last executing test programs: 7.01864844s ago: executing program 3 (id=1923): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404f045db6000000000001090224000100000000090400000103000000092100000001221e0009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00221e00000007c28f1958a2d198a60e4da2"], 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setns(r1, 0x24020000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r6, @ANYRES16=r5, @ANYRES64=r3], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25a400, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x5, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r7, r6, r3, r6, r6, r6], &(0x7f0000000580)=[{0x5, 0x5}], 0x10, 0x5}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f00000005c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r9) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) 5.764695858s ago: executing program 4 (id=1937): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x0) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[], 0xff67) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) 4.228771097s ago: executing program 4 (id=1938): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa}]}}, 0x0}, 0x0) 4.040302095s ago: executing program 3 (id=1947): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x0) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[], 0xff67) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) 1.922416886s ago: executing program 2 (id=1968): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004340)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x500000}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 1.772977302s ago: executing program 4 (id=1969): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x4) 1.740335433s ago: executing program 4 (id=1970): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0x24}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) 1.720571984s ago: executing program 4 (id=1971): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x10f8) 1.632156297s ago: executing program 4 (id=1972): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev}, &(0x7f00000005c0)=0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@struct={0x5, 0x4, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x3, 0x80}, {0x6, 0x4, 0x7}, {0x8, 0x5, 0x401}, {0xf, 0x0, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x6}}]}, {0x0, [0x30, 0x2e, 0x10, 0x2e, 0x30]}}, &(0x7f0000000680)=""/53, 0x73, 0x35, 0x1, 0x3}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x73, &(0x7f00000004c0)=""/115, 0x41100, 0x4d, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000700)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x87d4, r1, 0x3, &(0x7f0000000740)=[r0, r0, r0], &(0x7f0000000780)=[{0x3, 0x4, 0xa, 0x1}, {0x3, 0x3, 0xf, 0x4}, {0x0, 0x4, 0xf}], 0x10, 0x80}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r9}, 0x10) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f0000000f0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.210440054s ago: executing program 2 (id=1975): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0xf104}], 0x2000000000000150, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) dup(0xffffffffffffffff) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x50}) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 769.250661ms ago: executing program 3 (id=1980): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x4) 753.581861ms ago: executing program 1 (id=1981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0x24}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) 737.299112ms ago: executing program 3 (id=1982): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000280)={[{@user_xattr}, {@test_dummy_encryption}, {@nombcache}, {@jqfmt_vfsv0}, {@lazytime}, {@errors_remount}, {@auto_da_alloc}]}, 0x1, 0x522, &(0x7f0000000f80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 734.728932ms ago: executing program 1 (id=1983): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001d40)={0x6, 0x0, [{0x1000, 0x1000, &(0x7f00000009c0)=""/4096}, {0x0, 0x6b, &(0x7f00000001c0)=""/107}, {0x0, 0x65, &(0x7f0000000380)=""/101}, {0x1000, 0xc8, &(0x7f0000000500)=""/200}, {0x0, 0x76, &(0x7f0000000600)=""/118}, {0xf000, 0x62, &(0x7f0000000000)=""/98}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)) 670.712714ms ago: executing program 1 (id=1984): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0xfffffd2c}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), r1) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r5, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000814) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000f9ff00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) fsetxattr$security_selinux(r8, &(0x7f0000000280), &(0x7f0000000000)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x9, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000006a002903000000000000000002000000000000000400090008000500", @ANYRES32=0x0, @ANYBLOB="2aa4650799d5f82bd833bb9933c9427091057bf2e3998313b4adb38c0000000000"], 0x24}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r9, &(0x7f0000007fc0), 0x2d, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, @val, {@mpls_mc={0x806, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@gettfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x10, 0x3, 0x1ff, @vifc_lcl_addr=@loopback, @remote}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r0, @ANYBLOB="00000000000000007900000000000000180000000000000000000000000000009500000000f3a3b6670a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000700)={0x1}) 545.070229ms ago: executing program 3 (id=1986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 539.974219ms ago: executing program 1 (id=1987): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x32, 0x0, &(0x7f0000000040)) 520.89201ms ago: executing program 1 (id=1989): unshare(0x600) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 520.53658ms ago: executing program 0 (id=1990): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x8, 0x40, 