last executing test programs: 2.630229167s ago: executing program 2 (id=1828): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1, 0x4, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=@tcp=r2}, 0x20) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000019c0)={0x6, 0x0, [{0x2000, 0xfa, &(0x7f0000000440)=""/250}, {0xf000, 0x98, &(0x7f0000000280)=""/152}, {0x4, 0x1000, &(0x7f00000008c0)=""/4096}, {0x6000, 0xbb, &(0x7f0000000540)=""/187}, {0x1, 0xaa, &(0x7f0000000600)=""/170}, {0x4, 0x89, &(0x7f0000001900)=""/137}]}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.525317199s ago: executing program 3 (id=1829): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x40101, 0x3) syz_open_procfs(0x0, 0x0) 2.487750314s ago: executing program 1 (id=1830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x141001, 0x0) sendfile(r2, r1, 0x0, 0x10001) 2.480876824s ago: executing program 2 (id=1831): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000180)) lseek(r1, 0x6, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001a00010000000000000000000220", @ANYBLOB="00070000005eb55d3f00dd732903cf8b78e50000000108000200"/38], 0x38}}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) 2.401513844s ago: executing program 1 (id=1832): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000f0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 2.401299804s ago: executing program 3 (id=1833): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1.956757735s ago: executing program 1 (id=1834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='tcp_probe\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb", 0x94, 0x840, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) 1.864437466s ago: executing program 4 (id=1837): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, r1, 0x781, 0x1000000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4000) 1.864155396s ago: executing program 1 (id=1838): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40000, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x4, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x4, [{@multicast2, 0x3}, {@private=0xa010101}, {}, {@broadcast, 0x3}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.863972436s ago: executing program 4 (id=1839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d000500", 0x27}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) mkdirat(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r7, 0x0, 0xffffffffffffffd4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x200000a, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16=r6], 0x0, 0x2bb, &(0x7f0000000580)="$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") r8 = openat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x12) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.488193469s ago: executing program 2 (id=1840): r0 = socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200}}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(r0, 0x0, 0x27) 1.324624528s ago: executing program 3 (id=1841): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000180)='system_u:object_r:dbusd_etc_t:s0\x00', 0x21, 0x1) 1.309685409s ago: executing program 3 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) truncate(0x0, 0xfe0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'workdir', 0x3a, 'novrs', 0x3a, './bus/file0', 0x3a, [0x4f]}, 0x38) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800490000380000000000059078ac1414000a010100440c0903ffffffff000000008302000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000053c2788000"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}]}, 0x50}}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0xffffffffffff48ba) 1.309111739s ago: executing program 2 (id=1843): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x4e21, 0x2000, 'lblc\x00', 0x1c, 0x1, 0xfffffffd}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1.13311274s ago: executing program 2 (id=1845): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000f0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 1.113809042s ago: executing program 1 (id=1846): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x10, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x6, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0xffffffffffffffff], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000022c0)=""/4096}, {&(0x7f0000000100)=""/60}, {&(0x7f0000000300)=""/120}, {&(0x7f00000003c0)}], 0x0, &(0x7f0000000480)=""/37}, 0xa7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000940)=""/186}, {&(0x7f0000000a00)=""/106}, {&(0x7f0000000a80)=""/208}, {&(0x7f0000000e40)=""/115}, {&(0x7f0000000c00)=""/79}, {&(0x7f0000000c80)=""/113}, {&(0x7f0000000d00)=""/96}], 0x0, &(0x7f0000000d80)=""/176}, 0x4}], 0xe51b, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.108001043s ago: executing program 3 (id=1847): socket$inet6(0xa, 0x3, 0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='cpuacct'}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'wg0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.028273782s ago: executing program 2 (id=1850): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2fd6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82577ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db"}) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000180)) lseek(r1, 0x6, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001a00010000000000000000000220", @ANYBLOB="00070000005eb55d3f00dd732903cf8b78e50000000108000200"/38], 0x38}}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) 994.784406ms ago: executing program 4 (id=1852): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0xa) 929.618003ms ago: executing program 4 (id=1853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018407000100637400001c0002800800014000010102080002400008000205000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 774.514211ms ago: executing program 4 (id=1855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet(0x2, 0x3, 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) getpid() r2 = socket$inet(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x44}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x60, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 734.231406ms ago: executing program 4 (id=1856): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0xf, &(0x7f0000000240)=@ringbuf={{}, {}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readv(r1, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) 526.35283ms ago: executing program 0 (id=1857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) truncate(0x0, 0xfe0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'workdir', 0x3a, 'novrs', 0x3a, './bus/file0', 0x3a, [0x4f]}, 0x38) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800490000380000000000059078ac1414000a010100440c0903ffffffff000000008302000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000053c2788000"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}]}, 0x50}}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0) 171.971241ms ago: executing program 0 (id=1858): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0xfffc, '\x00', 0x0, 0xfd}) 110.722648ms ago: executing program 0 (id=1859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0x10}}}, 0x24}}, 0x0) 110.424298ms ago: executing program 0 (id=1860): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 79.057461ms ago: executing program 0 (id=1861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.8257ms ago: executing program 1 (id=1862): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000002000000e27f00000100000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9b7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f1e715a899c71e4e05b3d340292075ac4f13d51664febfc2748d0dbd7ddd4274c3aee0d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x86, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x300000002, 0x0) 2.56ms ago: executing program 0 (id=1863): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000280), 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)="44575598024866131850f7fa3d829334898421e1b8d63085c0907a745d4db8d14d7a8e691778557553a4c70063df40297e566c311d8a7595bbd67a126630", 0x0, 0x7, r7, 0x0, 0x7}, 0x38) sendfile(r1, r1, 0x0, 0x401) sendfile(r3, r3, 0x0, 0x3) 0s ago: executing program 3 (id=1864): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x28011, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406000005240000000d2402"], 0x0) kernel console output (not intermixed with test programs): 376] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 153.586898][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.595328][ T1376] usb 2-1: Product: syz [ 153.604299][ T480] usb 5-1: config 0 descriptor?? [ 153.611671][ T1376] usb 2-1: Manufacturer: syz [ 153.616070][ T1376] usb 2-1: SerialNumber: syz [ 153.621495][ T1376] usb 2-1: config 0 descriptor?? [ 153.637705][ T3216] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 153.657637][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 153.669756][ T3208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.678246][ T3208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.686668][ T333] usb 4-1: USB disconnect, device number 8 [ 153.708538][ T3197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.716889][ T3197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.724851][ T1376] usb 1-1: USB disconnect, device number 9 [ 153.777649][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 153.785845][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 153.794330][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 153.803600][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.813049][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.822503][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.835404][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 153.844305][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.852902][ T24] usb 3-1: config 0 descriptor?? [ 153.858486][ T480] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 153.866689][ T19] usb 2-1: USB disconnect, device number 5 [ 153.870904][ T480] usb 5-1: USB disconnect, device number 7 [ 153.881138][ T480] usblp0: removed [ 154.128420][ T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.226706][ T3223] 9p filesystem being mounted at /7/file0 supports timestamps until 2106 (0xffffffff) [ 154.459230][ T28] audit: type=1400 audit(8172039360.211:444): avc: denied { read write } for pid=3185 comm="syz.2.968" name="lp0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 154.482717][ T480] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.485193][ T28] audit: type=1400 audit(8172039360.211:445): avc: denied { open } for pid=3185 comm="syz.2.968" path="/dev/usb/lp0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 154.513703][ T28] audit: type=1400 audit(8172039360.221:446): avc: denied { ioctl } for pid=3185 comm="syz.2.968" path="/dev/usb/lp0" dev="devtmpfs" ino=639 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 154.517610][ T19] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.539052][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.718573][ T3028] usb 3-1: USB disconnect, device number 8 [ 154.787660][ T480] usb 5-1: Using ep0 maxpacket: 32 [ 154.841250][ T3028] usblp0: removed [ 154.907770][ T480] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.916745][ T480] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.927223][ T480] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.936266][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.944399][ T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.954159][ T24] usb 4-1: config 0 has no interface number 0 [ 154.960136][ T24] usb 4-1: config 0 interface 1 has no altsetting 0 [ 154.966575][ T480] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.976054][ T480] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.988990][ T480] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.997965][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.006545][ T480] usb 5-1: config 0 descriptor?? [ 155.097669][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.108552][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.118163][ T19] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 155.127066][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.135748][ T19] usb 1-1: config 0 descriptor?? [ 155.137653][ T24] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 155.149485][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.157255][ T24] usb 4-1: Product: syz [ 155.161302][ T24] usb 4-1: Manufacturer: syz [ 155.165788][ T24] usb 4-1: SerialNumber: syz [ 155.171142][ T24] usb 4-1: config 0 descriptor?? [ 155.259652][ T3237] loop2: detected capacity change from 0 to 256 [ 155.269063][ T480] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 155.274298][ T3237] exfat filesystem being mounted at /92/qY3aK supports timestamps until 2107 (0x10391447f) [ 155.468838][ T24] usb 4-1: USB disconnect, device number 9 [ 155.566443][ T3243] netlink: 'syz.2.989': attribute type 3 has an invalid length. [ 155.618711][ T19] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 155.645634][ T19] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 155.666613][ T19] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 155.827624][ T19] arvo 0003:1E7D:30D4.0009: couldn't init struct arvo_device [ 155.849121][ T24] usb 5-1: USB disconnect, device number 8 [ 155.855228][ T19] arvo 0003:1E7D:30D4.0009: couldn't install keyboard [ 155.867554][ C0] usblp0: nonzero read bulk status received: -108 [ 155.873896][ T3248] usblp0:failed reading printer status (-71) [ 155.879872][ T1376] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 155.887955][ T3213] usblp0: removed [ 155.898257][ T19] arvo: probe of 0003:1E7D:30D4.0009 failed with error -71 [ 155.935804][ T19] usb 1-1: USB disconnect, device number 10 [ 156.237619][ T1376] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.277573][ T1376] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 156.317605][ T333] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.325074][ T1376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 156.348658][ T1376] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.405761][ T3261] loop4: detected capacity change from 0 to 128 [ 156.412695][ T3261] vfat filesystem being mounted at /11/bus supports timestamps until 2107 (0x10391447e) [ 156.517734][ T1376] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 156.647669][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 156.740663][ T1376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.748599][ T1376] usb 3-1: Product: syz [ 156.752566][ T1376] usb 3-1: Manufacturer: syz [ 156.757085][ T1376] usb 3-1: SerialNumber: syz [ 156.762599][ T1376] usb 3-1: config 0 descriptor?? [ 156.777792][ T3249] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 156.807724][ T19] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 156.887678][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.897220][ T333] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.906653][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.916210][ T333] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 156.999952][ T1376] usb 3-1: USB disconnect, device number 9 [ 157.047694][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 157.047708][ T24] usb 2-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 157.063492][ T24] usb 2-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 157.076405][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 157.077670][ T333] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 157.091905][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.099803][ T333] usb 4-1: Product: syz [ 157.103706][ T333] usb 4-1: Manufacturer: syz [ 157.108203][ T333] usb 4-1: SerialNumber: syz [ 157.113369][ T333] usb 4-1: config 0 descriptor?? [ 157.167619][ T19] usb 1-1: descriptor type invalid, skip [ 157.173134][ T19] usb 1-1: descriptor type invalid, skip [ 157.178592][ T19] usb 1-1: descriptor type invalid, skip [ 157.184029][ T19] usb 1-1: descriptor type invalid, skip [ 157.189599][ T19] usb 1-1: descriptor type invalid, skip [ 157.267652][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 157.273795][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.276531][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.276566][ T24] usb 2-1: Product: syz [ 157.298638][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.303977][ T24] usb 2-1: Manufacturer: syz [ 157.307245][ T19] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.312059][ T24] usb 2-1: SerialNumber: syz [ 157.333729][ T3267] loop4: detected capacity change from 0 to 256 [ 157.342516][ T3267] exfat filesystem being mounted at /12/qY3aK supports timestamps until 2107 (0x10391447f) [ 157.361833][ T480] usb 4-1: USB disconnect, device number 10 [ 157.487589][ T1376] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 157.497882][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.507034][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.515135][ T19] usb 1-1: Product: ﰄ츼짖孀ꠀ忕埘鞓䫖寁폷똏Ꜭ⛃墽軒ک碶㣚幗潤Ꜣ딉飨澿裁ः诂ẑ〲簻罼脚䐂㙯䳀魢뤕걋›ૅ▇ᚷᏺۻ説糦ᗩ툃鲓Ზ煲雋ﮚ䪫ꙇ㹀폠ҷ煤馀Ҡ聤뒄愌៟க䷂ꬎ쥪⢀唺⌣䕷㦳냃剕㖑퍬룦얡椨帮퓄䥋઄ķꗣ㤐樼꺿㒤熶칯ꗾ侘᰽ᱞ育髍䋼円웣萧 [ 157.549050][ T19] usb 1-1: Manufacturer: Й [ 157.553421][ T19] usb 1-1: SerialNumber: ⻗죥输㹥嬡䞣巓⸪ᾴ厐먳ⴇꅦၟ䮻鸉骴堿洊ᣘ䵏剒㹾᭔j冴繓ꃇ㑇䫜晇ꆀ灭㷾밦걌蘅ؓ줺膁缐敚懠䭶뫘Ꟍ鄢죢燶险ᔺ拉ü抧┵␫庠ڈ㾏ㄍ켆䩫ꢴ죶䳔켈᪩ነ㻋耳៹襼㉍伞㶩爈棆侵辀㮖䷓庩﯋ᰋ䟿糁㵆 [ 157.747592][ T1376] usb 3-1: Using ep0 maxpacket: 32 [ 157.776007][ T3275] netlink: 'syz.4.1002': attribute type 3 has an invalid length. [ 157.858039][ T19] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 157.864733][ T19] cdc_ncm 1-1:1.0: bind() failure [ 157.869648][ T1376] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.888593][ T19] usb 1-1: USB disconnect, device number 11 [ 157.895035][ T1376] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 157.905968][ T1376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 157.915490][ T1376] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.048325][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 158.087768][ T1376] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=4f.09 [ 158.087774][ T3265] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 158.087800][ T1376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.112094][ T1376] usb 3-1: Product: syz [ 158.116062][ T1376] usb 3-1: Manufacturer: syz [ 158.120518][ T1376] usb 3-1: SerialNumber: syz [ 158.125465][ T1376] usb 3-1: config 0 descriptor?? [ 158.147709][ T3249] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.157670][ T3028] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.457675][ T3265] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 158.465704][ T3265] usb 5-1: config 0 has no interface number 0 [ 158.471648][ T3265] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 158.482182][ T3265] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 158.517669][ T3028] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.527736][ T3028] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 158.536615][ T3028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.545504][ T3028] usb 4-1: config 0 descriptor?? [ 158.570356][ T40] usb 3-1: USB disconnect, device number 10 [ 158.597933][ T19] usb 2-1: USB disconnect, device number 6 [ 158.617578][ C1] usblp0: nonzero write bulk status received: -108 [ 158.624853][ T3259] usblp0: removed [ 158.647682][ T480] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 158.667735][ T3265] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 158.676778][ T3265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.684608][ T3265] usb 5-1: Product: syz [ 158.688693][ T3265] usb 5-1: Manufacturer: syz [ 158.693002][ T3265] usb 5-1: SerialNumber: syz [ 158.698412][ T3265] usb 5-1: config 0 descriptor?? [ 158.718142][ T3277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.725123][ T3277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.800420][ T3265] usb 4-1: USB disconnect, device number 11 [ 158.887691][ T480] usb 1-1: Using ep0 maxpacket: 8 [ 158.941819][ T3028] usb 5-1: USB disconnect, device number 9 [ 159.017660][ T480] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 159.027974][ T480] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 159.038397][ T480] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.227673][ T480] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 159.236594][ T480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.244799][ T480] usb 1-1: Product: syz [ 159.248803][ T480] usb 1-1: Manufacturer: syz [ 159.253196][ T480] usb 1-1: SerialNumber: syz [ 159.258417][ T480] usb 1-1: config 0 descriptor?? [ 159.347620][ T298] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.377637][ T3265] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 159.498799][ T3283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.507217][ T3283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.515995][ T1376] usb 1-1: USB disconnect, device number 12 [ 159.707648][ T298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.717804][ T298] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.726566][ T298] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 159.727617][ T480] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.742951][ T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.751556][ T298] usb 3-1: config 0 descriptor?? [ 159.757673][ T3265] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.767848][ T3265] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.776686][ T3265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.785594][ T3265] usb 4-1: config 0 descriptor?? [ 160.028172][ T3294] fuse: Unknown parameter '0x0000000000000005' [ 160.327687][ T480] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 160.336639][ T480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.344801][ T480] usb 5-1: Product: syz [ 160.348851][ T480] usb 5-1: Manufacturer: syz [ 160.353208][ T480] usb 5-1: SerialNumber: syz [ 160.358327][ T480] r8152-cfgselector 5-1: config 0 descriptor?? [ 160.517644][ T3028] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 160.827659][ T480] r8152-cfgselector 5-1: Unknown version 0x0000 [ 160.833842][ T480] r8152-cfgselector 5-1: bad CDC descriptors [ 160.867684][ T480] r8152-cfgselector 5-1: Unknown version 0x0000 [ 160.874578][ T480] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 160.887790][ T3028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.898535][ T3028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.908054][ T3028] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 160.916919][ T3028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.925472][ T3028] usb 1-1: config 0 descriptor?? [ 161.038220][ T3265] usb 4-1: USB disconnect, device number 12 [ 161.049830][ T3307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.058425][ T3307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.140133][ T3309] netlink: 'syz.3.1014': attribute type 3 has an invalid length. [ 161.255168][ T3311] loop3: detected capacity change from 0 to 512 [ 161.263977][ T3311] EXT4-fs (loop3): 1 truncate cleaned up [ 161.269543][ T3311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.348700][ T3135] EXT4-fs (loop3): unmounting filesystem. [ 161.389032][ T3028] hid-generic 0003:1038:12B6.000A: unknown main item tag 0x0 [ 161.396557][ T3028] hid-generic 0003:1038:12B6.000A: unknown main item tag 0x0 [ 161.450861][ T3028] hid-generic 0003:1038:12B6.000A: unknown main item tag 0x0 [ 161.458280][ T3028] hid-generic 0003:1038:12B6.000A: unknown main item tag 0x0 [ 161.465529][ T3028] hid-generic 0003:1038:12B6.000A: unknown main item tag 0x0 [ 161.472927][ T3028] hid-generic 0003:1038:12B6.000A: unknown main item tag 0x0 [ 161.480088][ T3028] hid-generic 0003:1038:12B6.000A: unknown main item tag 0x0 [ 161.487970][ T3028] hid-generic 0003:1038:12B6.000A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 161.588647][ T3324] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 161.715927][ T28] audit: type=1400 audit(8172039367.451:447): avc: denied { write } for pid=3319 comm="syz.3.1018" name="task" dev="proc" ino=33065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 161.746769][ T28] audit: type=1400 audit(8172039367.451:448): avc: denied { add_name } for pid=3319 comm="syz.3.1018" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 161.788356][ T28] audit: type=1400 audit(8172039367.461:449): avc: denied { create } for pid=3319 comm="syz.3.1018" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 161.829449][ T28] audit: type=1400 audit(8172039367.461:450): avc: denied { associate } for pid=3319 comm="syz.3.1018" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.027345][ T28] audit: type=1400 audit(8172039367.771:451): avc: denied { mount } for pid=3327 comm="syz.4.1019" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 162.094204][ T298] usb 3-1: USB disconnect, device number 11 [ 162.358125][ T3338] loop1: detected capacity change from 0 to 128 [ 162.365029][ T3338] vfat filesystem being mounted at /47/bus supports timestamps until 2107 (0x10391447e) [ 162.705783][ T298] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 162.786168][ T28] audit: type=1400 audit(8172039368.531:452): avc: denied { unmount } for pid=2947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 163.161462][ T3347] loop3: detected capacity change from 0 to 512 [ 163.177596][ T298] usb 3-1: Using ep0 maxpacket: 16 [ 163.180113][ T3347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.191681][ T3347] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 163.263157][ T3135] EXT4-fs (loop3): unmounting filesystem. [ 163.274910][ T331] usb 1-1: USB disconnect, device number 13 [ 163.337773][ T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.348570][ T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.359090][ T298] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 163.375621][ T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.398820][ T298] usb 3-1: config 0 descriptor?? [ 163.517941][ T3362] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 163.528715][ T3362] device syzkaller0 entered promiscuous mode [ 163.683086][ T331] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 163.868468][ T298] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 163.875371][ T298] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 163.882271][ T298] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 163.889224][ T298] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 163.896073][ T298] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 163.903139][ T298] appleir 0003:05AC:8241.000B: No inputs registered, leaving [ 163.911409][ T298] appleir 0003:05AC:8241.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 164.057672][ T331] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 164.066647][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.075893][ T331] usb 1-1: config 0 descriptor?? [ 164.122443][ T3370] loop1: detected capacity change from 0 to 512 [ 164.139983][ T3370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 164.149132][ T3370] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff) [ 164.242731][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 164.290219][ T3378] loop4: detected capacity change from 0 to 4096 [ 164.302981][ T3382] loop1: detected capacity change from 0 to 128 [ 164.307976][ T3378] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 164.313656][ T3382] vfat filesystem being mounted at /53/bus supports timestamps until 2107 (0x10391447e) [ 164.321432][ T3378] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 164.339467][ T28] audit: type=1400 audit(8172039370.091:453): avc: denied { relabelto } for pid=3377 comm="syz.4.1035" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 164.374741][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 164.421536][ T3388] loop4: detected capacity change from 0 to 512 [ 164.439321][ T3388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 164.448314][ T3388] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 164.743188][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 165.427649][ T331] usb 1-1: Cannot set autoneg [ 165.432390][ T331] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 165.443931][ T331] usb 1-1: USB disconnect, device number 14 [ 165.547591][ T19] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 166.042384][ T3413] loop4: detected capacity change from 0 to 512 [ 166.167683][ T3413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 166.196433][ T3413] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 166.284627][ T3419] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 166.295395][ T3419] device syzkaller0 entered promiscuous mode [ 166.494151][ T3428] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1048'. [ 166.507571][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 166.548742][ T333] usb 3-1: USB disconnect, device number 12 [ 166.686308][ T28] audit: type=1400 audit(8172039372.431:454): avc: denied { nlmsg_read } for pid=3432 comm="syz.4.