [ 166.411582][ T28] audit: type=1400 audit(1724271055.316:337): avc: denied { read } for pid=2674 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 166.746076][ T439] device bridge_slave_1 left promiscuous mode [ 166.751985][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.759225][ T439] device bridge_slave_0 left promiscuous mode [ 166.765119][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.772670][ T439] device dummy0 left promiscuous mode [ 166.777941][ T439] device veth1_macvtap left promiscuous mode [ 166.783680][ T439] device veth0_vlan left promiscuous mode [ 167.148604][ T28] audit: type=1400 audit(1724271056.056:338): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.172795][ T28] audit: type=1400 audit(1724271056.056:339): avc: denied { write } for pid=140 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=295 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.195104][ T28] audit: type=1400 audit(1724271056.056:340): avc: denied { remove_name } for pid=140 comm="dhcpcd" name="sock" dev="tmpfs" ino=297 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.217085][ T28] audit: type=1400 audit(1724271056.056:341): avc: denied { unlink } for pid=140 comm="dhcpcd" name="sock" dev="tmpfs" ino=297 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 167.239202][ T28] audit: type=1400 audit(1724271056.056:342): avc: denied { unlink } for pid=140 comm="dhcpcd" name="pid" dev="tmpfs" ino=296 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.267968][ T28] audit: type=1400 audit(1724271056.126:343): avc: denied { search } for pid=2698 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.295342][ T28] audit: type=1400 audit(1724271056.126:344): avc: denied { write } for pid=2698 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.320307][ T28] audit: type=1400 audit(1724271056.126:345): avc: denied { add_name } for pid=2698 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.346170][ T28] audit: type=1400 audit(1724271056.126:346): avc: denied { create } for pid=2698 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.756534][ T439] device bridge_slave_1 left promiscuous mode [ 167.762435][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.769602][ T439] device bridge_slave_0 left promiscuous mode [ 167.775489][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.782908][ T439] device bridge_slave_1 left promiscuous mode [ 167.788933][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.796017][ T439] device bridge_slave_0 left promiscuous mode [ 167.801898][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.809338][ T439] device bridge_slave_1 left promiscuous mode [ 167.815229][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.822364][ T439] device bridge_slave_0 left promiscuous mode [ 167.828416][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.836636][ T439] device veth1_macvtap left promiscuous mode [ 167.842431][ T439] device veth0_vlan left promiscuous mode [ 167.848360][ T439] device veth1_macvtap left promiscuous mode [ 167.854155][ T439] device veth0_vlan left promiscuous mode [ 167.859867][ T439] device veth1_macvtap left promiscuous mode [ 167.865687][ T439] device veth0_vlan left promiscuous mode [ 168.610100][ T2717] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 170.671301][ T2718] kvm: exiting hardware virtualization [ 170.676924][ T2718] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 170.683190][ T2718] ACPI: PM: Preparing to enter system sleep state S5 [ 170.689889][ T2718] reboot: Power down serialport: VM disconnected.