0x1000}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000300), 0x4) 512.43197ms ago: executing program 0 (id=1991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @auto="f34d0d1e6bc3105d"}) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) 501.756861ms ago: executing program 0 (id=1992): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x1ffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0}) 474.307642ms ago: executing program 0 (id=1993): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0xa04254, &(0x7f0000000080)=ANY=[], 0x8, 0x2fd, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffffff, 0x0, 0x0) utimes(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={{0x0, 0xea60}, {0x77359400}}) 454.096393ms ago: executing program 0 (id=1994): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 453.600513ms ago: executing program 3 (id=1995): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) sendto(0xffffffffffffffff, &(0x7f0000000080)="ec293e7da9f96453245396f86cc4d083b32e5127f77c920704352d050f92522467efb5fa437f3851767f78d8a2fb177f97431c6257ca28ab848b8e90b97eecbaf0e50d867577c7ef97061cda0e9106428238f7d35d3a02f9edb13c79bf1814ba6aaf68ce66bed74eb8e5e1ab263606368412d06adb88f149b1eb8500a5f1273e7d179e997cad496789f810d24d9b48d679fe5aa3c1150041b262c69117576096e76cf9b3f1b4882392a3ddca0e6bc21e731854e5f26956a0ece0243976e897a1095fdd095f7761bc7deff740406ee69e", 0xd0, 0x20000001, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 412.265664ms ago: executing program 0 (id=1996): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 411.861234ms ago: executing program 1 (id=1997): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 198.871352ms ago: executing program 2 (id=1998): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0xfffffd2c}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), r1) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r5, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000814) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000f9ff00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) fsetxattr$security_selinux(r8, &(0x7f0000000280), &(0x7f0000000000)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x9, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000006a002903000000000000000002000000000000000400090008000500", @ANYRES32=0x0, @ANYBLOB="2aa4650799d5f82bd833bb9933c9427091057bf2e3998313b4adb38c0000000000"], 0x24}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r9, &(0x7f0000007fc0), 0x2d, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, @val, {@mpls_mc={0x806, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@gettfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x10, 0x3, 0x1ff, @vifc_lcl_addr=@loopback, @remote}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r0, @ANYBLOB="00000000000000007900000000000000180000000000000000000000000000009500000000f3a3b6670a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000700)={0x1}) 73.699197ms ago: executing program 2 (id=1999): socket(0x0, 0x0, 0x0) unshare(0x40000000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000100)={0x0, {}, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @multicast1}, 0x8f}) 31.622369ms ago: executing program 2 (id=2000): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') 0s ago: executing program 2 (id=2001): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): 874584][ T18] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 133.889917][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.899664][ T18] usb 1-1: config 0 descriptor?? [ 134.021810][ T13] usb 5-1: USB disconnect, device number 12 [ 134.041836][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.048693][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.056124][ T3986] device bridge_slave_0 entered promiscuous mode [ 134.062667][ T3992] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.079720][ T3986] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.086902][ T3986] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.094439][ T3986] device bridge_slave_1 entered promiscuous mode [ 134.179505][ T4004] kvm [4003]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2 [ 134.209566][ T3986] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.216438][ T3986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.223681][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.230533][ T3986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.267737][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.275766][ T23] audit: type=1400 audit(1719914301.520:391): avc: denied { setopt } for pid=4010 comm="syz.2.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.296935][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.304452][ T23] audit: type=1400 audit(1719914301.550:392): avc: denied { ioctl } for pid=4010 comm="syz.2.1254" path="socket:[46405]" dev="sockfs" ino=46405 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.329743][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.347401][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.355651][ T2233] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.362522][ T2233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.369984][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.378016][ T2233] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.384879][ T2233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.397889][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.406223][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.425060][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.438929][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.447168][ T1137] device bridge_slave_1 left promiscuous mode [ 134.453741][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.461589][ T1137] device bridge_slave_0 left promiscuous mode [ 134.467529][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.554208][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.570107][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.581136][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.609254][ T18] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.676507][ T4021] overlayfs: invalid origin (79004c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 134.888453][ T18] usb 3-1: Using ep0 maxpacket: 16 [ 135.018379][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.029166][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.038740][ T18] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 135.047740][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.056541][ T18] usb 3-1: config 0 descriptor?? [ 135.576172][ T4036] kvm [4035]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2 [ 135.589852][ T18] logitech 0003:046D:C29C.0013: unknown main item tag 0x0 [ 135.606431][ T18] logitech 0003:046D:C29C.0013: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 135.778358][ T13] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 135.903625][ T2233] usb 1-1: USB disconnect, device number 13 [ 136.028389][ T18] logitech 0003:046D:C29C.0013: no inputs found [ 136.030838][ T379] usb 2-1: USB disconnect, device number 11 [ 136.042491][ T18] usb 3-1: USB disconnect, device number 10 [ 136.066093][ T4039] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.122301][ T4039] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 136.132887][ T4039] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.308260][ T2233] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 136.558268][ T2233] usb 1-1: Using ep0 maxpacket: 16 [ 136.700870][ T4066] kvm [4065]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2 [ 136.718424][ T2233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 136.722003][ T23] audit: type=1400 audit(1719914303.970:393): avc: denied { ioctl } for pid=4074 comm="syz.2.1277" path="socket:[47183]" dev="sockfs" ino=47183 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.739305][ T2233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 136.774719][ T4078] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 136.782534][ T4078] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1278'. [ 136.789720][ T2233] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 136.800673][ T2233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.810322][ T2233] usb 1-1: config 0 descriptor?? [ 136.837611][ T4080] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1280'. [ 137.007927][ T4055] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 137.121684][ T4041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 137.158400][ T4055] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 137.195264][ T4055] F2FS-fs (loop3): invalid crc value [ 137.223201][ T4055] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.259089][ T4091] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.281373][ T4097] input: syz0 as /devices/virtual/input/input30 [ 137.341829][ T4055] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 137.348867][ T4055] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 137.385067][ T4055] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 137.395178][ T4055] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 137.418697][ T2233] hid (null): bogus close delimiter [ 137.425692][ T2233] hid (null): invalid report_size 1986947389 [ 137.433256][ T2233] hid (null): usage index exceeded [ 137.440742][ T2233] hid (null): invalid report_size 27745 [ 137.449618][ T2233] hid-generic 0003:0158:0100.0014: unknown main item tag 0x0 [ 137.457351][ T2233] hid-generic 0003:0158:0100.0014: unknown main item tag 0x0 [ 137.465261][ T2233] hid-generic 0003:0158:0100.0014: bogus close delimiter [ 137.472726][ T2233] hid-generic 0003:0158:0100.0014: item 0 0 2 10 parsing failed [ 137.480651][ T2233] hid-generic: probe of 0003:0158:0100.0014 failed with error -22 [ 137.715241][ T862] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 137.823340][ T5] usb 1-1: USB disconnect, device number 14 [ 137.908276][ T18] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.968286][ T862] usb 3-1: Using ep0 maxpacket: 32 [ 137.990778][ T4118] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1292'. [ 138.098660][ T862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 138.118256][ T862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 138.138278][ T862] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 138.158245][ T18] usb 5-1: Using ep0 maxpacket: 32 [ 138.163270][ T862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.184957][ T862] usb 3-1: config 0 descriptor?? [ 138.208334][ T4100] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 138.228983][ T862] hub 3-1:0.0: USB hub found [ 138.278410][ T18] usb 5-1: config 0 has an invalid interface number: 226 but max is 0 [ 138.286393][ T18] usb 5-1: config 0 has no interface number 0 [ 138.303472][ T18] usb 5-1: config 0 interface 226 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.325435][ T18] usb 5-1: config 0 interface 226 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.338633][ T18] usb 5-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 138.347516][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.372635][ T18] usb 5-1: config 0 descriptor?? [ 138.468320][ T862] hub 3-1:0.0: 2 ports detected [ 138.490566][ T4123] F2FS-fs (loop3): invalid crc value [ 138.519343][ T4123] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.581252][ T4123] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.619643][ T4147] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1303'. [ 139.000924][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.008556][ T3986] attempt to access beyond end of device [ 139.008556][ T3986] loop3: rw=524288, want=45072, limit=40427 [ 139.020469][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.034207][ T3986] attempt to access beyond end of device [ 139.034207][ T3986] loop3: rw=0, want=45072, limit=40427 [ 