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 168.349917][ T3437] loop1: detected capacity change from 0 to 2048 [ 169.325060][ T3437] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 169.339154][ T3437] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038 (0x7fffffff) [ 169.795073][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 169.795899][ T3457] 9p filesystem being mounted at /31/file0 supports timestamps until 2106 (0xffffffff) [ 170.040049][ T3468] loop4: detected capacity change from 0 to 512 [ 170.062013][ T3470] loop3: detected capacity change from 0 to 1024 [ 170.093094][ T3468] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.120632][ T3470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 170.146190][ T3468] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038 (0x7fffffff) [ 171.261868][ T3135] EXT4-fs (loop3): unmounting filesystem. [ 171.383231][ T3492] loop2: detected capacity change from 0 to 2048 [ 171.393524][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 171.394866][ T3496] loop3: detected capacity change from 0 to 512 [ 171.432646][ T3496] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1065: attempt to clear invalid blocks 2 len 1 [ 171.496367][ T3492] loop2: p1 < > p2 p3 < p5 > p4 [ 171.504233][ T3492] loop2: partition table partially beyond EOD, truncated [ 171.568549][ T3496] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 171.583047][ T3496] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1065: invalid indirect mapped block 1819239214 (level 0) [ 171.598609][ T3492] loop2: p1 start 4278190080 is beyond EOD, truncated [ 171.615036][ T3496] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1065: invalid indirect mapped block 1819239214 (level 1) [ 173.458312][ T3501] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 173.462548][ T3492] loop2: p2 start 16908800 is beyond EOD, [ 173.465018][ T3506] loop4: detected capacity change from 0 to 2048 [ 173.475860][ T3492] truncated [ 173.495487][ T3492] loop2: p4 start 11326 is beyond EOD, truncated [ 173.502149][ T3492] loop2: p5 start 16908800 is beyond EOD, truncated [ 173.502303][ T3496] EXT4-fs (loop3): 1 truncate cleaned up [ 173.529593][ T3496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.547231][ T3506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.556163][ T3506] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 174.030418][ T3514] 9p filesystem being mounted at /133/file0 supports timestamps until 2106 (0xffffffff) [ 174.810416][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 176.796434][ T3135] EXT4-fs (loop3): unmounting filesystem. [ 177.016734][ T3553] loop3: detected capacity change from 0 to 512 [ 177.179067][ T3553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.190774][ T3553] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 177.464119][ T3135] EXT4-fs (loop3): unmounting filesystem. [ 177.604951][ T3571] loop1: detected capacity change from 0 to 16 [ 177.657889][ T3571] erofs: (device loop1): mounted with root inode @ nid 36. [ 177.980521][ T28] audit: type=1400 audit(8172039383.711:455): avc: denied { create } for pid=3567 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.065670][ T3574] loop3: detected capacity change from 0 to 1024 [ 178.099439][ T3574] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 131174)! [ 178.117600][ T28] audit: type=1400 audit(8172039383.731:456): avc: denied { connect } for pid=3567 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.143487][ T3574] EXT4-fs (loop3): group descriptors corrupted! [ 178.166259][ T28] audit: type=1400 audit(8172039383.741:457): avc: denied { setopt } for pid=3567 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.299232][ T3582] loop1: detected capacity change from 0 to 2048 [ 178.335241][ T3582] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 178.346544][ T3586] 9p filesystem being mounted at /35/file0 supports timestamps until 2106 (0xffffffff) [ 178.356947][ T3582] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038 (0x7fffffff) [ 178.609623][ T3577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.616769][ T3577] IPv6: NLM_F_CREATE should be set when creating new route [ 178.659249][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 178.709044][ T3603] loop3: detected capacity change from 0 to 512 [ 178.812986][ T3603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 178.833405][ T3603] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 179.217887][ T3621] 9p filesystem being mounted at /39/file0 supports timestamps until 2106 (0xffffffff) [ 179.307155][ T3135] EXT4-fs (loop3): unmounting filesystem. [ 179.372346][ T3627] loop3: detected capacity change from 0 to 2048 [ 179.373009][ T3628] loop2: detected capacity change from 0 to 16 [ 179.386029][ T3628] erofs: (device loop2): mounted with root inode @ nid 36. [ 179.409840][ T3627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.418577][ T3627] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 179.487669][ T326] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 179.623180][ T3135] EXT4-fs (loop3): unmounting filesystem. [ 179.637604][ T19] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.764509][ T3635] fuse: Bad value for 'fd' [ 179.848043][ T326] usb 2-1: Using ep0 maxpacket: 16 [ 179.946405][ T3640] loop3: detected capacity change from 0 to 512 [ 180.655275][ T326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.666132][ T326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.676425][ T326] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 180.685457][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.697278][ T326] usb 2-1: config 0 descriptor?? [ 180.847743][ T19] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.127162][ T3522] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 181.207691][ T19] usb 5-1: config 1 interface 0 altsetting 170 bulk endpoint 0x82 has invalid maxpacket 16 [ 181.217854][ T19] usb 5-1: config 1 interface 0 has no altsetting 0 [ 181.268491][ T326] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 181.275419][ T326] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 181.282492][ T326] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 181.289508][ T326] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 181.296441][ T326] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 181.304088][ T326] appleir 0003:05AC:8241.000C: No inputs registered, leaving [ 181.314136][ T326] appleir 0003:05AC:8241.000C: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 181.377727][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.396815][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.404702][ T19] usb 5-1: Product: syz [ 181.417568][ T19] usb 5-1: Manufacturer: syz [ 181.422056][ T19] usb 5-1: SerialNumber: syz [ 181.457630][ T3625] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 181.487721][ T3522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11 [ 181.507582][ T3522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42893, setting to 1024 [ 181.527596][ T3522] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.557600][ T3522] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.566493][ T3522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.649001][ T3522] usb 4-1: config 0 descriptor?? [ 181.668394][ T3640] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 181.797921][ T19] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 181.817891][ T19] usb 5-1: USB disconnect, device number 11 [ 181.884588][ T3664] 9p filesystem being mounted at /110/file0 supports timestamps until 2106 (0xffffffff) [ 183.075883][ T3669] loop1: detected capacity change from 0 to 2048 [ 183.219518][ T3679] fuse: Bad value for 'fd' [ 183.397339][ T3678] capability: warning: `syz.0.1120' uses 32-bit capabilities (legacy support in use) [ 183.407490][ T3669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 183.415871][ T3669] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038 (0x7fffffff) [ 183.443509][ T28] audit: type=1400 audit(8172039389.191:458): avc: denied { validate_trans } for pid=3671 comm="syz.4.1116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 183.741185][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 183.897664][ T3522] usbhid 4-1:0.0: can't add hid device: -71 [ 183.904377][ T3522] usbhid: probe of 4-1:0.0 failed with error -71 [ 183.911399][ T3522] usb 4-1: USB disconnect, device number 13 [ 183.995337][ T3701] 9p filesystem being mounted at /112/file0 supports timestamps until 2106 (0xffffffff) [ 184.261807][ T28] audit: type=1400 audit(8172039390.011:459): avc: denied { bind } for pid=3716 comm="syz.0.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.285458][ T3715] loop4: detected capacity change from 0 to 512 [ 184.338719][ T28] audit: type=1400 audit(8172039390.031:460): avc: denied { name_bind } for pid=3716 comm="syz.0.1131" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 184.359877][ T28] audit: type=1400 audit(8172039390.031:461): avc: denied { node_bind } for pid=3716 comm="syz.0.1131" saddr=::ffff:10.1.1.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 184.422546][ T3519] device bridge_slave_1 left promiscuous mode [ 184.446487][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.455269][ T3715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.487099][ T3715] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038 (0x7fffffff) [ 184.513001][ T3519] device bridge_slave_0 left promiscuous mode [ 184.539519][ T3727] loop1: detected capacity change from 0 to 128 [ 184.549057][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.605566][ T3519] device veth1_macvtap left promiscuous mode [ 184.624615][ T3727] FAT-fs (loop1): Unrecognized mount option "5?@#/0~R9-HQNTIMU{{^zA>_EcP6 anϵwu̧=Xeg%" or missing value [ 184.643547][ T6] usb 2-1: USB disconnect, device number 7 [ 184.668176][ T3519] device veth0_vlan left promiscuous mode [ 184.754858][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 184.972054][ T3731] fuse: Bad value for 'fd' [ 185.174981][ T3735] 9p filesystem being mounted at /114/file0 supports timestamps until 2106 (0xffffffff) [ 185.260167][ T3738] loop4: detected capacity change from 0 to 2048 [ 185.401916][ T3738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 185.472707][ T3738] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 185.685121][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 185.889838][ T28] audit: type=1400 audit(8172039391.611:462): avc: denied { map } for pid=3749 comm="syz.2.1141" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.192096][ T28] audit: type=1400 audit(8172039391.611:463): avc: denied { execute } for pid=3749 comm="syz.2.1141" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.465950][ T3765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1146'. [ 186.769653][ T3771] loop4: detected capacity change from 0 to 256 [ 186.798023][ T3773] 9p filesystem being mounted at /79/file0 supports timestamps until 2106 (0xffffffff) [ 186.810473][ T3771] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 186.875682][ T3771] exfat filesystem being mounted at /46/file0 supports timestamps until 2107 (0x10391447f) [ 186.954377][ T3778] fuse: Unknown parameter 'fd0x0000000000000005' [ 187.156807][ T3785] fuse: Bad value for 'fd' [ 187.400802][ T3784] loop1: detected capacity change from 0 to 2048 [ 187.560840][ T3784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.282671][ T3784] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff) [ 188.399567][ T3810] 9p filesystem being mounted at /121/file0 supports timestamps until 2106 (0xffffffff) [ 188.735421][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 188.939591][ T3824] fuse: Unknown parameter 'fd0x0000000000000005' [ 188.956988][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 188.968819][ T3826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1165'. [ 188.981224][ T3823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1164'. [ 188.995591][ T3829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 189.162736][ T3837] fuse: Bad value for 'fd' [ 189.364709][ T3839] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 189.397462][ T3839] device syzkaller0 entered promiscuous mode [ 189.494720][ T3844] sch_tbf: burst 1399 is lower than device lo mtu (65550) ! [ 189.567583][ T3848] loop4: detected capacity change from 0 to 2048 [ 189.977598][ T40] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.026145][ T3848] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.048626][ T3848] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038 (0x7fffffff) [ 190.051489][ T3857] 9p filesystem being mounted at /125/file0 supports timestamps until 2106 (0xffffffff) [ 190.257678][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 190.360994][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 190.404013][ T40] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 190.421024][ T40] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 190.430741][ T40] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 190.451385][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.461339][ T40] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.471398][ T40] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.484709][ T40] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 190.493951][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.719444][ T40] usb 2-1: config 0 descriptor?? [ 191.650174][ T3875] fuse: Bad value for 'fd' [ 191.686354][ T40] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 191.743140][ T40] usb 2-1: USB disconnect, device number 8 [ 191.850511][ T40] usblp0: removed [ 191.978472][ T3888] loop2: detected capacity change from 0 to 512 [ 192.186785][ T3888] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 192.195383][ T3888] EXT4-fs (loop2): failed to open journal device unknown-block(4,137) -6 [ 192.244532][ T3890] 9p filesystem being mounted at /158/file0 supports timestamps until 2106 (0xffffffff) [ 192.308014][ T3892] loop4: detected capacity change from 0 to 2048 [ 192.384325][ T28] audit: type=1326 audit(8172039398.131:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.1181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2f337dff9 code=0x0 [ 192.412143][ T3892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 192.420749][ T3892] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 192.477696][ T40] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 193.060855][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 193.096084][ T3907] loop2: detected capacity change from 0 to 2048 [ 193.105946][ T3911] loop1: detected capacity change from 0 to 512 [ 193.213456][ T3907] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 193.223517][ T3911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.250383][ T3907] virtio-fs: tag <(null)> not found [ 193.256724][ T3911] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038 (0x7fffffff) [ 193.330231][ T2052] EXT4-fs (loop2): unmounting filesystem. [ 193.486740][ T3923] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 193.513995][ T3923] device syzkaller0 entered promiscuous mode [ 193.870493][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 194.734117][ T3943] syz.2.1199 (3943) used greatest stack depth: 19160 bytes left [ 194.927973][ T3951] loop2: detected capacity change from 0 to 2048 [ 195.001609][ T3951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.020148][ T3951] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038 (0x7fffffff) [ 195.136777][ T3963] loop4: detected capacity change from 0 to 512 [ 195.265630][ T3963] EXT4-fs (loop4): 1 truncate cleaned up [ 195.281091][ T3963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 195.296063][ T2052] EXT4-fs (loop2): unmounting filesystem. [ 195.336510][ T3967] loop2: detected capacity change from 0 to 512 [ 195.347568][ T3948] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 195.380677][ T3967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.475169][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 195.520564][ T3975] fuse: Bad value for 'fd' [ 195.623747][ T3967] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6). [ 195.634357][ T3967] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 195.659354][ T3967] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 195.677592][ T28] audit: type=1400 audit(8172039401.401:465): avc: denied { read } for pid=3966 comm="syz.2.1206" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.703622][ T3967] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6). [ 195.714400][ T3967] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 195.731321][ T28] audit: type=1400 audit(8172039401.401:466): avc: denied { open } for pid=3966 comm="syz.2.1206" path="/133/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.778742][ T3948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.359462][ T2052] EXT4-fs (loop2): unmounting filesystem. [ 196.365092][ T3948] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.395444][ T3986] loop3: detected capacity change from 0 to 512 [ 196.401687][ T3948] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.425641][ T3986] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.444468][ T3986] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 196.463155][ T3135] EXT4-fs (loop3): unmounting filesystem. [ 196.587728][ T3948] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.596664][ T3948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.612041][ T3948] usb 2-1: Product: syz [ 196.616059][ T3948] usb 2-1: Manufacturer: syz [ 196.625941][ T3948] usb 2-1: SerialNumber: syz [ 196.654006][ T3999] loop4: detected capacity change from 0 to 2048 [ 196.668843][ T4001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 196.678000][ T4001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 196.678797][ T3999] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.686769][ T4001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 196.708255][ T3948] cdc_ncm 2-1:1.0: skipping garbage [ 196.709536][ T3999] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 196.775205][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 196.958510][ T3948] cdc_ncm 2-1:1.0: bind() failure [ 196.971314][ T3948] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 196.978435][ T3948] cdc_ncm 2-1:1.1: bind() failure [ 197.052093][ T3948] usb 2-1: USB disconnect, device number 10 [ 197.135935][ T4015] fuse: Bad value for 'fd' [ 197.300897][ T4020] loop4: detected capacity change from 0 to 512 [ 197.341677][ T4021] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 197.377454][ T4026] loop2: detected capacity change from 0 to 1024 [ 197.400667][ T4026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.409018][ T4020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 197.423525][ T4020] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038 (0x7fffffff) [ 197.440482][ T4033] loop3: detected capacity change from 0 to 1024 [ 197.450622][ T4026] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.467124][ T4021] device syzkaller0 entered promiscuous mode [ 197.482550][ T4033] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 131174)! [ 197.507597][ T4026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.523221][ T4033] EXT4-fs (loop3): group descriptors corrupted! [ 197.538155][ T4026] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 197.553789][ T4026] System zones: 0-1, 3-36 [ 197.564789][ T4026] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 197.938659][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 198.153341][ T4036] EXT4-fs (loop2): unmounting filesystem. [ 198.170328][ T4043] loop1: detected capacity change from 0 to 2048 [ 198.193040][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 198.216898][ T4043] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.227648][ T4043] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038 (0x7fffffff) [ 198.821052][ T4055] fuse: Bad value for 'fd' [ 198.830486][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 199.262131][ T4061] loop4: detected capacity change from 0 to 512 [ 199.298866][ T4061] EXT4-fs error (device loop4): ext4_get_journal_inode:5720: comm syz.4.1237: inode #196608: comm syz.4.1237: iget: illegal inode # [ 199.327948][ T4061] EXT4-fs (loop4): Remounting filesystem read-only [ 199.336321][ T4061] EXT4-fs (loop4): no journal found [ 199.347064][ T4061] EXT4-fs (loop4): can't get journal size [ 199.377889][ T4061] EXT4-fs (loop4): failed to initialize system zone (-22) [ 199.408441][ T4061] EXT4-fs (loop4): mount failed [ 199.469985][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.476849][ T4065] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.518288][ T4065] device bridge_slave_0 entered promiscuous mode [ 199.533516][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.547589][ T4065] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.639375][ T4065] device bridge_slave_1 entered promiscuous mode [ 199.993723][ T4078] loop3: detected capacity change from 0 to 8192 [ 200.039783][ T2927] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.204238][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.211157][ T4065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.218247][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.225017][ T4065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.700903][ T4086] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 200.711392][ T4086] device syzkaller0 entered promiscuous mode [ 200.735711][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.141347][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.183474][ T4098] fuse: Bad value for 'fd' [ 201.419449][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.427734][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.484990][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.488867][ T4104] loop1: detected capacity change from 0 to 512 [ 201.493866][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.508697][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.515552][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.523001][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.537728][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.546258][ T4104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.553875][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.561842][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.563126][ T4104] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038 (0x7fffffff) [ 201.590128][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.609217][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.626130][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.634435][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.654255][ T4065] device veth0_vlan entered promiscuous mode [ 201.662334][ T3522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.680162][ T3522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.692913][ T3522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.702645][ T3522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.723057][ T3522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.730673][ T3522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.738359][ T3522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.747811][ T3522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.756708][ T4065] device veth1_macvtap entered promiscuous mode [ 201.766176][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.785050][ T3520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.793698][ T3520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.794706][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 201.802247][ T3520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.815546][ T3520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.889496][ T4126] loop1: detected capacity change from 0 to 16 [ 203.166378][ T4126] erofs: (device loop1): mounted with root inode @ nid 36. [ 204.182630][ T4135] fuse: Bad value for 'fd' [ 204.481697][ T4153] loop4: detected capacity change from 0 to 512 [ 204.499363][ T4153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.508251][ T4153] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038 (0x7fffffff) [ 204.592196][ T4158] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 204.617748][ T4158] device syzkaller0 entered promiscuous mode [ 205.123833][ T4167] loop1: detected capacity change from 0 to 16 [ 205.426028][ T4167] erofs: (device loop1): mounted with root inode @ nid 36. [ 205.474589][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 207.527194][ T28] audit: type=1400 audit(8172039413.031:467): avc: denied { sys_module } for pid=4196 comm="syz.1.1273" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.757549][ T28] audit: type=1400 audit(8172039413.031:468): avc: denied { module_load } for pid=4196 comm="syz.1.1273" path="/sys/power/wakeup_count" dev="sysfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 208.431891][ T4225] loop4: detected capacity change from 0 to 16 [ 208.464470][ T4225] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 208.553948][ T4227] loop1: detected capacity change from 0 to 2048 [ 208.564841][ T4225] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 208.575818][ T4227] EXT4-fs: Ignoring removed bh option [ 208.583792][ T4225] erofs: (device loop4): mounted with root inode @ nid 36. [ 208.597039][ T4227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.604053][ T4227] EXT4-fs: Ignoring removed nobh option [ 208.704944][ T4227] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 209.893575][ T4245] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 209.919613][ T4227] EXT4-fs (loop1): shut down requested (2) [ 209.935046][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 210.032928][ T4255] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 210.063926][ T4259] loop2: detected capacity change from 0 to 512 [ 210.073336][ T4261] loop1: detected capacity change from 0 to 256 [ 210.175546][ T4266] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 210.178431][ T4261] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 210.202662][ T4261] exfat filesystem being mounted at /106/file0 supports timestamps until 2107 (0x10391447f) [ 210.369005][ T4259] EXT4-fs (loop2): 1 orphan inode deleted [ 210.374629][ T4259] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 210.385115][ T4259] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 210.394880][ T1143] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 210.408873][ T1143] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:6: Failed to release dquot type 1 [ 213.088205][ T28] audit: type=1400 audit(8172039418.021:469): avc: denied { watch watch_reads } for pid=4257 comm="syz.1.1289" path="/106/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.156789][ T4281] loop3: detected capacity change from 0 to 16 [ 213.168077][ T28] audit: type=1400 audit(8172039418.641:470): avc: denied { ioctl } for pid=4257 comm="syz.1.1289" path="/106/file0/hugetlb.2MB.usage_in_bytes" dev="loop1" ino=1048766 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 213.187305][ T4285] loop4: detected capacity change from 0 to 512 [ 213.201263][ T4281] erofs: (device loop3): mounted with root inode @ nid 36. [ 213.216732][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 213.224066][ T1143] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 213.238274][ T1143] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:6: Failed to release dquot type 1 [ 213.249958][ T2927] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.682016][ T331] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 214.763779][ T4307] loop2: detected capacity change from 0 to 128 [ 214.866650][ T4307] vfat filesystem being mounted at /12/file0 supports timestamps until 2107 (0x10391447e) [ 214.873038][ T4310] loop1: detected capacity change from 0 to 512 [ 214.970352][ T4310] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 215.098564][ T4310] EXT4-fs (loop1): 1 truncate cleaned up [ 215.113837][ T4310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 215.167692][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11 [ 215.180818][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 215.216207][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42893, setting to 1024 [ 215.245605][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.249056][ T4318] loop1: detected capacity change from 0 to 512 [ 215.272646][ T331] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.296828][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.322690][ T331] usb 5-1: config 0 descriptor?? [ 215.347918][ T4285] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 215.349321][ T4318] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 215.364063][ T4318] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038 (0x7fffffff) [ 215.561222][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 215.634554][ T4322] loop1: detected capacity change from 0 to 512 [ 215.824216][ T331] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 215.846013][ T331] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 215.878428][ T4322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 215.920104][ T331] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 216.008380][ T4322] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038 (0x7fffffff) [ 216.050442][ T4332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1307'. [ 216.361848][ T4333] fuse: Bad value for 'fd' [ 216.884310][ T4343] loop2: detected capacity change from 0 to 256 [ 217.087716][ T4343] FAT-fs (loop2): invalid media value (0x29) [ 217.124636][ T4343] FAT-fs (loop2): Can't find a valid FAT filesystem [ 217.257836][ T3948] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 217.367595][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 217.499336][ T4359] loop1: detected capacity change from 0 to 16 [ 217.508318][ T4359] erofs: (device loop1): mounted with root inode @ nid 36. [ 217.634533][ T4366] loop2: detected capacity change from 0 to 512 [ 217.642670][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.653292][ T4366] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 217.677197][ T4366] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1318: iget: bad i_size value: -67835469387268086 [ 217.690474][ T4366] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1318: couldn't read orphan inode 15 (err -117) [ 217.708660][ T4366] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 217.717871][ T4366] ext2 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 217.917450][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 217.944940][ T4385] loop4: detected capacity change from 0 to 512 [ 218.044441][ T4385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 218.053577][ T4385] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038 (0x7fffffff) [ 218.262152][ T331] usb 5-1: USB disconnect, device number 12 [ 218.318367][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 219.448547][ T4398] loop2: detected capacity change from 0 to 512 [ 219.647915][ T4398] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 219.656828][ T4398] EXT4-fs (loop2): failed to open journal device unknown-block(4,137) -6 [ 219.696893][ T4401] loop3: detected capacity change from 0 to 2048 [ 219.783078][ T2927] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.835118][ T4401] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 219.866915][ T4401] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038 (0x7fffffff) [ 220.204804][ T4401] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz.3.1328: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 220.221363][ T4416] loop4: detected capacity change from 0 to 1024 [ 220.256143][ T4416] EXT4-fs: Ignoring removed orlov option [ 220.263607][ T4416] EXT4-fs: Ignoring removed bh option [ 220.278053][ T4416] EXT4-fs (loop4): Test dummy encryption mode enabled [ 220.317081][ T4416] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.381935][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 220.587349][ T3135] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /72/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 220.761431][ T4428] EXT4-fs (loop3): unmounting filesystem. [ 221.822985][ T28] audit: type=1400 audit(8172039427.571:471): avc: denied { map } for pid=4446 comm="syz.2.1342" path="socket:[37893]" dev="sockfs" ino=37893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.963315][ T10] device bridge_slave_1 left promiscuous mode [ 222.001927][ T4451] loop1: detected capacity change from 0 to 512 [ 222.007626][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.028599][ T10] device bridge_slave_0 left promiscuous mode [ 222.032644][ T4451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 222.044002][ T4451] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038 (0x7fffffff) [ 222.072703][ T4451] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1343: bg 0: block 344: padding at end of block bitmap is not set [ 222.074448][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.110838][ T10] device veth1_macvtap left promiscuous mode [ 222.127820][ T10] device veth0_vlan left promiscuous mode [ 222.139812][ T4451] Quota error (device loop1): write_blk: dquota write failed [ 222.202023][ T4451] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 222.256048][ T4451] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 222.307769][ T4451] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.1343: Failed to acquire dquot type 1 [ 222.388478][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 222.588665][ T4463] loop1: detected capacity change from 0 to 16 [ 222.639134][ T4463] erofs: (device loop1): mounted with root inode @ nid 36. [ 222.867672][ T47] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 222.918154][ T4468] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 223.144464][ T4480] loop4: detected capacity change from 0 to 256 [ 223.157747][ T4458] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.165029][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.210615][ T4480] FAT-fs (loop4): invalid media value (0x29) [ 223.216491][ T4480] FAT-fs (loop4): Can't find a valid FAT filesystem [ 223.225869][ T4458] device bridge_slave_0 entered promiscuous mode [ 223.236800][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.244608][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.254088][ T4458] device bridge_slave_1 entered promiscuous mode [ 223.743856][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.750768][ T4458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.757877][ T4458] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.764823][ T4458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.773959][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.781539][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.812973][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.820633][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.837221][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.847745][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.856671][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.863556][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.871661][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.164367][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.186560][ T4503] loop1: detected capacity change from 0 to 1024 [ 224.193219][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.193643][ T4503] EXT4-fs: Ignoring removed orlov option [ 224.200116][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.217155][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.231235][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.250866][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.259590][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.266609][ T4503] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 224.293865][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.297567][ T298] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 224.312904][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.368191][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 224.375189][ T4458] device veth0_vlan entered promiscuous mode [ 224.385682][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.506823][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.426845][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.487320][ T4515] loop1: detected capacity change from 0 to 512 [ 225.512618][ T4513] loop2: detected capacity change from 0 to 1024 [ 225.512767][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.533306][ T4513] EXT4-fs: Ignoring removed orlov option [ 225.542248][ T4513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.549007][ T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.553671][ T4515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.559184][ T298] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 225.573351][ T4458] device veth1_macvtap entered promiscuous mode [ 225.576845][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.583986][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.599108][ T4515] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038 (0x7fffffff) [ 225.600277][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.612929][ T298] usb 5-1: config 0 descriptor?? [ 225.617365][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.630727][ T4513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 225.658139][ T298] rndis_host: probe of 5-1:0.0 failed with error -22 [ 225.666132][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.675779][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.684314][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.693963][ T28] audit: type=1400 audit(8172039431.441:472): avc: denied { ioctl } for pid=4512 comm="syz.2.1360" path="/25/file1/file1" dev="loop2" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 225.728335][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 225.728635][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.947074][ T4127] usb 5-1: USB disconnect, device number 13 [ 226.643193][ T4530] fuse: Bad value for 'fd' [ 226.805948][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 226.838614][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 227.157568][ T4127] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 227.219159][ T28] audit: type=1400 audit(8172039432.971:473): avc: denied { read } for pid=4546 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.287802][ T4555] loop4: detected capacity change from 0 to 512 [ 227.355883][ T4555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 227.365581][ T4555] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038 (0x7fffffff) [ 227.474758][ T4563] loop3: detected capacity change from 0 to 256 [ 227.560539][ T4563] vfat filesystem being mounted at /1/file0 supports timestamps until 2107 (0x10391447e) [ 227.594808][ T28] audit: type=1400 audit(8172039433.331:474): avc: denied { create } for pid=4557 comm="syz.3.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 227.707836][ T4127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.751034][ T4127] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 227.818136][ T4127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.826920][ T4127] usb 3-1: config 0 descriptor?? [ 227.828108][ T4569] 9pnet_fd: Insufficient options for proto=fd [ 227.862744][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 227.878210][ T4127] rndis_host: probe of 3-1:0.0 failed with error -22 [ 228.012923][ T4578] fuse: Bad value for 'fd' [ 228.122226][ T4127] usb 3-1: USB disconnect, device number 13 [ 228.313077][ T28] audit: type=1400 audit(8172039433.981:475): avc: denied { getopt } for pid=4581 comm="syz.3.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.009947][ T4596] usb usb8: usbfs: process 4596 (syz.1.1382) did not claim interface 0 before use [ 229.321235][ T4600] loop2: detected capacity change from 0 to 2048 [ 229.356965][ T4607] loop4: detected capacity change from 0 to 256 [ 229.368182][ T4607] vfat filesystem being mounted at /95/bus supports timestamps until 2107 (0x10391447e) [ 229.391502][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.416128][ T4600] virtio-fs: tag <(null)> not found [ 229.426813][ T4610] loop4: detected capacity change from 0 to 512 [ 229.453889][ T4610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 229.480405][ T4610] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1387: invalid indirect mapped block 83886080 (level 1) [ 229.496043][ T4610] EXT4-fs (loop4): 1 orphan inode deleted [ 229.502305][ T4610] EXT4-fs (loop4): 1 truncate cleaned up [ 229.508009][ T4610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 229.509761][ T4614] loop3: detected capacity change from 0 to 256 [ 229.535550][ T4614] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 229.550365][ T4614] exfat filesystem being mounted at /4/file0 supports timestamps until 2107 (0x10391447f) [ 229.566699][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 229.567032][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 230.249048][ T4616] loop1: detected capacity change from 0 to 128 [ 230.283139][ T4620] netlink: 'syz.4.1390': attribute type 3 has an invalid length. [ 230.324654][ T4621] loop2: detected capacity change from 0 to 2048 [ 230.335329][ T4616] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 230.345785][ T4616] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038 (0x7fffffff) [ 230.428497][ T4621] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 230.438000][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 230.708467][ T43] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 230.742774][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 230.755023][ T43] EXT4-fs (loop2): This should not happen!! Data will be lost [ 230.755023][ T43] [ 230.765820][ T43] EXT4-fs (loop2): Total free blocks count 0 [ 230.771764][ T43] EXT4-fs (loop2): Free/Dirty block details [ 230.783316][ T43] EXT4-fs (loop2): free_blocks=2415919104 [ 230.788913][ T43] EXT4-fs (loop2): dirty_blocks=16 [ 230.793807][ T43] EXT4-fs (loop2): Block reservation details [ 230.800832][ T43] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 230.807335][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 230.827954][ T4645] loop2: detected capacity change from 0 to 16 [ 230.834547][ T4645] erofs: (device loop2): mounted with root inode @ nid 36. [ 230.863587][ T4647] loop4: detected capacity change from 0 to 2048 [ 230.887660][ T4649] loop2: detected capacity change from 0 to 2048 [ 230.896388][ T4647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 230.916911][ T4647] virtio-fs: tag <(null)> not found [ 230.927118][ T4649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 230.943946][ T4649] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 230.944564][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 231.009092][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 231.147942][ T4659] loop4: detected capacity change from 0 to 512 [ 231.156058][ T4659] EXT4-fs: Ignoring removed oldalloc option [ 231.206585][ T4659] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1402: Parent and EA inode have the same ino 15 [ 231.219191][ T4659] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1402: Parent and EA inode have the same ino 15 [ 231.324269][ T4659] EXT4-fs (loop4): 1 orphan inode deleted [ 231.331626][ T4659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 231.937325][ T4671] overlayfs: unrecognized mount option "//file0" or missing value [ 232.292042][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 232.617981][ T28] audit: type=1400 audit(8172039438.361:476): avc: denied { read } for pid=4675 comm="syz.1.1407" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 233.374201][ T4678] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 233.422130][ T28] audit: type=1400 audit(8172039438.361:477): avc: denied { open } for pid=4675 comm="syz.1.1407" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 233.686940][ T28] audit: type=1400 audit(8172039439.121:478): avc: denied { ioctl } for pid=4677 comm="syz.0.1406" path="cgroup:[4026532460]" dev="nsfs" ino=4026532460 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 233.745043][ T28] audit: type=1400 audit(8172039439.281:479): avc: denied { create } for pid=4692 comm="syz.4.