last executing test programs: 1m12.186314975s ago: executing program 3 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2501000000140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) 1m12.163479247s ago: executing program 3 (id=166): setresgid(0x0, 0xee01, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 1m12.046338916s ago: executing program 3 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) get_robust_list(0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) 1m12.033403877s ago: executing program 3 (id=169): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x210816, &(0x7f0000000500)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@user_xattr}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@block_validity}]}, 0x5, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x103000, 0x60) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 1m11.863893391s ago: executing program 3 (id=174): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x40, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1m11.696077084s ago: executing program 3 (id=178): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a00)={0xa0, 0x20, 0x9, 0x2, 0x25dfdbff, {0x5}, [@generic="22dfc076ef954d00456eb644a5d8ff6a85487b344235d6a9cdc2d1b74d5573f75de2f7d77fd0c63fdf949caa930107f7035d5c7937c7a2653065a834e07b6c0819c58139a1b68a7c92742f6274da3f7c532f522685da86e1185519d3927896fbbf98cc770076c433855371a61d8398d2fc37265d40aba8ccb806c602ed0ae7207dddf5c8d7b512e4ad17e136"]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 1m11.692376264s ago: executing program 32 (id=178): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a00)={0xa0, 0x20, 0x9, 0x2, 0x25dfdbff, {0x5}, [@generic="22dfc076ef954d00456eb644a5d8ff6a85487b344235d6a9cdc2d1b74d5573f75de2f7d77fd0c63fdf949caa930107f7035d5c7937c7a2653065a834e07b6c0819c58139a1b68a7c92742f6274da3f7c532f522685da86e1185519d3927896fbbf98cc770076c433855371a61d8398d2fc37265d40aba8ccb806c602ed0ae7207dddf5c8d7b512e4ad17e136"]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 32.047715033s ago: executing program 5 (id=1209): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000880), 0x1, 0x5512, &(0x7f0000005a80)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x100, 0x6ff) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, 0x0) 31.538617374s ago: executing program 5 (id=1228): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x200, 0x0, 0x100000a, 0xfffffffd, 0x8000}) 30.537952684s ago: executing program 2 (id=1238): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 30.325395031s ago: executing program 2 (id=1240): execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) 29.714662869s ago: executing program 5 (id=1248): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x1, 0x0, 0xfffffffffffffffe) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x1000016, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) 29.655014984s ago: executing program 5 (id=1251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 29.607681808s ago: executing program 5 (id=1254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) 29.344050879s ago: executing program 5 (id=1258): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 29.314033531s ago: executing program 33 (id=1258): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 28.419309543s ago: executing program 2 (id=1273): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 28.397754304s ago: executing program 2 (id=1274): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 28.349563368s ago: executing program 2 (id=1275): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000080)) 28.302260732s ago: executing program 2 (id=1291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) clock_settime(0x1ed5d7403, 0x0) 28.250679016s ago: executing program 34 (id=1291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) clock_settime(0x1ed5d7403, 0x0) 1.082431953s ago: executing program 7 (id=2163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) 1.062617545s ago: executing program 7 (id=2164): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000002280)={@broadcast, @local, @val, {@mpls_mc={0x8100, {[], @ipv6=@udp={0x1, 0x6, "4ecaef", 0x8, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e21, 0x4e21, 0x8}}}}}}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20044050) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 955.829663ms ago: executing program 4 (id=2168): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @loopback, 0x10000002}, 0x1c) 928.911615ms ago: executing program 4 (id=2169): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) wait4(r0, 0x0, 0x40000000, 0x0) 872.42986ms ago: executing program 7 (id=2174): setregid(0xee00, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) statfs(&(0x7f0000000000)='./file0\x00', 0x0) 853.860031ms ago: executing program 7 (id=2175): creat(&(0x7f0000000000)='./file1\x00', 0xa6) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0xce) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000700)='./file1\x00', 0x2000775) 842.952512ms ago: executing program 0 (id=2177): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 797.798655ms ago: executing program 0 (id=2178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x8, 0x9602, 0x85, 0x1}, 0x50) 791.815036ms ago: executing program 7 (id=2179): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 758.541559ms ago: executing program 4 (id=2181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 750.72391ms ago: executing program 0 (id=2182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) io_cancel(0x0, 0x0, 0x0) 733.490041ms ago: executing program 4 (id=2183): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 718.812692ms ago: executing program 0 (id=2184): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100)=0xad47e17a14ae4701, 0x112) 602.505752ms ago: executing program 4 (id=2185): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x551a, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x103042, 0x5d9f61795f7ff7ff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xf519, 0x0) write$uinput_user_dev(r0, &(0x7f0000005c00)={'syz1\x00', {0xa73, 0x8, 0x9, 0x23c9}, 0x40, [0x9, 0x1, 0xffffffff, 0x1, 0x5, 0x2, 0x9, 0x4, 0x2fec, 0x8, 0x8, 0xa7, 0x2, 0xe, 0x2, 0x401, 0x10, 0x0, 0x8000, 0xe, 0x7, 0x12000, 0x8001, 0x397, 0x2, 0xe6, 0x0, 0x5, 0x7, 0x81, 0xbeee, 0x4, 0x4e, 0xfff, 0x1ff, 0x7, 0x9, 0xf, 0xb82f, 0xff, 0x7, 0x977, 0x81, 0x6, 0x8, 0x7, 0x42d, 0x1000, 0x40, 0xf, 0x0, 0x4, 0xd, 0x9, 0x6, 0x2, 0xfffffffc, 0x10001, 0x9, 0x0, 0xfffffffe, 0xc, 0x6, 0x2], [0x1800000, 0x2, 0x1000, 0xfffffffe, 0x1000, 0x2, 0x7fffffff, 0x74, 0xb32, 0x8001, 0xd9fd, 0x2885, 0x2, 0x820, 0xd, 0x6, 0x0, 0xf, 0x9, 0xfffffffd, 0x5, 0x8, 0x0, 0x1, 0x1, 0x805, 0x0, 0x3, 0x4, 0x2, 0x1, 0x4f, 0xffff, 0x6, 0x3ff, 0xfff, 0x7, 0x1, 0x8, 0xd7, 0x6c26, 0xc4, 0x4, 0x4, 0x7, 0x6e1, 0x101, 0x5, 0x0, 0x7, 0x2, 0x2, 0x8, 0x2, 0x0, 0x5, 0x1000, 0x6, 0xfffff2f2, 0x9, 0x7, 0x2d, 0x53c, 0x20], [0xd7, 0x7, 0xd, 0x2, 0x9, 0xfff, 0x1ff, 0x2, 0x5, 0x3, 0xfffffff9, 0x1, 0x2, 0xfffffff7, 0xfffffff8, 0x8, 0x3db, 0x7, 0x1, 0x9, 0x0, 0x5, 0x0, 0x4792, 0x8, 0x3, 0x3, 0xffffffff, 0x9, 0x1, 0x8001, 0xac, 0x3, 0x2, 0x9, 0xc37, 0x400, 0xffffffff, 0x400, 0x1, 0x7, 0xddd5, 0x8, 0xf, 0x4, 0x5, 0x1, 0x2, 0x5, 0x8, 0x23, 0x5, 0x200, 0x1, 0x2, 0x2, 0xfffffff9, 0x1000, 0x7, 0x6ef4, 0x10, 0x5d, 0x80000001, 0x101], [0xffffffff, 0x101, 0x6, 0x432, 0x5c9, 0x5, 0x3751, 0xff, 0x23e4, 0x1, 0x9, 0x9, 0x10001, 0x3, 0x2, 0x1, 0x0, 0x7, 0x2b22, 0x3ff, 0xfffffffb, 0x8, 0x1, 0x2, 0x5, 0x6, 0x4, 0x1, 0x1, 0x8, 0x179, 0x4, 0x1, 0x8, 0x800, 0x10001, 0x6, 0xe, 0x2, 0x3, 0xfffffe00, 0x8, 0x3, 0x5, 0x6, 0xf, 0xfffffff8, 0x9806, 0x5, 0x8, 0x5, 0xc0, 0x3, 0x2, 0xfa, 0xff, 0x9, 0x700, 0xfb, 0x4259, 0x4, 0x3, 0xe, 0x2]}, 0x45c) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) 602.021751ms ago: executing program 0 (id=2195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x19, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) close(r0) 554.541275ms ago: executing program 7 (id=2186): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r1, 0x581}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 285.812307ms ago: executing program 1 (id=2194): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0xb, 0x3, 0x10008, 0x4874, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x4, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x802, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0xb, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x7, 0x10000006, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffbfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 261.035029ms ago: executing program 1 (id=2197): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) mount$cgroup2(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030527bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000090000140012800b0001006d6163736563000057fe028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x80801}, 0x0) 217.466953ms ago: executing program 0 (id=2199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x7448}], 0x1, 0x0, 0x0, 0x0) 186.912185ms ago: executing program 6 (id=2201): unshare(0x28000600) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 175.594356ms ago: executing program 6 (id=2202): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 158.894387ms ago: executing program 1 (id=2203): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x4000000) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000380)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@canfd={{}, 0xfe, 0x3, 0x0, 0x0, "0e762947a81f2e000073fc2af2a7fa10b9926ea28baed9b57d82ab23db557c307ae88da9c68d8ceae8e69b06707297b87f8c925a00"}, 0x48}, 0x2, 0x0, 0x0, 0x105}, 0x0) 153.345728ms ago: executing program 6 (id=2204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000001840)={@void, @val={0x2, 0x0, 0x3, 0x5, 0x5bf, 0xc}, @ipv4=@icmp={{0x5, 0x4, 0x2, 0x0, 0xfc1, 0x66, 0x0, 0x2, 0x1, 0x0, @remote, @broadcast}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x4, "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"}}}, 0xfcb) 119.68474ms ago: executing program 1 (id=2205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_getoverrun(r2) 118.983691ms ago: executing program 4 (id=2206): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 104.102792ms ago: executing program 6 (id=2207): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) 53.339296ms ago: executing program 1 (id=2208): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 52.871776ms ago: executing program 6 (id=2209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r2, r2, 0x0) 367.68µs ago: executing program 6 (id=2210): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x80, 0x5, 0x4, 0xffffff80}, 0x9, 0x1, 0x1, 0x4, 0x4, 0x5, 0x7, 0xf, 0x4, 0x6, {0x5, 0x80000001, 0x2, 0x0, 0xa0dd, 0x4}}}}]}, 0x78}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 0s ago: executing program 1 (id=2220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68011}, 0x0) pwrite64(r1, &(0x7f0000000300)="572654b114b1a9e1879a390786dd87318827008a118e186ae35a8dd9fd884cd2abd63116b12a26eff4b1eff53b8259e7f06d5e4cb9d8", 0x36, 0xf) kernel console output (not intermixed with test programs): ctor=45096, nr_sectors = 8 limit=40427 [ 59.484445][ T758] syz-executor: attempt to access beyond end of device [ 59.484445][ T758] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 59.529193][ T2717] loop0: detected capacity change from 0 to 40427 [ 59.561210][ T2717] F2FS-fs (loop0): invalid crc value [ 59.573649][ T2717] F2FS-fs (loop0): Found nat_bits in checkpoint [ 59.624799][ T2717] F2FS-fs (loop0): Start checkpoint disabled! [ 59.638186][ T2733] IPv6: addrconf: prefix option has invalid lifetime [ 59.644670][ T2717] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 59.646838][ T2733] IPv6: addrconf: prefix option has invalid lifetime [ 59.740877][ T10] kworker/u4:1: attempt to access beyond end of device [ 59.740877][ T10] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 59.897266][ T2748] loop5: detected capacity change from 0 to 1024 [ 59.925980][ T2750] cgroup: fork rejected by pids controller in /syz0 [ 59.944279][ T2748] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 59.960052][ T2748] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.012594][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 60.064728][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.073210][ T758] EXT4-fs (loop5): unmounting filesystem. [ 60.084095][ T2756] device bridge_slave_0 left promiscuous mode [ 60.090278][ T2756] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.128846][ T2756] device bridge_slave_1 left promiscuous mode [ 60.145520][ T2756] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.204031][ T2760] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1003'. [ 60.211506][ T2762] loop4: detected capacity change from 0 to 512 [ 60.251880][ T2762] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.252371][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.280338][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.291146][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.304468][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.313844][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.327394][ T6] usb 3-1: config 0 descriptor?? [ 60.336182][ T2762] EXT4-fs (loop4): 1 truncate cleaned up [ 60.360794][ T2762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.398413][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 60.398426][ T28] audit: type=1400 audit(1756460118.942:723): avc: denied { setattr } for pid=2761 comm="syz.4.1013" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.431184][ T283] EXT4-fs (loop4): unmounting filesystem. [ 60.439392][ T28] audit: type=1400 audit(1756460118.942:724): avc: denied { create } for pid=2761 comm="syz.4.1013" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 60.603720][ T28] audit: type=1400 audit(1756460119.153:725): avc: denied { mac_admin } for pid=2783 comm="syz.5.1012" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.603735][ T2784] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 60.638969][ T2772] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.653855][ T2772] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.661885][ T28] audit: type=1400 audit(1756460119.153:726): avc: denied { relabelto } for pid=2783 comm="syz.5.1012" name="176" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 60.672778][ T2772] device bridge_slave_0 entered promiscuous mode [ 60.688311][ T28] audit: type=1400 audit(1756460119.153:727): avc: denied { associate } for pid=2783 comm="syz.5.1012" name="176" dev="tmpfs" ino=929 