139.046157][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.056828][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.063842][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.070845][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.077676][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.084582][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.091414][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.098272][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.105154][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.112474][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.119454][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.126346][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.133238][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.140549][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.147437][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.154350][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.161178][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.168006][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.174904][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.181753][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.188904][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.195806][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.203242][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.210190][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.217294][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.224725][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.231910][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.238988][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.245833][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.252738][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.259562][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.266398][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.273297][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.280165][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.287053][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.294336][ T18] uclogic 0003:5543:0081.0015: unknown main item tag 0x0 [ 139.301615][ T18] uclogic 0003:5543:0081.0015: No inputs registered, leaving [ 139.310562][ T18] uclogic 0003:5543:0081.0015: hidraw0: USB HID v0.00 Device [HID 5543:0081] on usb-dummy_hcd.4-1/input226 [ 139.323378][ T18] usb 5-1: USB disconnect, device number 13 [ 139.380415][ T3986] attempt to access beyond end of device [ 139.380415][ T3986] loop3: rw=2049, want=45104, limit=40427 [ 139.549702][ T4169] fuse: Bad value for 'fd' [ 139.564258][ T4171] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1314'. [ 139.764047][ T4175] fuse: Bad value for 'fd' [ 139.879222][ T4175] device pim6reg1 entered promiscuous mode [ 139.962080][ T23] audit: type=1400 audit(1719914307.030:394): avc: denied { getopt } for pid=4172 comm="syz.0.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.041010][ T23] audit: type=1400 audit(1719914307.120:395): avc: denied { accept } for pid=4172 comm="syz.0.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.326167][ T1137] device bridge_slave_1 left promiscuous mode [ 140.332354][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.354999][ T1137] device bridge_slave_0 left promiscuous mode [ 140.365385][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.442290][ T4182] F2FS-fs (loop4): invalid crc value [ 140.451107][ T4182] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.538108][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.548812][ T4182] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.578388][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.585991][ T4186] device bridge_slave_0 entered promiscuous mode [ 140.593289][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.600205][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.611952][ T4186] device bridge_slave_1 entered promiscuous mode [ 140.688434][ T24] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 140.757204][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.764101][ T4186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.771237][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.778073][ T4186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.811398][ T23] audit: type=1400 audit(1719914308.060:396): avc: denied { append } for pid=4200 comm="syz.0.1323" name="001" dev="devtmpfs" ino=9239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.990877][ T24] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 141.113441][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.121427][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.145837][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.191085][ T3159] attempt to access beyond end of device [ 141.191085][ T3159] loop4: rw=524288, want=45072, limit=40427 [ 141.203260][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.203580][ T3159] attempt to access beyond end of device [ 141.203580][ T3159] loop4: rw=0, want=45072, limit=40427 [ 141.219330][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.229003][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.261032][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.269765][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.276606][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.318843][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.326765][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.345395][ T3159] attempt to access beyond end of device [ 141.345395][ T3159] loop4: rw=2049, want=45104, limit=40427 [ 141.357586][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.396841][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.398275][ T2233] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 141.417092][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.446976][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.460586][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.479830][ T4204] EXT4-fs (loop1): orphan cleanup on readonly fs [ 141.486678][ T4204] Quota error (device loop1): v2_read_file_info: Free block number too big (0 >= 0). [ 141.498569][ T4204] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 141.523330][ T4204] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 141.530566][ T4204] EXT4-fs error (device