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 233.767460][ T4701] netlink: 4464 bytes leftover after parsing attributes in process `syz.4.1414'. [ 233.820299][ T28] audit: type=1400 audit(8172039439.291:480): avc: denied { write } for pid=4692 comm="syz.4.1411" path="socket:[38592]" dev="sockfs" ino=38592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 233.914807][ T4703] fuse: Bad value for 'fd' [ 234.805620][ T4715] loop3: detected capacity change from 0 to 2048 [ 234.910980][ T4715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.973422][ T4725] netlink: 'syz.1.1421': attribute type 4 has an invalid length. [ 234.981073][ T4725] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1421'. [ 235.187819][ T4725] loop1: detected capacity change from 0 to 256 [ 235.199599][ T4725] vfat filesystem being mounted at /139/file0 supports timestamps until 2107 (0x10391447e) [ 235.286512][ T4715] virtio-fs: tag <(null)> not found [ 235.456107][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 235.513567][ T4738] loop3: detected capacity change from 0 to 512 [ 235.539246][ T4738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 235.554922][ T4738] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 235.566571][ T4738] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 236.050925][ T4751] fuse: Invalid rootmode [ 236.060298][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 236.109095][ T4745] fuse: Unknown parameter '0x0000000000000006' [ 236.164749][ T4762] loop4: detected capacity change from 0 to 2048 [ 236.189500][ T4762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 236.199682][ T4762] virtio-fs: tag <(null)> not found [ 236.208419][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 236.217939][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 236.218807][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 236.232564][ T4766] device wireguard0 entered promiscuous mode [ 236.267974][ T28] audit: type=1400 audit(8172039442.021:481): avc: denied { watch } for pid=4768 comm="syz.4.1435" path="/proc/300/fdinfo" dev="proc" ino=39021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 236.312134][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.419366][ T4777] loop4: detected capacity change from 0 to 512 [ 236.534421][ T4777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 236.546302][ T4777] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038 (0x7fffffff) [ 236.627330][ T4784] loop2: detected capacity change from 0 to 256 [ 236.633740][ T4784] exfat: Deprecated parameter 'utf8' [ 236.644829][ T4784] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 236.658654][ T4784] exfat filesystem being mounted at /35/file1 supports timestamps until 2107 (0x10391447f) [ 236.982436][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 237.070672][ T4788] loop1: detected capacity change from 0 to 1024 [ 237.096522][ T4788] EXT4-fs: Ignoring removed orlov option [ 237.112948][ T4788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.175108][ T4788] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.454980][ T4806] fuse: Unknown parameter '0x0000000000000006' [ 237.506378][ T4804] virtio-fs: tag <(null)> not found [ 237.542507][ T4808] loop2: detected capacity change from 0 to 128 [ 237.549783][ T4808] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.576009][ T4808] vfat filesystem being mounted at /36/file0 supports timestamps until 2107 (0x10391447e) [ 237.605991][ T4816] loop3: detected capacity change from 0 to 512 [ 237.629459][ T4816] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 237.638458][ T4816] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 237.678263][ T4816] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1451: bg 0: block 344: padding at end of block bitmap is not set [ 237.692708][ T4816] Quota error (device loop3): write_blk: dquota write failed [ 237.700188][ T4816] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 237.709498][ T4816] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 237.719402][ T4816] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.1451: Failed to acquire dquot type 1 [ 237.731594][ T4823] Quota error (device loop3): write_blk: dquota write failed [ 237.746890][ T4823] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 237.756241][ T4823] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 237.766273][ T4823] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.1451: Failed to acquire dquot type 1 [ 237.810003][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 237.831638][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 238.020085][ T4822] loop2: detected capacity change from 0 to 512 [ 238.047227][ T4822] EXT4-fs (loop2): 1 truncate cleaned up [ 238.056448][ T4822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 238.999877][ T4845] loop3: detected capacity change from 0 to 2048 [ 239.113203][ T4845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 239.125330][ T4845] virtio-fs: tag <(null)> not found [ 239.146260][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 239.527934][ T28] audit: type=1400 audit(8172039444.961:482): avc: denied { bind } for pid=4847 comm="syz.4.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.558841][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 239.582755][ T4862] loop2: detected capacity change from 0 to 16 [ 239.604083][ T4862] erofs: (device loop2): mounted with root inode @ nid 36. [ 239.605779][ T4864] loop3: detected capacity change from 0 to 256 [ 240.758305][ T4864] exfat filesystem being mounted at /20/qY3aK supports timestamps until 2107 (0x10391447f) [ 246.390380][ T4894] loop4: detected capacity change from 0 to 2048 [ 246.444764][ T4903] loop1: detected capacity change from 0 to 16 [ 246.478109][ T4894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 246.488058][ T4903] erofs: (device loop1): mounted with root inode @ nid 36. [ 246.511701][ T4894] virtio-fs: tag <(null)> not found [ 246.633590][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 246.756397][ T4909] loop4: detected capacity change from 0 to 512 [ 247.006004][ T4909] EXT4-fs (loop4): 1 truncate cleaned up [ 247.012828][ T4909] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 248.771460][ T28] audit: type=1400 audit(8172039454.521:483): avc: denied { mounton } for pid=4928 comm="syz.0.1483" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 248.845512][ T4930] loop2: detected capacity change from 0 to 16 [ 248.913559][ T4932] loop1: detected capacity change from 0 to 512 [ 248.939601][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 248.991618][ T4930] erofs: (device loop2): mounted with root inode @ nid 36. [ 249.022107][ T2927] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.128986][ T4932] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.488192][ T4960] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 250.498660][ T4960] device syzkaller0 entered promiscuous mode [ 250.522073][ T4965] loop1: detected capacity change from 0 to 16 [ 250.640146][ T4965] erofs: (device loop1): mounted with root inode @ nid 36. [ 250.670579][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.690695][ T4965] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 250.719298][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.737421][ T4965] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[1851] [ 250.751291][ T4965] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 250.753565][ T4947] device bridge_slave_0 entered promiscuous mode [ 250.769085][ T4969] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 250.784728][ T4969] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[1851] [ 250.805639][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.818264][ T4969] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 250.855415][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.933192][ T4947] device bridge_slave_1 entered promiscuous mode [ 250.940220][ T43] device bridge_slave_1 left promiscuous mode [ 250.946405][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.954264][ T43] device bridge_slave_0 left promiscuous mode [ 250.960703][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.972065][ T43] device veth1_macvtap left promiscuous mode [ 250.991379][ T43] device veth0_vlan left promiscuous mode [ 251.399759][ T4980] loop4: detected capacity change from 0 to 512 [ 251.415184][ T4980] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 251.459964][ T4984] loop2: detected capacity change from 0 to 16 [ 251.472706][ T4984] erofs: (device loop2): mounted with root inode @ nid 36. [ 251.518783][ T4987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1500'. [ 251.527730][ T4987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1500'. [ 251.536577][ T4987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1500'. [ 251.553489][ T4987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1500'. [ 251.631001][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.639110][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.654419][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.662823][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.672068][ T1544] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.678994][ T1544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.686502][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.695282][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.714206][ T1544] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.721113][ T1544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.738717][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.966678][ T4127] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 252.047119][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.222991][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.271653][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.283307][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.644936][ T5002] ip6t_rpfilter: unknown options [ 253.353404][ T5007] loop4: detected capacity change from 0 to 256 [ 253.364077][ T5007] vfat filesystem being mounted at /124/file0 supports timestamps until 2107 (0x103901ffe) [ 253.403549][ T4947] device veth0_vlan entered promiscuous mode [ 253.412377][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.420484][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.429450][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.436933][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.079712][ T5010] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 254.090266][ T5010] device syzkaller0 entered promiscuous mode [ 254.098899][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.106983][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.115125][ T4127] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 254.123884][ T4127] usb 3-1: config 0 has no interface number 0 [ 254.129642][ T4947] device veth1_macvtap entered promiscuous mode [ 254.136907][ T4127] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 254.150659][ T4127] usb 3-1: New USB device found, idVendor=0458, idProduct=7025, bcdDevice=5a.ea [ 254.152918][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.167691][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.168425][ T4127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.176459][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.213020][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.223422][ T28] audit: type=1400 audit(8172039459.971:484): avc: denied { mounton } for pid=4947 comm="syz-executor" path="/root/syzkaller.mj2ofC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 254.229006][ T4127] usb 3-1: config 0 descriptor?? [ 254.303261][ T5023] loop3: detected capacity change from 0 to 128 [ 254.311205][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.328398][ T4990] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 254.345372][ T5023] vfat filesystem being mounted at /31/file0 supports timestamps until 2107 (0x10391447e) [ 254.564947][ T24] usb 3-1: USB disconnect, device number 14 [ 255.613068][ T5039] loop1: detected capacity change from 0 to 512 [ 255.734101][ T5039] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 255.756201][ T28] audit: type=1400 audit(8172039461.501:485): avc: denied { ioctl } for pid=5041 comm="syz.0.1514" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 255.761660][ T5039] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038 (0x7fffffff) [ 256.106150][ T28] audit: type=1400 audit(8172039461.851:486): avc: denied { wake_alarm } for pid=5064 comm="syz.0.1521" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.131319][ T5063] loop3: detected capacity change from 0 to 1024 [ 256.206271][ T5066] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 256.231448][ T5066] device syzkaller0 entered promiscuous mode [ 256.320532][ T5063] EXT4-fs: Ignoring removed orlov option [ 256.384200][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 256.385900][ T5063] EXT4-fs (loop3): Test dummy encryption mode enabled [ 256.396417][ T5063] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 256.603738][ T4998] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 256.967741][ T4998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.983728][ T4998] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.111977][ T4998] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.197323][ T5103] ip6t_rpfilter: unknown options [ 257.851184][ T5107] loop1: detected capacity change from 0 to 512 [ 257.857262][ T4998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.857294][ T4998] usb 5-1: SerialNumber: syz [ 257.942604][ T5107] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 257.951521][ T5107] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038 (0x7fffffff) [ 258.010530][ T5123] loop2: detected capacity change from 0 to 256 [ 258.073650][ T5123] vfat filesystem being mounted at /53/file0 supports timestamps until 2107 (0x10391447e) [ 258.159663][ T2710] EXT4-fs (loop1): unmounting filesystem. [ 258.190782][ T4998] usb 5-1: 0:2 : does not exist [ 258.203025][ T4998] usb 5-1: unit 255 not found! [ 258.396705][ T5139] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 258.423286][ T5139] device syzkaller0 entered promiscuous mode [ 258.576843][ T28] audit: type=1400 audit(8172039465.326:487): avc: denied { audit_write } for pid=5140 comm="syz.0.1547" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 258.667645][ T4998] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 258.677929][ T4998] usb 5-1: USB disconnect, device number 14 [ 258.833223][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.841651][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.850266][ T5145] device bridge_slave_0 entered promiscuous mode [ 258.857859][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.865126][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.874178][ T5145] device bridge_slave_1 entered promiscuous mode [ 259.057949][ T2927] udevd[2927]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 259.058744][ T5160] loop3: detected capacity change from 0 to 512 [ 259.094484][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.095311][ T5160] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 259.101426][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.101528][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.110678][ T5160] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038 (0x7fffffff) [ 259.117294][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.151922][ T1143] device bridge_slave_1 left promiscuous mode [ 259.170815][ T5165] loop4: detected capacity change from 0 to 1024 [ 259.177563][ T5165] EXT4-fs: Ignoring removed orlov option [ 259.183403][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.191024][ T1143] device bridge_slave_0 left promiscuous mode [ 259.197023][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.205730][ T5165] EXT4-fs (loop4): Test dummy encryption mode enabled [ 259.212601][ T1143] device veth1_macvtap left promiscuous mode [ 259.212929][ T5165] EXT4-fs (loop4): Encoding requested by superblock is unknown [ 259.224266][ T5167] loop2: detected capacity change from 0 to 256 [ 259.236145][ T1143] device veth0_vlan left promiscuous mode [ 259.313580][ T5167] vfat filesystem being mounted at /56/file0 supports timestamps until 2107 (0x10391447e) [ 259.394298][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.402310][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.409947][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.418738][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 259.426585][ T5176] loop2: detected capacity change from 0 to 128 [ 259.443213][ T5176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 259.459785][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.469373][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.485593][ T5176] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038 (0x7fffffff) [ 259.523953][ T5183] loop3: detected capacity change from 0 to 512 [ 259.530507][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 259.537988][ T3807] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.544927][ T3807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.558630][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.567028][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.572283][ T5183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 259.575622][ T3807] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.583871][ T5183] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038 (0x7fffffff) [ 259.590475][ T3807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.602621][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.696898][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.705219][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.713448][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.735246][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.744845][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.159538][ T5202] loop2: detected capacity change from 0 to 256 [ 260.222675][ T5202] vfat filesystem being mounted at /61/file0 supports timestamps until 2107 (0x10391447e) [ 260.326289][ T5200] device syzkaller0 entered promiscuous mode [ 260.342162][ T3427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.355048][ T3427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.370021][ T3427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.379026][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 260.384930][ T3427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.500641][ T5145] device veth0_vlan entered promiscuous mode [ 260.752748][ T3427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.762407][ T3427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.772241][ T5145] device veth1_macvtap entered promiscuous mode [ 260.783627][ T3427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.791727][ T3427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.802076][ T3427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.824887][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.847947][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.932835][ T5227] loop4: detected capacity change from 0 to 1024 [ 260.951918][ T5227] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 260.962876][ T5227] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 260.972804][ T5227] EXT4-fs (loop4): invalid journal inode [ 260.978534][ T5227] EXT4-fs (loop4): can't get journal size [ 260.985426][ T5227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 261.366911][ T5243] netlink: 'syz.2.1578': attribute type 4 has an invalid length. [ 261.375241][ T5243] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1578'. [ 261.513927][ T5243] loop2: detected capacity change from 0 to 256 [ 261.544610][ T5243] vfat filesystem being mounted at /65/file0 supports timestamps until 2107 (0x10391447e) [ 262.815628][ T5250] netlink: 'syz.1.1581': attribute type 4 has an invalid length. [ 262.823244][ T5250] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1581'. [ 262.832150][ T5252] loop1: detected capacity change from 0 to 256 [ 262.844742][ T5252] vfat filesystem being mounted at /1/file0 supports timestamps until 2107 (0x10391447e) [ 263.084870][ T5263] loop2: detected capacity change from 0 to 512 [ 263.174362][ T5268] loop1: detected capacity change from 0 to 16 [ 263.179162][ T5263] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 263.190681][ T5268] erofs: (device loop1): mounted with root inode @ nid 36. [ 263.205346][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 263.210647][ T5263] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038 (0x7fffffff) [ 263.614513][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 263.732377][ T3028] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 264.237298][ T5304] loop1: detected capacity change from 0 to 256 [ 264.245004][ T5304] vfat filesystem being mounted at /5/file1 supports timestamps until 2107 (0x10391447e) [ 264.326874][ T5308] netlink: 'syz.0.1596': attribute type 4 has an invalid length. [ 264.334628][ T5308] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1596'. [ 264.492124][ T3028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.683286][ T3028] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 264.692451][ T3028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.987322][ T3028] usb 5-1: config 0 descriptor?? [ 265.204374][ T3028] rndis_host: probe of 5-1:0.0 failed with error -22 [ 265.217990][ T5315] loop2: detected capacity change from 0 to 256 [ 265.235716][ T5315] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 265.248240][ T5315] exfat filesystem being mounted at /70/file0 supports timestamps until 2107 (0x10391447f) [ 265.272656][ T28] audit: type=1400 audit(8172039472.026:488): avc: denied { lock } for pid=5312 comm="syz.2.1599" path="/70/file0/file1" dev="loop2" ino=1048791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 265.400482][ T333] usb 5-1: USB disconnect, device number 15 [ 266.092690][ T5350] loop2: detected capacity change from 0 to 16 [ 266.142211][ T5350] erofs: (device loop2): mounted with root inode @ nid 36. [ 266.384610][ T5355] netlink: 'syz.4.1611': attribute type 4 has an invalid length. [ 266.392314][ T5355] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1611'. [ 266.411550][ T5355] loop4: detected capacity change from 0 to 256 [ 266.479499][ T5355] vfat filesystem being mounted at /140/file0 supports timestamps until 2107 (0x10391447e) [ 266.881523][ T5364] loop2: detected capacity change from 0 to 512 [ 267.042190][ T5364] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.055337][ T5364] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038 (0x7fffffff) [ 267.267004][ T5379] xt_bpf: check failed: parse error [ 267.282270][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 268.346694][ T5391] fuse: root generation should be zero [ 269.121050][ T5417] loop4: detected capacity change from 0 to 512 [ 269.219254][ T5417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 269.244919][ T5417] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038 (0x7fffffff) [ 269.264617][ T5427] input: syz1 as /devices/virtual/input/input9 [ 269.528257][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 270.392822][ T5434] loop1: detected capacity change from 0 to 1024 [ 270.466133][ T5434] EXT4-fs: Ignoring removed orlov option [ 270.636577][ T5434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 271.769074][ T28] audit: type=1400 audit(8172039478.506:489): avc: denied { setopt } for pid=5433 comm="syz.1.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.555273][ T5145] EXT4-fs (loop1): unmounting filesystem. [ 272.982465][ T5483] fuse: Bad value for 'fd' [ 273.468258][ T5496] input: syz1 as /devices/virtual/input/input10 [ 273.568087][ T3519] device bridge_slave_1 left promiscuous mode [ 273.577358][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.588926][ T3519] device bridge_slave_0 left promiscuous mode [ 273.594975][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.606821][ T5490] loop3: detected capacity change from 0 to 512 [ 273.617827][ T3519] device veth1_macvtap left promiscuous mode [ 273.639395][ T3519] device veth0_vlan left promiscuous mode [ 273.648407][ T5490] EXT4-fs (loop3): 1 truncate cleaned up [ 273.654065][ T5490] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.007861][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 276.254784][ T5518] device sit0 entered promiscuous mode [ 276.278898][ T5518] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 276.286496][ T5518] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1659'. [ 276.304680][ T5523] loop3: detected capacity change from 0 to 512 [ 276.312739][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.319733][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.327097][ T5500] device bridge_slave_0 entered promiscuous mode [ 276.334460][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.341492][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.366241][ T5500] device bridge_slave_1 entered promiscuous mode [ 276.374204][ T5523] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 276.385897][ T5523] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038 (0x7fffffff) [ 276.469627][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.476532][ T5500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.483667][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.490541][ T5500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.522074][ T3265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.565964][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.590811][ T5534] fuse: Bad value for 'fd' [ 276.626420][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.806732][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.818535][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.825409][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.853483][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.892628][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.899548][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.049142][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 277.053351][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.080255][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.296538][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.703220][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.057647][ T5549] xt_TPROXY: Can be used only with -p tcp or -p udp [ 278.750056][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.758672][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.775159][ T5500] device veth0_vlan entered promiscuous mode [ 278.782081][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.790237][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.021732][ T5563] loop3: detected capacity change from 0 to 512 [ 279.041485][ T5563] EXT4-fs (loop3): Test dummy encryption mode enabled [ 279.048205][ T5563] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 279.233877][ T5563] EXT4-fs (loop3): 1 truncate cleaned up [ 279.239701][ T5563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 279.668130][ T5568] loop4: detected capacity change from 0 to 256 [ 279.677441][ T5500] device veth1_macvtap entered promiscuous mode [ 279.700561][ T5568] vfat filesystem being mounted at /154/file1 supports timestamps until 2107 (0x10391447e) [ 279.760009][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.767820][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.774519][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 279.775352][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.788589][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.796887][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.804841][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.813457][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.821974][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.830244][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.906117][ T5580] loop3: detected capacity change from 0 to 1024 [ 279.916956][ T5580] EXT4-fs: Ignoring removed orlov option [ 279.975091][ T5580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 281.140926][ T28] audit: type=1400 audit(8172039487.896:490): avc: denied { rename } for pid=5573 comm="syz.3.1673" name="file0" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 281.170002][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 281.825369][ T28] audit: type=1400 audit(8172039488.196:491): avc: denied { watch_reads } for pid=5589 comm="syz.4.1677" path="/155" dev="tmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 282.028099][ T5599] loop3: detected capacity change from 0 to 512 [ 282.132270][ T5599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 282.141262][ T5599] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038 (0x7fffffff) [ 282.548719][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 282.614322][ T6] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 282.621504][ T5611] loop1: detected capacity change from 0 to 512 [ 282.630525][ T5611] EXT4-fs (loop1): 1 truncate cleaned up [ 282.636001][ T5611] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 282.762390][ T5500] EXT4-fs (loop1): unmounting filesystem. [ 282.977762][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.987957][ T6] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 282.997123][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.009285][ T6] usb 5-1: config 0 descriptor?? [ 283.049807][ T6] rndis_host: probe of 5-1:0.0 failed with error -22 [ 283.094888][ T5630] loop1: detected capacity change from 0 to 512 [ 283.132666][ T5630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 283.141855][ T5630] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 283.253253][ T6] usb 5-1: USB disconnect, device number 16 [ 283.354094][ T5500] EXT4-fs (loop1): unmounting filesystem. [ 283.459203][ T5639] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=5639 comm=syz.1.1689 [ 283.496980][ T5643] 9p filesystem being mounted at /8/file0 supports timestamps until 2106 (0xffffffff) [ 284.417665][ T5555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 284.477615][ T5555] Bluetooth: hci1: command 0x1003 tx timeout [ 284.718422][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 284.984562][ T5662] loop1: detected capacity change from 0 to 1024 [ 285.064803][ T3520] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 285.076222][ T5664] loop4: detected capacity change from 0 to 128 [ 285.095144][ T5664] vfat filesystem being mounted at /157/bus supports timestamps until 2107 (0x10391447e) [ 285.112490][ T5662] EXT4-fs: Ignoring removed orlov option [ 285.119044][ T5662] EXT4-fs (loop1): Test dummy encryption mode enabled [ 285.206411][ T5666] loop2: detected capacity change from 0 to 512 [ 285.212824][ T5662] EXT4-fs (loop1): Encoding requested by superblock is unknown [ 285.231322][ T5666] EXT4-fs (loop2): 1 truncate cleaned up [ 285.236927][ T5666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.357625][ T3520] usb 4-1: Using ep0 maxpacket: 16 [ 285.662685][ T3520] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.680259][ T3520] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 285.693233][ T5676] loop1: detected capacity change from 0 to 2048 [ 285.693335][ T3520] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.708840][ T3520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.717688][ T3520] usb 4-1: config 0 descriptor?? [ 285.724869][ T5676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 285.739099][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 285.746582][ T5500] EXT4-fs (loop1): unmounting filesystem. [ 285.758323][ T3520] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 285.801165][ T5682] loop2: detected capacity change from 0 to 512 [ 285.841944][ T5685] 9p filesystem being mounted at /39/file0 supports timestamps until 2106 (0xffffffff) [ 286.712807][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 286.764286][ T5682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 286.778169][ T5682] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038 (0x7fffffff) [ 287.787876][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 288.101996][ T5715] loop2: detected capacity change from 0 to 512 [ 288.124015][ T5720] loop4: detected capacity change from 0 to 2048 [ 288.138940][ T5715] EXT4-fs (loop2): 1 truncate cleaned up [ 288.154606][ T5715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 288.208558][ T5720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.250248][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 288.254232][ T5725] loop1: detected capacity change from 0 to 1024 [ 288.268011][ T5725] EXT4-fs: Ignoring removed orlov option [ 288.287238][ T5725] EXT4-fs (loop1): Test dummy encryption mode enabled [ 288.298620][ T5725] EXT4-fs (loop1): Encoding requested by superblock is unknown [ 288.302696][ T5729] 9p filesystem being mounted at /161/file0 supports timestamps until 2106 (0xffffffff) [ 288.318375][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 288.659605][ T5749] loop2: detected capacity change from 0 to 512 [ 289.278954][ T4278] usb 4-1: USB disconnect, device number 14 [ 289.461661][ T5762] loop4: detected capacity change from 0 to 2048 [ 289.470258][ T5749] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 289.519685][ T5749] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038 (0x7fffffff) [ 289.660718][ T5762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 289.748192][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 289.943784][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 293.323312][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 293.412103][ T5834] loop1: detected capacity change from 0 to 256 [ 293.447002][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 293.475199][ T5834] exfat filesystem being mounted at /24/qY3aK supports timestamps until 2107 (0x10391447f) [ 293.500647][ T5829] loop2: detected capacity change from 0 to 512 [ 293.740450][ T5829] EXT4-fs (loop2): 1 truncate cleaned up [ 293.751893][ T5829] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 293.785236][ T5842] loop1: detected capacity change from 0 to 512 [ 293.843037][ T5842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 293.862672][ T5842] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 293.962671][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 293.998172][ T28] audit: type=1400 audit(8172039500.756:492): avc: denied { unmount } for pid=4947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 294.059267][ T5500] EXT4-fs (loop1): unmounting filesystem. [ 294.223084][ T5870] tipc: Enabling of bearer rejected, failed to enable media [ 294.463244][ T5877] loop2: detected capacity change from 0 to 256 [ 294.573684][ T5877] exfat filesystem being mounted at /103/qY3aK supports timestamps until 2107 (0x10391447f) [ 294.592194][ T5874] loop1: detected capacity change from 0 to 512 [ 294.601392][ T5874] EXT4-fs (loop1): 1 truncate cleaned up [ 294.606950][ T5874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 294.705425][ T5890] loop3: detected capacity change from 0 to 2048 [ 294.776167][ T5890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 294.833488][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 294.841594][ T5500] EXT4-fs (loop1): unmounting filesystem. [ 295.988220][ T5924] loop3: detected capacity change from 0 to 2048 [ 296.038635][ T5924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 296.076589][ T4458] EXT4-fs (loop3): unmounting filesystem. [ 296.166168][ T5933] loop3: detected capacity change from 0 to 256 [ 296.183879][ T5933] exfat filesystem being mounted at /78/qY3aK supports timestamps until 2107 (0x10391447f) [ 296.432086][ T5941] xt_TPROXY: Can be used only with -p tcp or -p udp [ 296.465577][ T28] audit: type=1400 audit(8172039503.216:493): avc: denied { read } for pid=5942 comm="syz.3.1780" name="ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 296.487797][ T5930] loop1: detected capacity change from 0 to 512 [ 296.494809][ T28] audit: type=1400 audit(8172039503.216:494): avc: denied { open } for pid=5942 comm="syz.3.1780" path="/dev/ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 296.513875][ T5930] EXT4-fs (loop1): 1 truncate cleaned up [ 296.523931][ T28] audit: type=1400 audit(8172039503.226:495): avc: denied { ioctl } for pid=5942 comm="syz.3.1780" path="/dev/ptp0" dev="devtmpfs" ino=172 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 296.526091][ T5930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 296.805609][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1782'. [ 296.978645][ T5954] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 297.711490][ T28] audit: type=1400 audit(8172039504.456:496): avc: denied { write } for pid=5948 comm="syz.0.1782" path="socket:[43747]" dev="sockfs" ino=43747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 297.805568][ T5500] EXT4-fs (loop1): unmounting filesystem. [ 297.995382][ T5958] loop2: detected capacity change from 0 to 2048 [ 298.112025][ T5958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 298.799853][ T5974] binder: 5959:5974 ioctl 4018620d 0 returned -22 [ 298.806551][ T5974] binder: 5959:5974 ioctl c018620c 20000000 returned -1 [ 299.504349][ T5971] loop3: detected capacity change from 0 to 256 [ 299.645524][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 299.677529][ T28] audit: type=1400 audit(8172039506.426:497): avc: denied { ioctl } for pid=5984 comm="syz.4.1794" path="socket:[43800]" dev="sockfs" ino=43800 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.708477][ T5971] exfat filesystem being mounted at /83/qY3aK supports timestamps until 2107 (0x10391447f) [ 299.824480][ T5992] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.064826][ T5991] loop1: detected capacity change from 0 to 512 [ 300.463948][ T5991] EXT4-fs (loop1): 1 truncate cleaned up [ 300.521142][ T5991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 300.705583][ T6018] loop4: detected capacity change from 0 to 2048 [ 300.764890][ T6018] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 300.785593][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 301.142050][ T5500] EXT4-fs (loop1): unmounting filesystem. [ 301.452605][ T6036] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 301.466406][ T6036] device syzkaller0 entered promiscuous mode [ 301.474515][ T6039] netlink: 'syz.4.1807': attribute type 4 has an invalid length. [ 301.482108][ T6039] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1807'. [ 301.494755][ T6039] loop4: detected capacity change from 0 to 256 [ 301.507354][ T6039] vfat filesystem being mounted at /179/file0 supports timestamps until 2107 (0x10391447e) [ 301.942615][ T6046] loop1: detected capacity change from 0 to 256 [ 301.952396][ T6038] fuse: Bad value for 'fd' [ 301.967276][ T6046] exfat filesystem being mounted at /33/qY3aK supports timestamps until 2107 (0x10391447f) [ 302.217939][ T6057] EXT4-fs (sda1): shut down requested (2) [ 302.223606][ T6057] Aborting journal on device sda1-8. [ 302.238514][ T6059] loop1: detected capacity change from 0 to 2048 [ 302.276095][ T6059] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 302.324311][ T5500] EXT4-fs (loop1): unmounting filesystem. [ 302.403212][ T6064] loop4: detected capacity change from 0 to 512 [ 302.422914][ T6064] EXT4-fs (loop4): 1 truncate cleaned up [ 302.429665][ T6064] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 302.649976][ T2947] EXT4-fs (loop4): unmounting filesystem. [ 302.994189][ T6092] netlink: 'syz.3.1826': attribute type 4 has an invalid length. [ 303.001890][ T6092] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1826'. [ 303.013347][ T6092] loop3: detected capacity change from 0 to 256 [ 303.022526][ T6092] vfat filesystem being mounted at /88/file0 supports timestamps until 2107 (0x10391447e) [ 303.076662][ T6089] loop2: detected capacity change from 0 to 256 [ 303.350105][ T6089] exfat filesystem being mounted at /113/qY3aK supports timestamps until 2107 (0x10391447f) [ 303.375234][ T6094] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 303.386359][ T6094] device syzkaller0 entered promiscuous mode [ 303.757973][ T6099] 9pnet_virtio: no channels available for device syz [ 303.905739][ T6104] loop1: detected capacity change from 0 to 2048 [ 303.946403][ T6104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 304.296055][ T5500] EXT4-fs (loop1): unmounting filesystem. [ 304.508229][ T6131] netlink: 'syz.4.1839': attribute type 4 has an invalid length. [ 304.515835][ T6131] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1839'. [ 304.536006][ T6131] loop4: detected capacity change from 0 to 256 [ 304.544914][ T6131] vfat filesystem being mounted at /185/file0 supports timestamps until 2107 (0x10391447e) [ 305.175551][ T6148] loop2: detected capacity change from 0 to 2048 [ 305.200676][ T6148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 305.232551][ T4065] EXT4-fs (loop2): unmounting filesystem. [ 305.479948][ T6174] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 305.490659][ T6174] device syzkaller0 entered promiscuous mode [ 305.499169][ T6176] xt_TPROXY: Can be used only with -p tcp or -p udp SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 306.567873][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 306.848351][ T329] device bridge_slave_1 left promiscuous mode [ 306.854324][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.861716][ T329] device bridge_slave_0 left promiscuous mode [ 306.867743][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.875769][ T329] device veth1_macvtap left promiscuous mode [ 306.881759][ T329] device veth0_vlan left promiscuous mode [ 307.788593][ T329] device bridge_slave_1 left promiscuous mode [ 307.794656][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.802038][ T329] device bridge_slave_0 left promiscuous mode [ 307.808126][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.815807][ T329] device bridge_slave_1 left promiscuous mode [ 307.821832][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.829172][ T329] device bridge_slave_0 left promiscuous mode [ 307.835174][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.843179][ T329] device bridge_slave_1 left promiscuous mode [ 307.849299][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.856971][ T329] device bridge_slave_0 left promiscuous mode [ 307.863077][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.870846][ T329] device bridge_slave_1 left promiscuous mode [ 307.876761][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.884306][ T329] device bridge_slave_0 left promiscuous mode [ 307.890355][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.898982][ T329] device veth1_macvtap left promiscuous mode [ 307.904806][ T329] device veth0_vlan left promiscuous mode [ 307.910721][ T329] device veth1_macvtap left promiscuous mode [ 307.916558][ T329] device veth0_vlan left promiscuous mode [ 307.922553][ T329] device veth1_macvtap left promiscuous mode [ 307.928425][ T329] device veth0_vlan left promiscuous mode [ 307.934200][ T329] device veth1_macvtap left promiscuous mode [ 307.940325][ T329] device veth0_vlan left promiscuous mode