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 60.722197][ T28] audit: type=1400 audit(1756460119.203:728): avc: denied { write } for pid=758 comm="syz-executor" name="176" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 60.748447][ T28] audit: type=1400 audit(1756460119.203:729): avc: denied { remove_name } for pid=758 comm="syz-executor" name="binderfs" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 60.776291][ T6] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 60.785174][ T28] audit: type=1400 audit(1756460119.203:730): avc: denied { rmdir } for pid=758 comm="syz-executor" name="176" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 60.785192][ T2772] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.785205][ T2772] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.812496][ T6] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 60.834293][ T6] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 60.847199][ T2772] device bridge_slave_1 entered promiscuous mode [ 60.952444][ T43] device bridge_slave_1 left promiscuous mode [ 60.959003][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.974415][ T43] device bridge_slave_0 left promiscuous mode [ 60.990583][ T28] audit: type=1400 audit(1756460119.545:731): avc: denied { watch } for pid=2803 comm="syz.5.1022" path="/178" dev="tmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.991638][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.042912][ T43] device veth1_macvtap left promiscuous mode [ 61.049518][ T43] device veth0_vlan left promiscuous mode [ 61.120263][ T2817] loop5: detected capacity change from 0 to 512 [ 61.120827][ T288] usb 3-1: USB disconnect, device number 10 [ 61.138532][ T2817] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 61.153779][ T2817] EXT4-fs (loop5): 1 truncate cleaned up [ 61.158150][ T2772] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.159569][ T2817] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 61.166461][ T2772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.166580][ T2772] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.189195][ T2772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.210944][ T758] EXT4-fs (loop5): unmounting filesystem. [ 61.216777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.224128][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.237662][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.252666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.261161][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.268229][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.276353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.284903][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.291980][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.309809][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.318081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.330280][ T28] audit: type=1400 audit(1756460119.886:732): avc: denied { mount } for pid=2829 comm="syz.5.1031" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.342301][ T2772] device veth0_vlan entered promiscuous mode [ 61.360978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.370306][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.378851][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.387099][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.400177][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.407869][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.415768][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.434660][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.444220][ T2772] device veth1_macvtap entered promiscuous mode [ 61.454742][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.462411][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.470733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.480253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.488559][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.598012][ T2836] loop5: detected capacity change from 0 to 8192 [ 61.778644][ T2858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'. [ 61.847499][ T2866] xt_bpf: check failed: parse error [ 62.064443][ T2904] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.111878][ T451] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 62.242266][ T2930] loop0: detected capacity change from 0 to 512 [ 62.252045][ T2930] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1075: Invalid inode bitmap blk 4 in block_group 0 [ 62.264907][ T2930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.286372][ T2772] EXT4-fs (loop0): unmounting filesystem. [ 62.292173][ T451] usb 3-1: Using ep0 maxpacket: 8 [ 62.303814][ T451] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 62.307874][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.312127][ T451] usb 3-1: config 179 has no interface number 0 [ 62.320635][ T2933] device bridge_slave_0 left promiscuous mode [ 62.325586][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 62.332230][ T2933] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.343004][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 62.361274][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 62.361701][ T2933] device bridge_slave_1 left promiscuous mode [ 62.372836][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 62.390236][ T451] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 62.390268][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.403481][ T451] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 62.419549][ T451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.430399][ T39] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 62.438213][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 62.449477][ T2868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.466989][ T2936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1077'. [ 62.619573][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 62.625875][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 62.633977][ T24] usb 5-1: config 0 has no interface number 0 [ 62.640115][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.651420][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.669308][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 62.678434][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.686570][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 62.696875][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 62.707072][ T24] usb 5-1: config 0 descriptor?? [ 62.713974][ T2935] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input18 [ 62.726230][ T39] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 62.735805][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.743917][ T39] usb 2-1: Product: syz [ 62.748146][ T39] usb 2-1: Manufacturer: syz [ 62.752848][ T39] usb 2-1: SerialNumber: syz [ 62.758559][ T39] usb 2-1: config 0 descriptor?? [ 62.763835][ T2917] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.771184][ T2917] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.904685][ T2868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.913361][ T2868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.979710][ T2917] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.986973][ T2917] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.137601][ T19] usb 3-1: USB disconnect, device number 11 [ 63.137623][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 63.152171][ T19] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 63.152252][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 63.323758][ T24] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0013/input/input19 [ 63.336090][ T24] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0013/input/input20 [ 63.350089][ T24] uclogic 0003:28BD:0071.0013: input,hiddev96,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 63.393259][ T39] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 63.524419][ T24] usb 5-1: USB disconnect, device number 8 [ 63.661363][ T2947] random: crng reseeded on system resumption [ 63.792387][ T39] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 63.803556][ T39] usb 2-1: USB disconnect, device number 7 [ 64.211269][ T2984] loop2: detected capacity change from 0 to 512 [ 64.221902][ T2984] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1098: casefold flag without casefold feature [ 64.234879][ T2984] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1098: couldn't read orphan inode 15 (err -117) [ 64.247037][ T2984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.261422][ T286] EXT4-fs (loop2): unmounting filesystem. [ 64.351978][ T39] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 64.422577][ T3011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 64.432540][ T3011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 64.442666][ T3011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 64.451628][ T19] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 64.462363][ T3013] loop2: detected capacity change from 0 to 2048 [ 64.504535][ T3013] Alternate GPT is invalid, using primary GPT. [ 64.511152][ T3013] loop2: p2 p3 p7 [ 64.551222][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 64.559925][ T39] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 64.569489][ T39] usb 1-1: config 179 has no interface number 0 [ 64.576378][ T39] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 64.587648][ T39] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 64.599255][ T39] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 64.620873][ T39] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 64.632605][ T39] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 64.641899][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.650728][ T39] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 64.666987][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.675911][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.687004][ T19] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 64.698073][ T2969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.717381][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.730659][ T19] usb 5-1: config 0 descriptor?? [ 64.952868][ T39] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input21 [ 65.043876][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.051082][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.058630][ T3029] device bridge_slave_0 entered promiscuous mode [ 65.066037][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.073274][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.083958][ T3029] device bridge_slave_1 entered promiscuous mode [ 65.134319][ T43] tipc: Left network mode [ 65.145268][ T19] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 65.168778][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.175852][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.176352][ T2969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.183170][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.191908][ T2969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.198762][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.218604][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 65.242849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.251076][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.260910][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.291155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.300527][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.307578][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.315485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.331654][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.338741][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.346236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.346341][ T19] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00 [ 65.368562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.395548][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.413729][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.422197][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.430048][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.430045][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.430075][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.430103][ T6] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 65.458470][ T3029] device veth0_vlan entered promiscuous mode [ 65.468079][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.481132][ T451] usb 1-1: USB disconnect, device number 6 [ 65.481318][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 65.481342][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 65.488961][ T6] usb 2-1: config 0 descriptor?? [ 65.496817][ T451] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 65.538511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.550784][ T3029] device veth1_macvtap entered promiscuous mode [ 65.553006][ T3055] loop5: detected capacity change from 0 to 128 [ 65.561538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.572452][ T3055] EXT4-fs: Ignoring removed nobh option [ 65.582337][ T3055] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 65.591145][ T3055] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.602361][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.629033][ T758] EXT4-fs (loop5): unmounting filesystem. [ 65.746975][ T19] cp2112 0003:10C4:EA90.0014: error setting SMBus config [ 65.760827][ T19] cp2112: probe of 0003:10C4:EA90.0014 failed with error -71 [ 65.786522][ T19] usb 5-1: USB disconnect, device number 9 [ 65.810040][ T3072] fido_id[3072]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 65.851057][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 65.851073][ T28] audit: type=1400 audit(1756460124.426:753): avc: denied { create } for pid=3073 comm="syz.5.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.878473][ T3062] loop2: detected capacity change from 0 to 40427 [ 65.879533][ T28] audit: type=1400 audit(1756460124.456:754): avc: denied { setopt } for pid=3073 comm="syz.5.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.886477][ T3062] F2FS-fs (loop2): Image doesn't support compression [ 65.909588][ T28] audit: type=1400 audit(1756460124.486:755): avc: denied { bind } for pid=3073 comm="syz.5.