loop1): ext4_orphan_get:1260: comm syz.1.1325: bad orphan inode 16 [ 141.540645][ T4204] EXT4-fs (loop1): Remounting filesystem read-only [ 141.546967][ T4204] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,max_batch_time=0x0000000000000c23,noquota,max_batch_time=0x0000000000009c52,resgid=0x000000000000ee01,barrier,stripe=0x000000007768e9ec,stripe=0x0000000000000009,nogrpid,grpjquota=,noauto_da_alloc [ 141.589418][ T4204] EXT4-fs error (device loop1): ext4_lookup:1806: inode #2: comm syz.1.1325: bad inode number: 12 [ 141.600429][ T4204] EXT4-fs error (device loop1): ext4_lookup:1806: inode #2: comm syz.1.1325: bad inode number: 12 [ 141.611920][ T4204] EXT4-fs error (device loop1): ext4_lookup:1806: inode #2: comm syz.1.1325: bad inode number: 12 [ 141.638643][ T4204] EXT4-fs error (device loop1): ext4_lookup:1806: inode #2: comm syz.1.1325: bad inode number: 12 [ 141.708389][ T2233] usb 1-1: Using ep0 maxpacket: 8 [ 141.828436][ T2233] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 141.842104][ T4209] F2FS-fs (loop3): invalid crc value [ 141.876681][ T4221] xt_l2tp: invalid flags combination: 0 [ 141.877666][ T4209] F2FS-fs (loop3): Found nat_bits in checkpoint [ 142.218252][ T23] audit: type=1400 audit(1719914309.190:397): avc: denied { connect } for pid=4214 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.268339][ T2233] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.282441][ T2233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.309011][ T1137] device bridge_slave_1 left promiscuous mode [ 142.315030][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.318138][ T4209] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 142.322486][ T2233] usb 1-1: SerialNumber: syz [ 142.329486][ T4209] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.340592][ T1137] device bridge_slave_0 left promiscuous mode [ 142.359988][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.373629][ T4186] attempt to access beyond end of device [ 142.373629][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 142.462566][ T24] hub 3-1:0.0: set hub depth failed [ 142.468746][ T862] usb 3-1: USB disconnect, device number 11 [ 142.539066][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.545971][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.553796][ T4216] device bridge_slave_0 entered promiscuous mode [ 142.561344][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.569493][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.577371][ T4216] device bridge_slave_1 entered promiscuous mode [ 142.775000][ T375] usb 1-1: USB disconnect, device number 15 [ 142.874314][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.881286][ T4216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.888405][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.895129][ T4216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.978064][ T862] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.987753][ T862] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.998666][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.007338][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.104266][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.172007][ T862] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.178904][ T862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.220067][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.228515][ T862] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.235359][ T862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.259136][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.268244][ T2233] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 143.272318][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.331139][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.351381][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.369825][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.386966][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.400594][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.521120][ T4250] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 143.530464][ T4250] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 143.538951][ T4250] Quota error (device loop4): write_blk: dquota write failed [ 143.546322][ T4250] Quota error (device loop4): qtree_write_dquot: Error -27 occurred while creating quota [ 143.557253][ T4250] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 143.570355][ T4250] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 143.590013][ T4250] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 143.609077][ T4250] EXT4-fs error (device loop4) in ext4_orphan_del:3211: error 27 [ 143.641590][ T4250] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 143.658377][ T2233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.671489][ T4250] EXT4-fs error (device loop4) in ext4_orphan_cleanup:2816: error 27 [ 143.681746][ T2233] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.707345][ T23] audit: type=1400 audit(1719914310.950:398): avc: denied { execute } for pid=4262 comm="syz.0.1341" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=9254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 143.716358][ T4250] EXT4-fs (loop4): 1 truncate cleaned up [ 143.738557][ T4266] binder: BINDER_SET_CONTEXT_MGR already set [ 143.742274][ T2233] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.745710][ T4266] binder: 4263:4266 ioctl 4018620d 20000040 returned -16 [ 143.756448][ T2233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.767971][ T4250] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 143.782828][ T2233] usb 2-1: config 0 descriptor?? [ 143.800865][ T4250] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 144.050499][ T4285] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 144.059481][ T4285] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 144.393645][ T2233] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 144.400924][ T2233] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 144.408553][ T2233] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 144.417526][ T4272] F2FS-fs (loop3): invalid crc value [ 144.418722][ T2233] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 144.442181][ T4272] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.536922][ T4272] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 144.544975][ T4272] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.581976][ T4186] attempt to access beyond end of device [ 144.581976][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 144.671227][ T2233] usb 2-1: USB disconnect, device number 12 [ 144.726732][ T4313] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 144.922556][ T4326] tipc: Started in network mode [ 144.927250][ T4326] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 144.937487][ T4326] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 144.945828][ T4326] tipc: Enabled bearer , priority 10 [ 145.038273][ T375] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 145.278237][ T375] usb 1-1: Using ep0 maxpacket: 16 [ 145.478383][ T375] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 145.735787][ T375] usb 1-1: config 0 has no interface number 0 [ 145.741855][ T375] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.752920][ T375] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.763125][ T375] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.772987][ T4347] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 145.776259][ T375] usb 1-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 145.800512][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.809978][ T375] usb 1-1: config 0 descriptor?? [ 145.910748][ T4354] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 145.919870][ T4354] EXT4-fs (loop4): Remounting filesystem read-only [ 145.926488][ T4354] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 145.936043][ T4354] Quota error (device loop4): write_blk: dquota write failed [ 145.943472][ T4354] Quota error (device loop4): qtree_write_dquot: Error -27 occurred while creating quota [ 145.953748][ T4354] EXT4-fs (loop4): 1 truncate cleaned up [ 145.959400][ T4354] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,discard, [ 145.969942][ T4354] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 146.295808][ T13] tipc: 32-bit node address hash set to 1000000 [ 146.463597][ T4356] F2FS-fs (loop3): invalid crc value [ 146.472812][ T4356] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.521035][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.529834][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.534679][ T4356] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.537995][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.566084][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.573375][ T1552] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 146.586165][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.588598][ T4382] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 146.593691][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.679249][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.769453][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.776466][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.783335][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.790239][ T375] uclogic 0003:5543:0047.0017: unknown main item tag 0x0 [ 146.797526][ T375] uclogic 0003:5543:0047.0017: No inputs registered, leaving [ 146.906380][ T4391] fuse: Bad value for 'fd' [ 147.338206][ T4387] device pim6reg1 entered promiscuous mode [ 147.598915][ T375] uclogic 0003:5543:0047.0017: hidraw0: USB HID v0.00 Device [HID 5543:0047] on usb-dummy_hcd.0-1/input2 [ 147.612177][ T375] usb 1-1: USB disconnect, device number 16 [ 147.629447][ T4186] attempt to access beyond end of device [ 147.629447][ T4186] loop3: rw=524288, want=45072, limit=40427 [ 147.640818][ T4186] attempt to access beyond end of device [ 147.640818][ T4186] loop3: rw=0, want=45072, limit=40427 [ 147.789156][ T4186] attempt to access beyond end of device [ 147.789156][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 147.812102][ T445] tipc: Disabling bearer [ 147.817773][ T445] tipc: Left network mode [ 148.028423][ T1552] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.039460][ T1552] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.053098][ T1552] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.064910][ T1552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.078273][ T1552] usb 2-1: config 0 descriptor?? [ 148.115300][ T4413] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 148.739877][ T1552] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 148.747122][ T1552] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 148.769733][ T1552] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 148.789045][ T1552] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 148.837252][ T4435] fuse: Bad value for 'fd' [ 149.064775][ T4432] device pim6reg1 entered promiscuous mode [ 149.221625][ T445] device bridge_slave_1 left promiscuous mode [ 149.228607][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.242873][ T13] usb 2-1: USB disconnect, device number 13 [ 149.250165][ T445] device bridge_slave_0 left promiscuous mode [ 149.258873][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.293976][ T4451] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 149.347651][ T4451] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.355145][ T4451] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.1407: bg 0: block 248: padding at end of block bitmap is not set [ 149.376958][ T4451] Quota error (device loop4): write_blk: dquota write failed [ 149.387236][ T4451] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 149.397898][ T4451] EXT4-fs (loop4): 1 truncate cleaned up [ 149.404251][ T4451] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,grpquota,quota,noblock_validity,nodiscard,nomblk_io_submit,,errors=continue [ 149.434937][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.441824][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.449447][ T4434] device bridge_slave_0 entered