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.914375][ T3062] F2FS-fs (loop2): heap/no_heap options were deprecated [ 65.938277][ T6] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 65.943375][ T3062] F2FS-fs (loop2): invalid crc value [ 65.956149][ T6] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 65.962359][ T3062] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.973860][ T43] device bridge_slave_1 left promiscuous mode [ 65.984099][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.993344][ T43] device bridge_slave_0 left promiscuous mode [ 66.004689][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.008550][ T3062] F2FS-fs (loop2): Start checkpoint disabled! [ 66.026408][ T43] device veth1_macvtap left promiscuous mode [ 66.035928][ T43] device veth0_vlan left promiscuous mode [ 66.041764][ T3062] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 66.136758][ T6] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 66.159479][ T3084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 66.187913][ T3088] loop0: detected capacity change from 0 to 128 [ 66.206889][ T3088] EXT4-fs: Ignoring removed nobh option [ 66.218303][ T3088] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 66.227150][ T3088] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.258367][ T2772] EXT4-fs (loop0): unmounting filesystem. [ 66.309107][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.309107][ T8] loop2: rw=1, sector=53248, nr_sectors = 8 limit=40427 [ 66.330101][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.330101][ T8] loop2: rw=1, sector=53272, nr_sectors = 24 limit=40427 [ 66.346274][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.346274][ T8] loop2: rw=1, sector=53320, nr_sectors = 32 limit=40427 [ 66.349713][ T6] cp2112 0003:10C4:EA90.0015: error requesting SMBus config [ 66.367876][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.367876][ T8] loop2: rw=1, sector=53376, nr_sectors = 8 limit=40427 [ 66.381871][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.381871][ T8] loop2: rw=1, sector=53408, nr_sectors = 32 limit=40427 [ 66.382314][ T6] cp2112: probe of 0003:10C4:EA90.0015 failed with error -71 [ 66.396331][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.396331][ T8] loop2: rw=1, sector=53448, nr_sectors = 32 limit=40427 [ 66.417270][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.417270][ T8] loop2: rw=1, sector=53504, nr_sectors = 24 limit=40427 [ 66.422009][ T6] usb 2-1: USB disconnect, device number 8 [ 66.491539][ T3102] fido_id[3102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 66.496299][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.496299][ T8] loop2: rw=1, sector=53552, nr_sectors = 8 limit=40427 [ 66.573520][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.573520][ T8] loop2: rw=1, sector=53584, nr_sectors = 32 limit=40427 [ 66.588262][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.588262][ T8] loop2: rw=1, sector=53632, nr_sectors = 32 limit=40427 [ 66.779624][ T3116] loop0: detected capacity change from 0 to 40427 [ 66.789116][ T3116] F2FS-fs (loop0): Image doesn't support compression [ 66.796320][ T3116] F2FS-fs (loop0): heap/no_heap options were deprecated [ 66.804167][ T3116] F2FS-fs (loop0): invalid crc value [ 66.810428][ T3116] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.838327][ T3047] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 66.843593][ T3116] F2FS-fs (loop0): Start checkpoint disabled! [ 66.852728][ T3116] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 67.012625][ T28] audit: type=1400 audit(1756460125.600:756): avc: denied { name_bind } for pid=3130 comm="syz.2.1158" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.031864][ T3047] usb 5-1: Using ep0 maxpacket: 8 [ 67.040340][ T3047] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 67.056183][ T3047] usb 5-1: config 179 has no interface number 0 [ 67.062911][ T3047] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 67.081192][ T3047] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 67.094683][ T3047] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 67.107478][ T3047] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 67.119803][ T3047] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 67.133375][ T3047] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 67.151443][ T3047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.160637][ T3108] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 67.295020][ T28] audit: type=1400 audit(1756460125.871:757): avc: denied { getopt } for pid=3140 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.310864][ T19] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 67.388161][ T3139] loop2: detected capacity change from 0 to 40427 [ 67.405419][ T3139] F2FS-fs (loop2): invalid crc value [ 67.408560][ T3047] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input22 [ 67.412610][ T3139] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.460861][ T3139] F2FS-fs (loop2): Start checkpoint disabled! [ 67.467662][ T3139] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 67.501337][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.512481][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.523181][ T19] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 67.532475][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.542052][ T19] usb 2-1: config 0 descriptor?? [ 67.609908][ T6] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 67.621538][ T3108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.633075][ T3108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.804687][ T28] audit: type=1400 audit(1756460126.383:758): avc: denied { read write } for pid=758 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.820455][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.849291][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.854653][ T2935] usb 5-1: USB disconnect, device number 10 [ 67.859118][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 67.869043][ T28] audit: type=1400 audit(1756460126.403:759): avc: denied { ioctl } for pid=3142 comm="syz.0.1163" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.873566][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 67.906280][ T2935] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 67.909574][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.927379][ T3155] loop2: detected capacity change from 0 to 8192 [ 67.929522][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.946977][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.963693][ T19] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 68.050231][ T28] audit: type=1400 audit(1756460126.403:760): avc: denied { open } for pid=758 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.053624][ T6] usb 1-1: config 0 descriptor?? [ 68.084493][ T28] audit: type=1400 audit(1756460126.403:761): avc: denied { ioctl } for pid=758 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.119871][ T28] audit: type=1400 audit(1756460126.493:762): avc: denied { create } for pid=3158 comm="syz.5.1170" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.158070][ T19] cp2112 0003:10C4:EA90.0016: Part Number: 0x00 Device Version: 0x00 [ 68.230477][ T3175] loop5: detected capacity change from 0 to 512 [ 68.250023][ T3175] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.259439][ T3175] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.301613][ T758] EXT4-fs (loop5): unmounting filesystem. [ 68.513709][ T6] plantronics 0003:047F:FFFF.0017: unknown main item tag 0xd [ 68.525034][ T6] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 68.551448][ T6] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 68.564921][ T19] cp2112 0003:10C4:EA90.0016: error setting SMBus config [ 68.572744][ T19] cp2112: probe of 0003:10C4:EA90.0016 failed with error -71 [ 68.589026][ T19] usb 2-1: USB disconnect, device number 9 [ 68.617523][ T3216] fido_id[3216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 68.783210][ T3234] input: syz1 as /devices/virtual/input/input24 [ 68.796394][ T3234] input: failed to attach handler leds to device input24, error: -6 [ 68.876765][ T451] usb 1-1: USB disconnect, device number 7 [ 69.116671][ T3250] netem: change failed [ 69.275577][ T3254] loop5: detected capacity change from 0 to 40427 [ 69.289526][ T3254] F2FS-fs (loop5): invalid crc value [ 69.295986][ T3254] F2FS-fs (loop5): Found nat_bits in checkpoint [ 69.320516][ T3254] F2FS-fs (loop5): Start checkpoint disabled! [ 69.327394][ T3254] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 69.344426][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 69.356444][ T3269] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 69.365422][ T3269] overlayfs: missing 'lowerdir' [ 69.406874][ T3271] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 69.429253][ T3271] F2FS-fs (loop9): Unable to read 1th superblock [ 69.436182][ T3271] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 69.446746][ T3271] F2FS-fs (loop9): Unable to read 2th superblock [ 69.539077][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 69.545517][ T39] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 69.565313][ T39] usb 2-1: config 179 has no interface number 0 [ 69.578949][ T3289] binder: 3288:3289 ioctl c0306201 2000000003c0 returned -22 [ 69.583579][ T39] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 69.601692][ T39] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 69.615179][ T39] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.626732][ T39] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 69.639836][ T39] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 69.653463][ T39] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 69.665837][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.684209][ T3244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.695361][ T3295] loop4: detected capacity change from 0 to 512 [ 69.724982][ T3295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.734499][ T3295] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.823010][ T2935] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 69.824531][ T283] EXT4-fs (loop4): unmounting filesystem. [ 69.909248][ T451] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input25 [ 70.023871][ T2935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.032401][ T19] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.034955][ T2935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.052092][ T2935] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 70.061169][ T2935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.070134][ T2935] usb 1-1: config 0 descriptor?? [ 70.111514][ T3244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.112186][ T3047] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 70.120386][ T3244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.223025][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.234014][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.248554][ T19] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.261731][ T19] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.270770][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.283781][ T19] usb 6-1: config 0 descriptor?? [ 70.302733][ T3047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.313932][ T3047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.323737][ T3047] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 70.333379][ T3047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.363267][ T3047] usb 5-1: config 0 descriptor?? [ 70.368215][ T3316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.382560][ T288] usb 2-1: USB disconnect, device number 10 [ 70.382563][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 70.382724][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 70.405486][ T288] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 70.409339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 70.424475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.433381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 70.441861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.450103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.458466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.467326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.475796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.485075][ T2935] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 70.492974][ T2935] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 70.552650][ T3318] device wg2 entered promiscuous mode [ 70.684157][ T2935] cp2112 0003:10C4:EA90.0018: Part Number: 0x82 Device Version: 0xFE [ 70.691407][ T19] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 70.700938][ T19] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 70.710181][ T19] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 70.780057][ T3047] samsung 0003:0419:0001.001A: hidraw2: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 70.890044][ T2935] cp2112 0003:10C4:EA90.0018: error requesting SMBus config [ 70.910616][ T2935] cp2112: probe of 0003:10C4:EA90.0018 failed with error -71 [ 70.920277][ T2935] usb 1-1: USB disconnect, device number 8 [ 70.945669][ T3329] fido_id[3329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 70.980715][ T3047] usb 6-1: USB disconnect, device number 7 [ 71.014227][ T451] usb 5-1: USB disconnect, device number 11 [ 71.159773][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 71.201752][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 71.201764][ T28] audit: type=1400 audit(1756460129.793:825): avc: denied { name_bind } for pid=3330 comm="syz.1.1241" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 71.230816][ T28] audit: type=1400 audit(1756460129.793:826): avc: denied { node_bind } for pid=3330 comm="syz.1.1241" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 71.348866][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 71.355094][ T24] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 71.365384][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.375574][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.384630][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.392714][ T24] usb 3-1: Product: syz [ 71.396859][ T24] usb 3-1: Manufacturer: syz [ 71.401463][ T24] usb 3-1: SerialNumber: syz [ 71.488841][ T28] audit: type=1400 audit(1756460130.084:827): avc: denied { create } for pid=3342 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.526396][ T28] audit: type=1400 audit(1756460130.084:828): avc: denied { setopt } for pid=3342 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.550083][ T451] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 71.565184][ T28] audit: type=1400 audit(1756460130.084:829): avc: denied { bind } for pid=3342 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.595918][ T3356] xt_hashlimit: size too large, truncated to 1048576 [ 71.606209][ T28] audit: type=1400 audit(1756460130.104:830): avc: denied { mount } for pid=3344 comm="syz.5.1248" name="/" dev="configfs" ino=14649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 71.648773][ T28] audit: type=1400 audit(1756460130.114:831): avc: denied { create } for pid=3347 comm="syz.0.1249" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.671024][ T28] audit: type=1400 audit(1756460130.114:832): avc: denied { ioctl } for pid=3347 comm="syz.0.1249" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29385 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.697675][ T28] audit: type=1400 audit(1756460130.144:833): avc: denied { unmount } for pid=758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 71.718220][ T28] audit: type=1400 audit(1756460130.164:834): avc: denied { read } for pid=3351 comm="syz.0.1250" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.758597][ T451] usb 2-1: config 16 has an invalid interface number: 131 but max is 0 [ 71.766998][ T451] usb 2-1: config 16 has no interface number 0 [ 71.790554][ T451] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 71.804630][ T451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.819404][ T451] usb-storage 2-1:16.131: USB Mass Storage device detected [ 71.831322][ T24] usb 3-1: 0:2 : does not exist [ 71.857942][ T451] usb-storage 2-1:16.131: Quirks match for vid 04e6 pid 000b: 4 [ 71.928487][ T3373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 71.964334][ T3378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 71.996526][ T3381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1265'. [ 72.026227][ T3047] usb 2-1: USB disconnect, device number 11 [ 72.081415][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.088550][ T3383] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.095999][ T3383] device bridge_slave_0 entered promiscuous mode [ 72.103370][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.111320][ T3383] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.119396][ T3383] device bridge_slave_1 entered promiscuous mode [ 72.226496][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.233582][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.240897][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.247946][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.259044][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 72.274556][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.283181][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.293674][ T24] usb 3-1: USB disconnect, device number 12 [ 72.307891][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.328318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.336615][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.343644][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.351562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.362024][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.369092][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.376170][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 72.384511][ T8] device bridge_slave_1 left promiscuous mode [ 72.390924][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.398758][ T8] device bridge_slave_0 left promiscuous mode [ 72.404894][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.413471][ T8] device veth1_macvtap left promiscuous mode [ 72.419569][ T8] device veth0_vlan left promiscuous mode [ 72.516672][ T1130] udevd[1130]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.538168][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.553582][ T3406] xt_hashlimit: size too large, truncated to 1048576 [ 72.561188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.576908][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.579478][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.596130][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.618599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.625674][ T39] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 72.636037][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.636232][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.657817][ T3383] device veth0_vlan entered promiscuous mode [ 72.664361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.668528][ T39] usb 5-1: config 0 descriptor?? [ 72.677187][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.695226][ T3383] device veth1_macvtap entered promiscuous mode [ 72.702110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.711124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.719460][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.727814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.736417][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.753921][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.762508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.770987][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.787234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.870264][ T3419] input: syz1 as /devices/virtual/input/input27 [ 72.877712][ T3419] input: failed to attach handler leds to device input27, error: -6 [ 73.091250][ T39] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 73.099677][ T39] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 73.110931][ T451] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.129334][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.136611][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.144045][ T3430] device bridge_slave_0 entered promiscuous mode [ 73.151244][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.158598][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.166534][ T3430] device bridge_slave_1 entered promiscuous mode [ 73.185710][ T3446] binder: 3445:3446 ioctl c0306201 2000000003c0 returned -22 [ 73.251246][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.258319][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.265618][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.272643][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.290466][ T39] cp2112 0003:10C4:EA90.001B: Part Number: 0x82 Device Version: 0xFE [ 73.299770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.299762][ T451] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.299791][ T451] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.327759][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.328095][ T451] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.347927][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.356420][ T3458] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 73.365253][ T451] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.374324][ T3458] overlayfs: missing 'lowerdir' [ 73.379292][ T451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.389516][ T451] usb 7-1: config 0 descriptor?? [ 73.402219][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.410837][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.417899][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.428365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.432558][ T3461] block device autoloading is deprecated and will be removed. [ 73.439067][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.445247][ T3461] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.450961][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.467961][ T3461] F2FS-fs (loop1): Unable to read 1th superblock [ 73.474720][ T3461] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.483966][ T3461] F2FS-fs (loop1): Unable to read 2th superblock [ 73.490989][ T39] cp2112 0003:10C4:EA90.001B: error requesting SMBus config [ 73.498978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.501094][ T39] cp2112: probe of 0003:10C4:EA90.001B failed with error -71 [ 73.507101][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.538095][ T3430] device veth0_vlan entered promiscuous mode [ 73.541654][ T39] usb 5-1: USB disconnect, device number 12 [ 73.554746][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.563027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.574259][ T3462] fido_id[3462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 73.585774][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.598981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.609887][ T8] device bridge_slave_1 left promiscuous mode [ 73.616496][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.628953][ T8] device bridge_slave_0 left promiscuous mode [ 73.635328][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.643330][ T8] device veth1_macvtap left promiscuous mode [ 73.649385][ T8] device veth0_vlan left promiscuous mode [ 73.750724][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.759145][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.768290][ T3430] device veth1_macvtap entered promiscuous mode [ 73.777980][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.786511][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.795037][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.807483][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.812433][ T451] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 73.815805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.825066][ T451] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 73.840796][ T451] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 73.882767][ T19] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 73.918903][ T3475] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1299'. [ 74.093266][ T19] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 74.103206][ T19] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 74.115148][ T19] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 74.124477][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.136927][ T19] usb 1-1: Product: syz [ 74.146018][ T19] usb 1-1: Manufacturer: syz [ 74.150643][ T19] usb 1-1: SerialNumber: syz [ 74.156299][ T3047] usb 7-1: USB disconnect, device number 2 [ 74.162969][ T19] usb 1-1: config 0 descriptor?? [ 74.168394][ T3465] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 74.176041][ T3465] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 74.385591][ T3465] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 74.393379][ T3465] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 74.658735][ T3523] loop6: detected capacity change from 0 to 512 [ 74.666668][ T3523] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.750931][ T3535] loop7: detected capacity change from 0 to 512 [ 74.775609][ T3535] EXT4-fs: Ignoring removed nobh option [ 74.787368][ T3535] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 74.799307][ T3535] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 74.810829][ T3535] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1326: Corrupt directory, running e2fsck is recommended [ 74.811218][ T19] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 74.833956][ T3535] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 74.867466][ T3535] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.1326: corrupted in-inode xattr [ 74.889892][ T3535] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1326: couldn't read orphan inode 15 (err -117) [ 74.915808][ T3535] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 74.945843][ T3535] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 74.972542][ T3535] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 74.995234][ T3535] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1326: Corrupt directory, running e2fsck is recommended [ 75.010127][ T3555] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.022045][ T3555] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 75.032394][ T3555] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1326: Corrupt directory, running e2fsck is recommended [ 75.048886][ T3535] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.066924][ T3535] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 75.077582][ T3535] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1326: Corrupt directory, running e2fsck is recommended [ 75.097057][ T3535] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.125518][ T3430] EXT4-fs (loop7): unmounting filesystem. [ 75.165135][ T3569] loop7: detected capacity change from 0 to 256 [ 75.191515][ T3569] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.221813][ T19] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 75.233333][ T19] usb 1-1: USB disconnect, device number 9 [ 75.259746][ T3047] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 75.445861][ T3047] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.461557][ T3047] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.481583][ T3047] usb 7-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 75.491285][ T3047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.502560][ T3047] usb 7-1: config 0 descriptor?? [ 75.699479][ T335] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 75.748817][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 75.826322][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.878545][ T335] usb 8-1: Using ep0 maxpacket: 8 [ 75.884582][ T335] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.892882][ T335] usb 8-1: config 179 has no interface number 0 [ 75.899172][ T335] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 75.910611][ T335] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 75.921905][ T335] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.933834][ T335] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 75.945454][ T335] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 75.958742][ T335] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 75.969208][ T3047] samsung 0003:0419:0001.001D: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.6-1/input0 [ 75.969905][ T24] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 75.980517][ T335] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.988878][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 75.999534][ T3584] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 76.015723][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 76.026974][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.039973][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.049064][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.057747][ T24] usb 2-1: config 0 descriptor?? [ 76.063026][ T3588] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 76.179794][ T335] usb 7-1: USB disconnect, device number 3 [ 76.203294][ T3623] loop0: detected capacity change from 0 to 512 [ 76.211580][ T3623] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.228726][ T3047] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input29 [ 76.428863][ T3584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.437471][ T3584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.472632][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 76.481476][ T24] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 76.490517][ T24] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 76.646881][ T335] usb 8-1: USB disconnect, device number 2 [ 76.646916][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 76.661109][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 76.669826][ T335] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 76.757486][ T19] usb 2-1: USB disconnect, device number 12 [ 76.966476][ T39] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.147190][ T39] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 77.157087][ T39] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 77.168414][ T39] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 77.177526][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.185492][ T39] usb 7-1: Product: syz [ 77.189674][ T39] usb 7-1: Manufacturer: syz [ 77.194264][ T39] usb 7-1: SerialNumber: syz [ 77.199431][ T39] usb 7-1: config 0 descriptor?? [ 77.204666][ T3630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 77.211917][ T3630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 77.277248][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 77.277260][ T28] audit: type=1326 audit(1756460135.886:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3637 comm="syz.7.1370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc83398ebe9 code=0x0 [ 77.421800][ T3630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 77.429719][ T3630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 77.838580][ T39] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 77.855020][ T1195] Bluetooth: hci0: command 0x1003 tx timeout [ 77.855208][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.115913][ T3648] loop0: detected capacity change from 0 to 512 [ 78.123245][ T3648] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.128187][ T28] audit: type=1400 audit(1756460136.738:868): avc: denied { listen } for pid=3652 comm="syz.1.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.140728][ T3648] EXT4-fs (loop0): 1 truncate cleaned up [ 78.152587][ T28] audit: type=1400 audit(1756460136.738:869): avc: denied { mounton } for pid=3652 comm="syz.1.1375" path="/69/file0" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.158154][ T3648] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.189642][ T28] audit: type=1400 audit(1756460136.788:870): avc: denied { read append open } for pid=3646 comm="syz.0.1384" path="/73/file2/blkio.bfq.avg_queue_size" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.215075][ T28] audit: type=1400 audit(1756460136.788:871): avc: denied { ioctl } for pid=3646 comm="syz.0.1384" path="/73/file2/blkio.bfq.avg_queue_size" dev="loop0" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.216253][ T2772] EXT4-fs (loop0): unmounting filesystem. [ 78.244631][ T39] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 78.256789][ T39] usb 7-1: USB disconnect, device number 4 [ 78.281500][ T3659] loop0: detected capacity change from 0 to 512 [ 78.291037][ T3659] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.394022][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 78.401684][ T451] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.583736][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 78.589947][ T451] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.601037][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 78.609147][ T451] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.618922][ T24] usb 5-1: config 0 has no interface number 0 [ 78.625055][ T451] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 78.634119][ T451] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.643091][ T451] usb 8-1: config 0 descriptor?? [ 78.648187][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 78.657530][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.665612][ T24] usb 5-1: Product: syz [ 78.670335][ T24] usb 5-1: Manufacturer: syz [ 78.674984][ T24] usb 5-1: SerialNumber: syz [ 78.680146][ T24] usb 5-1: config 0 descriptor?? [ 78.685910][ T24] smsc95xx v2.0.0 [ 78.791538][ T3668] loop6: detected capacity change from 0 to 128 [ 78.850558][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.862754][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 78.871282][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.882495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 78.892053][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.900662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.909054][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.917513][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.926334][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.938878][ T28] audit: type=1400 audit(1756460137.549:872): avc: denied { write } for pid=3677 comm="syz.6.1387" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.024382][ T28] audit: type=1400 audit(1756460137.639:873): avc: denied { setopt } for pid=3690 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.085288][ T451] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 79.094224][ T451] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 79.149221][ T28] audit: type=1400 audit(1756460137.759:874): avc: denied { create } for pid=3703 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.184252][ T28] audit: type=1400 audit(1756460137.759:875): avc: denied { ioctl } for pid=3703 comm="syz.1.1399" path="socket:[31441]" dev="sockfs" ino=31441 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.215554][ T28] audit: type=1400 audit(1756460137.759:876): avc: denied { write } for pid=3703 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.280191][ T451] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 79.349835][ T3726] loop1: detected capacity change from 0 to 512 [ 79.369962][ T3726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.379372][ T3726] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.411222][ T2506] EXT4-fs (loop1): unmounting filesystem. [ 79.443861][ T3737] SELinux: failed to load policy [ 79.480508][ T451] cp2112 0003:10C4:EA90.001F: error requesting SMBus config [ 79.492543][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 79.502600][ T451] cp2112: probe of 0003:10C4:EA90.001F failed with error -71 [ 79.517953][ T451] usb 8-1: USB disconnect, device number 3 [ 79.566314][ T3750] fido_id[3750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 79.626266][ T3762] loop0: detected capacity change from 0 to 512 [ 79.643998][ T3762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.653106][ T3762] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.675768][ T2772] EXT4-fs (loop0): unmounting filesystem. [ 79.694876][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 79.712243][ T24] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 79.724765][ T24] usb 5-1: USB disconnect, device number 13 [ 79.739446][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.762742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 79.781608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.790797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 79.809399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.824155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.834519][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.845126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.854355][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.902835][ T3790] loop6: detected capacity change from 0 to 512 [ 79.929155][ T3790] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 79.938798][ T3790] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.964430][ T3383] EXT4-fs (loop6): unmounting filesystem. [ 80.090286][ T24] hid-generic 0000:0004:0000.0020: unknown main item tag 0x0 [ 80.093850][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.107991][ T24] hid-generic 0000:0004:0000.0020: unknown main item tag 0x0 [ 80.112785][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 80.125697][ T24] hid-generic 0000:0004:0000.0020: unknown main item tag 0x0 [ 80.134886][ T24] hid-generic 0000:0004:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 80.145072][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.164882][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 80.183813][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.187500][ T3827] fido_id[3827]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.195338][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.217305][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.237305][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.245945][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.263002][ T3831] loop4: detected capacity change from 0 to 512 [ 80.282780][ T3831] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.294210][ T3831] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.338891][ T283] EXT4-fs (loop4): unmounting filesystem. [ 80.386690][ T3852] loop7: detected capacity change from 0 to 128 [ 80.412949][ T1130] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.434704][ T3859] loop7: detected capacity change from 0 to 512 [ 80.441982][ T3859] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.498866][ T3867] loop7: detected capacity change from 0 to 512 [ 80.513614][ T3867] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 80.522664][ T3867] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.551099][ T3430] EXT4-fs (loop7): unmounting filesystem. [ 80.640403][ T3874] loop7: detected capacity change from 0 to 512 [ 80.647408][ T3874] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 80.669798][ T3874] EXT4-fs (loop7): 1 truncate cleaned up [ 80.675693][ T3874] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 80.677029][ T3877] loop0: detected capacity change from 0 to 2048 [ 80.700965][ T3430] EXT4-fs (loop7): unmounting filesystem. [ 80.703308][ T3877] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.715353][ T3877] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.740861][ T3877] fs-verity: sha512 using implementation "sha512-avx2" [ 80.760883][ T2772] EXT4-fs (loop0): unmounting filesystem. [ 80.766698][ T288] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 80.795745][ T3886] loop0: detected capacity change from 0 to 512 [ 80.806028][ T3886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.823821][ T2772] EXT4-fs (loop0): unmounting filesystem. [ 80.837334][ T3889] loop0: detected capacity change from 0 to 128 [ 80.845442][ T3889] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.854763][ T3889] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.891382][ T2772] EXT4-fs (loop0): unmounting filesystem. [ 80.950108][ T288] usb 5-1: Using ep0 maxpacket: 16 [ 80.956462][ T288] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 80.965239][ T288] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.975500][ T288] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.986445][ T288] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.995962][ T288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.004051][ T288] usb 5-1: Product: syz [ 81.008248][ T288] usb 5-1: Manufacturer: syz [ 81.012853][ T288] usb 5-1: SerialNumber: syz [ 81.307684][ T3926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1495'. [ 81.421786][ T288] usb 5-1: 0:2 : does not exist [ 81.574580][ T3946] loop1: detected capacity change from 0 to 512 [ 81.590269][ T3946] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 81.598379][ T3946] System zones: 0-2, 18-18, 34-35 [ 81.604399][ T3946] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.613760][ T3946] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.633714][ T2506] EXT4-fs (loop1): unmounting filesystem. [ 82.026365][ T288] usb 5-1: USB disconnect, device number 14 [ 82.038631][ T451] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 82.088769][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.105900][ T4024] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 82.239400][ T451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.252523][ T1130] udevd[1130]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.268350][ T451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.283236][ T451] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.296210][ T451] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.305762][ T451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.314742][ T24] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.328971][ T451] usb 2-1: config 0 descriptor?? [ 82.334093][ T24] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.345703][ T4048] syz.0.1551[4048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.345770][ T4048] syz.0.1551[4048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.345769][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 82.347021][ T24] usb 8-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 82.385346][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.401971][ T24] usb 8-1: config 0 descriptor?? [ 82.423947][ T28] kauditd_printk_skb: 166 callbacks suppressed [ 82.423960][ T28] audit: type=1400 audit(1756460141.034:1043): avc: denied { relabelfrom } for pid=4049 comm="syz.0.1552" name="" dev="pipefs" ino=33905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 82.457061][ T28] audit: type=1400 audit(1756460141.034:1044): avc: denied { bind } for pid=4051 comm="syz.6.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.477059][ T28] audit: type=1400 audit(1756460141.034:1045): avc: denied { name_bind } for pid=4051 comm="syz.6.1553" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 82.498705][ T28] audit: type=1400 audit(1756460141.034:1046): avc: denied { node_bind } for pid=4051 comm="syz.6.1553" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 82.727839][ T28] audit: type=1400 audit(1756460141.344:1047): avc: denied { read } for pid=4083 comm="syz.4.1569" path="socket:[34008]" dev="sockfs" ino=34008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.754618][ T451] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 82.770218][ T451] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 82.787022][ T4093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 82.812032][ T28] audit: type=1400 audit(1756460141.424:1048): avc: denied { write } for pid=4090 comm="syz.6.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.843150][ T24] input: HID 054c:03d5 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:054C:03D5.0022/input/input31 [ 82.867397][ T24] sony 0003:054C:03D5.0022: input,hidraw1: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.7-1/input0 [ 82.884584][ T28] audit: type=1400 audit(1756460141.495:1049): avc: denied { write } for pid=4103 comm="syz.4.1576" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.946872][ T28] audit: type=1400 audit(1756460141.525:1050): avc: denied { create } for pid=4103 comm="syz.4.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.034057][ T24] usb 8-1: USB disconnect, device number 4 [ 83.039014][ T288] usb 2-1: USB disconnect, device number 13 [ 83.182627][ T4127] tipc: Started in network mode [ 83.187579][ T4127] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.194527][ T4127] tipc: Enabled bearer , priority 10 [ 83.486795][ T39] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 83.554459][ T28] audit: type=1400 audit(1756460142.165:1051): avc: denied { unmount } for pid=2506 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.632706][ T28] audit: type=1326 audit(1756460142.245:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.6.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ad8ebe9 code=0x7ffc0000 [ 83.690274][ T39] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 83.700248][ T39] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 83.724441][ T39] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 83.733903][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.742128][ T39] usb 1-1: Product: syz [ 83.747751][ T39] usb 1-1: Manufacturer: syz [ 83.752404][ T39] usb 1-1: SerialNumber: syz [ 83.769694][ T39] usb 1-1: config 0 descriptor?? [ 83.774942][ T4131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.786650][ T4131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.906326][ T451] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 83.914314][ T4172] netlink: 516 bytes leftover after parsing attributes in process `syz.6.1608'. [ 84.006066][ T4131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.023701][ T4131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.110688][ T451] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.121015][ T451] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.131616][ T451] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.141491][ T451] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.149719][ T451] usb 8-1: Product: syz [ 84.153976][ T451] usb 8-1: Manufacturer: syz [ 84.158850][ T451] usb 8-1: SerialNumber: syz [ 84.280054][ T4164] loop4: detected capacity change from 0 to 131072 [ 84.297530][ T4164] F2FS-fs (loop4): Test dummy encryption mode enabled [ 84.305996][ T335] tipc: Node number set to 2886997162 [ 84.312870][ T4164] F2FS-fs (loop4): invalid crc value [ 84.319707][ T4164] F2FS-fs (loop4): Found nat_bits in checkpoint [ 84.356456][ T4164] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 84.378731][ T451] usb 8-1: 0:2 : does not exist [ 84.390694][ T451] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 84.411015][ T451] usb 8-1: USB disconnect, device number 5 [ 84.538329][ T4217] loop1: detected capacity change from 0 to 512 [ 84.554269][ T4217] EXT4-fs: Ignoring removed nobh option [ 84.569174][ T4217] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #3: comm syz.1.1628: corrupted inode contents [ 84.581254][ T4217] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #3: comm syz.1.1628: mark_inode_dirty error [ 84.593110][ T4217] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #3: comm syz.1.1628: corrupted inode contents [ 84.605131][ T4217] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.1628: mark_inode_dirty error [ 84.616834][ T4217] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.1628: Failed to acquire dquot type 0 [ 84.628674][ T4217] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1628: corrupted inode contents [ 84.646319][ T4217] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #16: comm syz.1.1628: mark_inode_dirty error [ 84.658533][ T4217] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1628: corrupted inode contents [ 84.670902][ T4217] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1628: mark_inode_dirty error [ 84.682463][ T4217] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1628: corrupted inode contents [ 84.697016][ T4217] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 84.705797][ T4217] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1628: corrupted inode contents [ 84.718029][ T4217] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.1628: mark_inode_dirty error [ 84.729679][ T4217] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 84.739098][ T4217] EXT4-fs (loop1): 1 truncate cleaned up [ 84.744899][ T4217] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.754297][ T4217] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.798015][ T2506] EXT4-fs (loop1): unmounting filesystem. [ 84.849195][ T39] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 84.859976][ T39] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 84.876188][ T39] usb 1-1: USB disconnect, device number 10 [ 84.882587][ T39] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 84.930948][ T4248] tmpfs: Unknown parameter 'gr' [ 85.075504][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1652'. [ 85.085056][ T335] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 85.204938][ T2935] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 85.266819][ T335] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.279830][ T335] usb 2-1: config 1 interface 0 has no altsetting 0 [ 85.288109][ T335] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.297296][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.305489][ T335] usb 2-1: SerialNumber: syz [ 85.395750][ T2935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 85.406982][ T2935] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 85.416053][ T2935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.424829][ T2935] usb 5-1: config 0 descriptor?? [ 85.430201][ T4246] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.734283][ T3047] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 85.840188][ T2935] hid-generic 0003:04F3:0755.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 85.914150][ T3047] usb 1-1: Using ep0 maxpacket: 16 [ 85.920639][ T335] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 85.936286][ T3047] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 85.944371][ T3047] usb 1-1: config 0 has no interface number 0 [ 85.950462][ T3047] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.970583][ T3047] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 85.979713][ T3047] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 85.987884][ T3047] usb 1-1: Product: syz [ 85.992051][ T3047] usb 1-1: SerialNumber: syz [ 85.997951][ T3047] usb 1-1: config 0 descriptor?? [ 86.184957][ T4346] netlink: 'syz.6.1676': attribute type 10 has an invalid length. [ 86.192933][ T4346] netlink: 'syz.6.1676': attribute type 17 has an invalid length. [ 86.201686][ T4346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.230225][ T3047] usb 1-1: USB disconnect, device number 11 [ 86.442096][ T451] usb 2-1: USB disconnect, device number 14 [ 86.448686][ T451] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 86.599213][ T4402] loop7: detected capacity change from 0 to 1024 [ 86.614136][ T4402] EXT4-fs: Ignoring removed orlov option [ 86.632729][ T4402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.641526][ T4409] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.651900][ T4409] FAT-fs (loop13): unable to read boot sector [ 86.664845][ T4402] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 86.784900][ T3430] EXT4-fs (loop7): unmounting filesystem. [ 86.810461][ T4446] loop7: detected capacity change from 0 to 1024 [ 86.845502][ T4446] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 86.885736][ T4446] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.1708: Allocating blocks 497-513 which overlap fs metadata [ 86.899252][ T4458] overlayfs: failed to resolve './file0': -2 [ 86.908614][ T4446] EXT4-fs (loop7): pa ffff888107c5e498: logic 256, phys. 385, len 8 [ 86.916703][ T4446] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 86.970483][ T3430] EXT4-fs (loop7): unmounting filesystem. [ 87.073686][ T4490] ip_tunnel: non-ECT from 100.1.1.1 with TOS=0x92 [ 87.163204][ T4467] loop1: detected capacity change from 0 to 40427 [ 87.173459][ T4467] F2FS-fs (loop1): invalid crc value [ 87.190089][ T4467] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.226300][ T4467] F2FS-fs (loop1): Start checkpoint disabled! [ 87.233227][ T4467] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 87.272857][ T39] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 87.290565][ T4467] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 87.328517][ T8] bio_check_eod: 1175 callbacks suppressed [ 87.328533][ T8] kworker/u4:0: attempt to access beyond end of device [ 87.328533][ T8] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 87.432639][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 87.432654][ T28] audit: type=1326 audit(1756460146.049:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ad8ebe9 code=0x7ffc0000 [ 87.462666][ T2935] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 87.466996][ T28] audit: type=1326 audit(1756460146.049:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd35ad8ebe9 code=0x7ffc0000 [ 87.502635][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 87.510013][ T39] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 87.516950][ T28] audit: type=1326 audit(1756460146.049:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ad8ebe9 code=0x7ffc0000 [ 87.533914][ T39] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 87.542941][ T28] audit: type=1326 audit(1756460146.049:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd35ad8ebe9 code=0x7ffc0000 [ 87.576293][ T28] audit: type=1326 audit(1756460146.059:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd35ad2ade9 code=0x7ffc0000 [ 87.581663][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.601998][ T28] audit: type=1326 audit(1756460146.059:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd35ad2ade9 code=0x7ffc0000 [ 87.640062][ T28] audit: type=1326 audit(1756460146.059:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd35ad2ade9 code=0x7ffc0000 [ 87.647855][ T39] usb 8-1: Product: syz [ 87.667600][ T2935] usb 1-1: Using ep0 maxpacket: 16 [ 87.673014][ T28] audit: type=1326 audit(1756460146.059:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd35ad2ade9 code=0x7ffc0000 [ 87.673787][ T2935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.713659][ T28] audit: type=1326 audit(1756460146.059:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd35ad2ade9 code=0x7ffc0000 [ 87.722348][ T39] usb 8-1: Manufacturer: syz [ 87.737413][ T28] audit: type=1326 audit(1756460146.059:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd35ad2ade9 code=0x7ffc0000 [ 87.771691][ T335] usb 5-1: USB disconnect, device number 15 [ 87.777709][ T39] usb 8-1: SerialNumber: syz [ 87.782358][ T2935] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.782393][ T6] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 87.803313][ T39] usb 8-1: config 0 descriptor?? [ 87.809451][ T39] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 87.828959][ T2935] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.838796][ T39] usb 8-1: Detected FT232R [ 87.852281][ T2935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 87.860338][ T2935] usb 1-1: SerialNumber: syz [ 88.009185][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 88.013166][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.027150][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.037382][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.050558][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.059786][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.071250][ T6] usb 2-1: config 0 descriptor?? [ 88.079815][ T2935] usb 1-1: USB disconnect, device number 12 [ 88.217954][ T39] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 88.361805][ T335] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 88.424399][ T2935] usb 8-1: USB disconnect, device number 6 [ 88.433041][ T2935] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 88.442693][ T2935] ftdi_sio 8-1:0.0: device disconnected [ 88.488790][ T6] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 88.497089][ T6] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 88.504511][ T6] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 88.511954][ T6] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 88.519324][ T6] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 88.526952][ T6] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 88.534408][ T6] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 88.541810][ T6] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 88.549196][ T6] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 88.556766][ T6] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 88.565537][ T335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.575788][ T335] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.584800][ T6] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 88.602230][ T335] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.611285][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.619497][ T335] usb 5-1: SerialNumber: syz [ 88.782018][ T2935] usb 2-1: USB disconnect, device number 15 [ 88.832840][ T335] usb 5-1: 0:2 : does not exist [ 88.840407][ T335] usb 5-1: USB disconnect, device number 16 [ 88.901420][ T39] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 89.082405][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.101168][ T39] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 89.118178][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.133567][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.151203][ T39] usb 1-1: Product: syz [ 89.155421][ T39] usb 1-1: Manufacturer: syz [ 89.160011][ T39] usb 1-1: SerialNumber: syz [ 89.181599][ T39] cdc_mbim 1-1:1.0: skipping garbage [ 89.307855][ T4627] loop1: detected capacity change from 0 to 512 [ 89.334504][ T4627] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.381336][ T4596] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.402275][ T4627] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1788: invalid indirect mapped block 4294967295 (level 0) [ 89.421222][ T4627] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1788: invalid indirect mapped block 4294967295 (level 1) [ 89.438948][ T4627] EXT4-fs (loop1): 1 orphan inode deleted [ 89.445363][ T4627] EXT4-fs (loop1): 1 truncate cleaned up [ 89.451251][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.482115][ T4627] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 89.504352][ T2506] EXT4-fs (loop1): unmounting filesystem. [ 90.002577][ T4596] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.009878][ T39] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 90.017464][ T39] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 90.050416][ T6] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 90.114023][ T4662] loop7: detected capacity change from 0 to 256 [ 90.140905][ T4662] syz.7.1801: attempt to access beyond end of device [ 90.140905][ T4662] loop7: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 90.183500][ T4670] x_tables: duplicate underflow at hook 4 [ 90.212409][ T39] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 90.223519][ T39] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 90.231348][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.238001][ T39] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 36:17:46:55:06:89 [ 90.250585][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.278877][ T39] usb 1-1: USB disconnect, device number 13 [ 90.289514][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.292104][ T39] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 90.312384][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.325690][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.341203][ T6] usb 2-1: config 0 descriptor?? [ 90.356976][ T4676] loop7: detected capacity change from 0 to 512 [ 90.381113][ T4676] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 90.398203][ T4693] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 90.413198][ T4676] EXT4-fs (loop7): 1 truncate cleaned up [ 90.421918][ T4676] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 90.458812][ T3430] EXT4-fs (loop7): unmounting filesystem. [ 90.659960][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 90.743078][ T6] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xe [ 90.750724][ T6] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 90.767048][ T6] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 90.802627][ T6] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 90.859850][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 90.874575][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.899868][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.920521][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.939801][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.958356][ T24] usb 5-1: Product: syz [ 90.962723][ T24] usb 5-1: Manufacturer: syz [ 90.972840][ T24] usb 5-1: SerialNumber: syz [ 91.020578][ T6] usb 2-1: USB disconnect, device number 16 [ 91.186465][ T24] usb 5-1: skipping empty audio interface (v1) [ 91.197387][ T24] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 91.211351][ T24] usb 5-1: USB disconnect, device number 17 [ 91.221169][ T1130] udevd[1130]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.529325][ T6] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 91.571611][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.579038][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.586960][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.594680][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.602159][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.617706][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.630329][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.647769][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.655407][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.662954][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.670554][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.678021][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.685867][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.693361][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.705633][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.713372][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.720839][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.728229][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.735674][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.743090][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.753413][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.761025][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.768476][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.776134][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.786868][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.794510][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.802491][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.816601][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.832730][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.841350][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.848790][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.856495][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 91.864680][ T24] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 91.867145][ T6] usb 8-1: Using ep0 maxpacket: 32 [ 91.882510][ T6] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 91.890696][ T6] usb 8-1: config 0 has no interface number 0 [ 91.906454][ T6] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 91.924982][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.929204][ T4803] fido_id[4803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.937745][ T6] usb 8-1: Product: syz [ 91.950858][ T6] usb 8-1: Manufacturer: syz [ 91.961179][ T6] usb 8-1: SerialNumber: syz [ 91.966981][ T6] usb 8-1: config 0 descriptor?? [ 91.983049][ T6] smsc95xx v2.0.0 [ 92.014266][ T4820] loop4: detected capacity change from 0 to 512 [ 92.021475][ T4820] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.032366][ T4820] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 92.053313][ T4820] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 92.055590][ T4826] loop1: detected capacity change from 0 to 128 [ 92.061446][ T4820] System zones: 1-12 [ 92.072620][ T4820] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1861: corrupted in-inode xattr [ 92.085846][ T4820] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1861: couldn't read orphan inode 15 (err -117) [ 92.098903][ T4820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.122737][ T283] EXT4-fs (loop4): unmounting filesystem. [ 92.160473][ T4833] xt_hashlimit: size too large, truncated to 1048576 [ 92.570785][ T4894] loop4: detected capacity change from 0 to 1024 [ 92.581265][ T4894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.589859][ T4894] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.602176][ T4894] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 1: comm syz.4.1889: lblock 1 mapped to illegal pblock 1 (length 15) [ 92.617106][ T4894] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.1889: Freeing blocks not in datazone - block = 1, count = 3 [ 92.634730][ T283] EXT4-fs (loop4): unmounting filesystem. [ 92.658953][ T4900] loop4: detected capacity change from 0 to 128 [ 92.669321][ T4900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.678059][ T4900] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.691133][ T4900] EXT4-fs warning (device loop4): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 92.708339][ T283] EXT4-fs (loop4): unmounting filesystem. [ 92.777640][ T6] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 92.798482][ T19] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 92.811430][ T4907] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 92.979811][ T19] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 92.988872][ T6] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 93.000007][ T19] usb 1-1: config 0 has no interface number 0 [ 93.006197][ T6] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 93.013025][ T19] usb 1-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 93.024146][ T6] usb 8-1: USB disconnect, device number 7 [ 93.030033][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.040297][ T19] usb 1-1: config 0 descriptor?? [ 93.058824][ T19] usb-storage 1-1:0.33: USB Mass Storage device detected [ 93.249886][ T2935] usb 1-1: USB disconnect, device number 14 [ 93.509510][ T28] kauditd_printk_skb: 694 callbacks suppressed [ 93.509525][ T28] audit: type=1400 audit(1756460152.134:1806): avc: denied { connect } for pid=4960 comm="syz.4.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.655869][ T4977] syz.7.1926[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.655938][ T4977] syz.7.1926[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.747249][ T4985] loop1: detected capacity change from 0 to 128 [ 93.795057][ T4985] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.804703][ T4985] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.837801][ T2935] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 93.848885][ T2506] EXT4-fs (loop1): unmounting filesystem. [ 93.971972][ T28] audit: type=1400 audit(1756460152.594:1807): avc: denied { write } for pid=5002 comm="syz.1.1937" name="/" dev="incremental-fs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.014590][ T28] audit: type=1400 audit(1756460152.594:1808): avc: denied { add_name } for pid=5002 comm="syz.1.1937" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.040426][ T28] audit: type=1400 audit(1756460152.594:1809): avc: denied { associate } for pid=5002 comm="syz.1.1937" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 94.046547][ T2935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.062431][ T28] audit: type=1400 audit(1756460152.624:1810): avc: denied { setattr } for pid=5002 comm="syz.1.1937" name="file0" dev="incremental-fs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.077190][ T2935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.108388][ T2935] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.122811][ T2935] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.151943][ T2935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.161537][ T28] audit: type=1400 audit(1756460152.784:1811): avc: denied { mount } for pid=5019 comm="syz.1.1944" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 94.169718][ T2935] usb 5-1: config 0 descriptor?? [ 94.203779][ T6] kernel write not supported for file bpf-prog (pid: 6 comm: kworker/0:0) [ 94.268352][ T28] audit: type=1400 audit(1756460152.895:1812): avc: denied { compute_member } for pid=5038 comm="syz.7.1955" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 94.358986][ T28] audit: type=1400 audit(1756460152.985:1813): avc: denied { create } for pid=5054 comm="syz.6.1962" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.386588][ T28] audit: type=1400 audit(1756460152.985:1814): avc: denied { read write } for pid=5054 comm="syz.6.1962" name="file1" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.410074][ T28] audit: type=1400 audit(1756460152.985:1815): avc: denied { open } for pid=5054 comm="syz.6.1962" path="/185/file1" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.579262][ T5082] loop7: detected capacity change from 0 to 1024 [ 94.594790][ T2935] plantronics 0003:047F:FFFF.0027: unknown main item tag 0xd [ 94.611523][ T2935] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 94.620949][ T2935] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 94.652244][ T5082] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 94.671066][ T5082] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.694989][ T5082] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: block 3: comm syz.7.1973: lblock 3 mapped to illegal pblock 3 (length 3) [ 94.710214][ T5082] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 94.722646][ T5082] EXT4-fs (loop7): This should not happen!! Data will be lost [ 94.722646][ T5082] [ 94.737817][ T335] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 94.739531][ T5082] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 94.760210][ T5082] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 94.772634][ T5082] EXT4-fs (loop7): This should not happen!! Data will be lost [ 94.772634][ T5082] [ 94.782301][ T5082] EXT4-fs (loop7): Total free blocks count 0 [ 94.788468][ T5082] EXT4-fs (loop7): Free/Dirty block details [ 94.794445][ T5082] EXT4-fs (loop7): free_blocks=4293918720 [ 94.800247][ T5082] EXT4-fs (loop7): dirty_blocks=64 [ 94.805371][ T5082] EXT4-fs (loop7): Block reservation details [ 94.821555][ T8] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 94.917119][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 94.923212][ T335] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 94.931239][ T335] usb 2-1: config 0 has no interface number 0 [ 94.937346][ T335] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.949171][ T335] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 94.958259][ T335] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 94.966330][ T335] usb 2-1: Product: syz [ 94.970495][ T335] usb 2-1: SerialNumber: syz [ 94.975913][ T335] usb 2-1: config 0 descriptor?? [ 95.190866][ T335] usb 2-1: USB disconnect, device number 17 [ 95.936302][ T5135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1998'. [ 95.963072][ T5128] loop7: detected capacity change from 0 to 40427 [ 95.971511][ T5128] F2FS-fs (loop7): fault_injection options not supported [ 95.979224][ T5128] F2FS-fs (loop7): Image doesn't support compression [ 95.985991][ T5128] F2FS-fs (loop7): Image doesn't support compression [ 95.993958][ T5128] F2FS-fs (loop7): invalid crc value [ 96.014414][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2000'. [ 96.025323][ T5128] F2FS-fs (loop7): Found nat_bits in checkpoint [ 96.062780][ T5128] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 96.079482][ T5137] f2fs_ckpt-7:7: attempt to access beyond end of device [ 96.079482][ T5137] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.334436][ T5195] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2024'. [ 96.353671][ T5197] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 96.355048][ T5199] syz.0.2026[5199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.364442][ T5199] syz.0.2026[5199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.645914][ T5241] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2045'. [ 96.737778][ T2935] usb 5-1: USB disconnect, device number 18 [ 97.633382][ T5284] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.666944][ T5284] FAT-fs (loop3): unable to read boot sector [ 97.667193][ T5292] syz.7.2069[5292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.691395][ T5292] syz.7.2069[5292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.718776][ T5299] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 97.792218][ T5299] SELinux: failed to load policy [ 97.836828][ T5311] x_tables: ip6_tables: CT target: only valid in raw table, not ethtool [ 97.919991][ T5319] loop4: detected capacity change from 0 to 2048 [ 97.961367][ T5319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.988760][ T5319] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.082067][ T5330] loop1: detected capacity change from 0 to 512 [ 98.083924][ T5313] loop7: detected capacity change from 0 to 40427 [ 98.097284][ T5313] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 98.106190][ T283] EXT4-fs (loop4): unmounting filesystem. [ 98.130228][ T5313] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 98.174372][ T5313] F2FS-fs (loop7): Found nat_bits in checkpoint [ 98.194241][ T5330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.224363][ T5330] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.253742][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 98.263758][ T5313] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 98.275576][ T5313] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 98.299328][ T2506] EXT4-fs (loop1): unmounting filesystem. [ 98.328995][ T3430] syz-executor: attempt to access beyond end of device [ 98.328995][ T3430] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 98.409490][ T5369] device vlan2 entered promiscuous mode [ 98.415069][ T5369] device veth0 entered promiscuous mode [ 98.465790][ T5375] overlayfs: failed to clone upperpath [ 98.548598][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 98.548611][ T28] audit: type=1400 audit(1756460157.177:1822): avc: denied { execute_no_trans } for pid=5389 comm="syz.6.2108" path="/229/file0" dev="tmpfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.753672][ T28] audit: type=1400 audit(1756460157.377:1823): avc: denied { setopt } for pid=5414 comm="syz.7.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.807706][ T5418] 9pnet_virtio: no channels available for device syz [ 98.813691][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.382981][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.469901][ T5475] loop7: detected capacity change from 0 to 512 [ 99.530742][ T5475] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.2146: corrupted inode contents [ 99.548081][ T5482] loop1: detected capacity change from 0 to 2048 [ 99.555026][ T5475] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #16: comm syz.7.2146: mark_inode_dirty error [ 99.580533][ T5475] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.2146: corrupted inode contents [ 99.624256][ T5475] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.2146: mark_inode_dirty error [ 99.636899][ T5475] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.2146: corrupted inode contents [ 99.653427][ T5475] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 99.654736][ T5482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.671006][ T5475] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.2146: corrupted inode contents [ 99.680289][ T5482] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.694107][ T5475] EXT4-fs error (device loop7): ext4_truncate:4314: inode #16: comm syz.7.2146: mark_inode_dirty error [ 99.705433][ T5475] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 99.714839][ T5475] EXT4-fs (loop7): 1 truncate cleaned up [ 99.720580][ T5475] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 99.729674][ T5475] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.735280][ T43] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 99.764812][ T43] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 99.781912][ T5475] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.2146: iget: bad i_size value: 360287970189639690 [ 99.786534][ T2506] EXT4-fs (loop1): unmounting filesystem. [ 99.823766][ T3430] EXT4-fs (loop7): unmounting filesystem. [ 99.859201][ T5496] syz.7.2153[5496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.859277][ T5496] syz.7.2153[5496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.365398][ T28] audit: type=1400 audit(1756460158.998:1824): avc: denied { watch watch_reads } for pid=5549 comm="syz.7.2175" path="/172/file1" dev="tmpfs" ino=904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.427627][ T5557] loop1: detected capacity change from 0 to 128 [ 100.445897][ T5559] loop7: detected capacity change from 0 to 512 [ 100.465347][ T5557] FAT-fs (loop1): Directory bread(block 32) failed [ 100.480358][ T5557] FAT-fs (loop1): Directory bread(block 33) failed [ 100.487417][ T5557] FAT-fs (loop1): Directory bread(block 34) failed [ 100.494102][ T5557] FAT-fs (loop1): Directory bread(block 35) failed [ 100.498786][ T5559] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 100.509721][ T5557] FAT-fs (loop1): Directory bread(block 36) failed [ 100.513285][ T5559] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.526846][ T5557] FAT-fs (loop1): Directory bread(block 37) failed [ 100.533389][ T5557] FAT-fs (loop1): Directory bread(block 38) failed [ 100.544512][ T5557] FAT-fs (loop1): Directory bread(block 39) failed [ 100.552203][ T5557] FAT-fs (loop1): Directory bread(block 40) failed [ 100.564032][ T5557] FAT-fs (loop1): Directory bread(block 41) failed [ 100.567897][ T5559] syz.7.2179[5559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.571764][ T5559] syz.7.2179[5559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.611140][ T5557] +}[@: attempt to access beyond end of device [ 100.611140][ T5557] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 100.611310][ T5572] netlink: 'syz.0.2195': attribute type 13 has an invalid length. [ 100.622694][ T5557] FAT-fs (loop1): Filesystem has been set read-only [ 100.650589][ T5557] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 100.651094][ T3430] EXT4-fs (loop7): unmounting filesystem. [ 100.678157][ T5572] netlink: 'syz.0.2195': attribute type 17 has an invalid length. [ 100.792836][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.833737][ T5572] device vlan2 left promiscuous mode [ 100.836078][ T5574] loop4: detected capacity change from 0 to 40427 [ 100.840550][ T5572] device veth0 left promiscuous mode [ 100.866995][ T5574] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 100.878766][ T5574] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.915105][ T5574] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.950327][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 100.966266][ T5574] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 100.973809][ T5574] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.016412][ T5574] syz.4.2185: attempt to access beyond end of device [ 101.016412][ T5574] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 101.036253][ T5574] syz.4.2185: attempt to access beyond end of device [ 101.036253][ T5574] loop4: rw=2049, sector=53256, nr_sectors = 408 limit=40427 [ 101.070506][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 101.079727][ T283] syz-executor: attempt to access beyond end of device [ 101.079727][ T283] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.091467][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.107793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 101.116882][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.139762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.148244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.156669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.167068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.206479][ T5628] general protection fault, probably for non-canonical address 0xdffffc0000000037: 0000 [#1] PREEMPT SMP KASAN [ 101.218226][ T5628] KASAN: null-ptr-deref in range [0x00000000000001b8-0x00000000000001bf] [ 101.226686][ T5628] CPU: 1 PID: 5628 Comm: syz.6.2210 Not tainted syzkaller #0 [ 101.234037][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.244083][ T5628] RIP: 0010:htb_qlen_notify+0x30/0xc0 [ 101.249452][ T5628] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 2e ed 6b fd 4d 8d ae b8 01 00 00 4c 89 eb 48 c1 eb 03 <42> 0f b6 04 23 84 c0 75 56 45 8b 65 00 31 ff 44 89 e6 e8 29 f1 6b [ 101.269042][ T5628] RSP: 0018:ffffc90009686df0 EFLAGS: 00010202 [ 101.275100][ T5628] RAX: ffffffff84041ac2 RBX: 0000000000000037 RCX: 0000000000080000 [ 101.283059][ T5628] RDX: ffffc90000e19000 RSI: 000000000000016a RDI: 000000000000016b [ 101.291120][ T5628] RBP: ffffc90009686e18 R08: ffff88811dfc8000 R09: 0000000000000002 [ 101.299083][ T5628] R10: 0000000000000000 R11: ffffffff84041aa0 R12: dffffc0000000000 [ 101.307043][ T5628] R13: 00000000000001b8 R14: 0000000000000000 R15: ffff888111abe000 [ 101.315000][ T5628] FS: 00007fd35bc3a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 101.323910][ T5628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.330474][ T5628] CR2: 0000001b2f820ff8 CR3: 0000000118f3a000 CR4: 00000000003506a0 [ 101.338440][ T5628] Call Trace: [ 101.341711][ T5628] [ 101.344637][ T5628] qdisc_tree_reduce_backlog+0x20a/0x360 [ 101.350273][ T5628] fq_codel_change+0xafd/0x1010 [ 101.355132][ T5628] ? __cfi_fq_codel_change+0x10/0x10 [ 101.360422][ T5628] ? netlink_sendmsg+0x8aa/0xbc0 [ 101.365353][ T5628] fq_codel_init+0x384/0xa90 [ 101.369927][ T5628] ? __cfi_fq_codel_init+0x10/0x10 [ 101.375023][ T5628] qdisc_create+0x7f3/0x1040 [ 101.379598][ T5628] ? qdisc_notify+0x360/0x360 [ 101.384263][ T5628] tc_modify_qdisc+0x8ea/0x1900 [ 101.389121][ T5628] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 101.394397][ T5628] ? __mutex_lock_slowpath+0xe/0x10 [ 101.399595][ T5628] ? mutex_lock+0xf8/0x1a0 [ 101.404005][ T5628] ? __cfi_mutex_lock+0x10/0x10 [ 101.408846][ T5628] ? ns_capable+0x8c/0xf0 [ 101.413181][ T5628] ? netlink_net_capable+0x125/0x160 [ 101.418467][ T5628] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 101.423743][ T5628] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 101.428671][ T5628] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 101.434118][ T5628] ? kernel_text_address+0xa0/0xd0 [ 101.439242][ T5628] ? __kernel_text_address+0xd/0x30 [ 101.444439][ T5628] ? unwind_get_return_address+0x4d/0x90 [ 101.450075][ T5628] ? memcpy+0x56/0x70 [ 101.454058][ T5628] ? avc_has_perm_noaudit+0x2f4/0x460 [ 101.459436][ T5628] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 101.465143][ T5628] ? slab_post_alloc_hook+0x4f/0x2d0 [ 101.470434][ T5628] ? kmem_cache_alloc_node+0x181/0x340 [ 101.475899][ T5628] ? __alloc_skb+0xea/0x4b0 [ 101.480395][ T5628] ? avc_has_perm+0x158/0x240 [ 101.485074][ T5628] ? __alloc_skb+0x236/0x4b0 [ 101.489669][ T5628] ? netlink_sendmsg+0x626/0xbc0 [ 101.494624][ T5628] ? __cfi_avc_has_perm+0x10/0x10 [ 101.499634][ T5628] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 101.504992][ T5628] netlink_rcv_skb+0x1f2/0x440 [ 101.509744][ T5628] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 101.515184][ T5628] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 101.520462][ T5628] ? __netlink_lookup+0x387/0x3b0 [ 101.525494][ T5628] rtnetlink_rcv+0x1c/0x20 [ 101.529911][ T5628] netlink_unicast+0x8b1/0xa30 [ 101.534666][ T5628] netlink_sendmsg+0x8aa/0xbc0 [ 101.539449][ T5628] ? __cfi_netlink_sendmsg+0x10/0x10 [ 101.544754][ T5628] ? security_socket_sendmsg+0x93/0xb0 [ 101.550218][ T5628] ? __cfi_netlink_sendmsg+0x10/0x10 [ 101.555489][ T5628] ____sys_sendmsg+0x5a9/0x990 [ 101.560238][ T5628] ? __sys_sendmsg_sock+0x40/0x40 [ 101.565253][ T5628] ? import_iovec+0x7c/0xb0 [ 101.569737][ T5628] ___sys_sendmsg+0x21c/0x290 [ 101.574400][ T5628] ? __sys_sendmsg+0x270/0x270 [ 101.579147][ T5628] ? __fdget+0x19c/0x220 [ 101.583369][ T5628] __x64_sys_sendmsg+0x1f0/0x2c0 [ 101.588285][ T5628] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 101.593728][ T5628] ? __kasan_check_write+0x14/0x20 [ 101.598825][ T5628] ? fpregs_restore_userregs+0x128/0x260 [ 101.604447][ T5628] ? switch_fpu_return+0xe/0x10 [ 101.609281][ T5628] x64_sys_call+0x171/0x9a0 [ 101.613765][ T5628] do_syscall_64+0x4c/0xa0 [ 101.618169][ T5628] ? clear_bhb_loop+0x30/0x80 [ 101.622850][ T5628] ? clear_bhb_loop+0x30/0x80 [ 101.627512][ T5628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.633395][ T5628] RIP: 0033:0x7fd35ad8ebe9 [ 101.637805][ T5628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.657482][ T5628] RSP: 002b:00007fd35bc3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.665935][ T5628] RAX: ffffffffffffffda RBX: 00007fd35afb5fa0 RCX: 00007fd35ad8ebe9 [ 101.673902][ T5628] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 101.681858][ T5628] RBP: 00007fd35ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 101.689813][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.697769][ T5628] R13: 00007fd35afb6038 R14: 00007fd35afb5fa0 R15: 00007ffcd5e34b18 [ 101.705728][ T5628] [ 101.708736][ T5628] Modules linked in: [ 101.712676][ T5628] ---[ end trace 0000000000000000 ]--- [ 101.718147][ T5628] RIP: 0010:htb_qlen_notify+0x30/0xc0 [ 101.718639][ T28] audit: type=1400 audit(1756460160.348:1825): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 101.723524][ T5628] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 2e ed 6b fd 4d 8d ae b8 01 00 00 4c 89 eb 48 c1 eb 03 <42> 0f b6 04 23 84 c0 75 56 45 8b 65 00 31 ff 44 89 e6 e8 29 f1 6b [ 101.748561][ T28] audit: type=1400 audit(1756460160.348:1826): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.764950][ T5628] RSP: 0018:ffffc90009686df0 EFLAGS: 00010202 [ 101.764972][ T5628] RAX: ffffffff84041ac2 RBX: 0000000000000037 RCX: 0000000000080000 [ 101.764985][ T5628] RDX: ffffc90000e19000 RSI: 000000000000016a RDI: 000000000000016b [ 101.764997][ T5628] RBP: ffffc90009686e18 R08: ffff88811dfc8000 R09: 0000000000000002 [ 101.765010][ T5628] R10: 0000000000000000 R11: ffffffff84041aa0 R12: dffffc0000000000 [ 101.765024][ T5628] R13: 00000000000001b8 R14: 0000000000000000 R15: ffff888111abe000 [ 101.765035][ T5628] FS: 00007fd35bc3a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 101.787112][ T28] audit: type=1400 audit(1756460160.348:1827): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.792436][ T5628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.792450][ T5628] CR2: 0000001b2f820ff8 CR3: 0000000118f3a000 CR4: 00000000003506a0 [ 101.792468][ T5628] Kernel panic - not syncing: Fatal exception in interrupt [ 101.800677][ T5628] Kernel Offset: disabled [ 101.888542][ T5628] Rebooting in 86400 seconds..