promiscuous mode [ 149.456614][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.463565][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.471159][ T4434] device bridge_slave_1 entered promiscuous mode [ 149.825421][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.833502][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.864263][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.873269][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.884930][ T862] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.891822][ T862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.902376][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.907195][ T4469] x_tables: unsorted underflow at hook 3 [ 149.910822][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.924946][ T862] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.931837][ T862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.950551][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.958415][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.978074][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.000289][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.022287][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.044035][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.057789][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.069094][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.510112][ T23] audit: type=1326 audit(1719914317.760:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388499df19 code=0x7ffc0000 [ 150.538231][ T862] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 150.547769][ T23] audit: type=1326 audit(1719914317.780:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388499df19 code=0x7ffc0000 [ 150.571700][ T23] audit: type=1326 audit(1719914317.780:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f388499df19 code=0x7ffc0000 [ 150.595508][ T23] audit: type=1326 audit(1719914317.780:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388499df19 code=0x7ffc0000 [ 150.619222][ T23] audit: type=1326 audit(1719914317.780:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388499df19 code=0x7ffc0000 [ 150.642545][ T23] audit: type=1326 audit(1719914317.780:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f388499df19 code=0x7ffc0000 [ 150.668054][ T23] audit: type=1326 audit(1719914317.780:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388499df19 code=0x7ffc0000 [ 150.691577][ T23] audit: type=1326 audit(1719914317.780:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388499df19 code=0x7ffc0000 [ 150.858301][ T862] usb 5-1: Using ep0 maxpacket: 8 [ 150.874773][ T4500] fuse: Bad value for 'fd' [ 151.032536][ T4500] device pim6reg1 entered promiscuous mode [ 151.128307][ T375] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 151.159409][ T4507] EXT4-fs (loop2): Ignoring removed bh option [ 151.178297][ T862] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 151.179883][ T4507] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #16: comm syz.2.1425: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 151.210587][ T4507] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.1425: couldn't read orphan inode 16 (err -117) [ 151.223353][ T4507] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,delalloc,bh,,errors=continue [ 151.242187][ T4507] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038 (0x7fffffff) [ 151.268442][ T862] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.278821][ T862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.290084][ T4514] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 151.298995][ T4514] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 151.307046][ T862] usb 5-1: SerialNumber: syz [ 151.313187][ T4514] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 151.328735][ T4514] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 151.331402][ T2440] EXT4-fs error (device loop2): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 19 [ 151.337942][ T4514] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 151.349361][ T2440] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 151.357357][ T4514] EXT4-fs error (device loop1) in ext4_orphan_del:3211: error 27 [ 151.365958][ T2440] EXT4-fs error (device loop2): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 19 [ 151.375242][ T4514] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 151.391858][ T2440] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 151.393237][ T4514] EXT4-fs error (device loop1) in ext4_orphan_cleanup:2816: error 27 [ 151.401645][ T2440] EXT4-fs error (device loop2): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 19 [ 151.410476][ T4514] EXT4-fs (loop1): 1 truncate cleaned up [ 151.421441][ T2440] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 151.426807][ T4514] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 151.435560][ T2440] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 151.444860][ T4514] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038 (0x7fffffff) [ 151.459681][ T2440] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2930: inode #15: comm syz-executor: corrupted xattr block 19 [ 151.487732][ T2440] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -74) [ 151.502583][ T2440] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 151.518325][ T375] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.519218][ T2440] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2930: inode #18: comm syz-executor: corrupted xattr block 41 [ 151.528892][ T375] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.551478][ T2440] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -74) [ 151.561545][ T2440] EXT4-fs error (device loop2): ext4_lookup:1818: inode #2: comm syz-executor: deleted inode referenced: 16 [ 151.576014][ T2440] EXT4-fs error (device loop2): ext4_lookup:1818: inode #2: comm syz-executor: deleted inode referenced: 16 [ 151.658628][ T375] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.676586][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.684730][ T375] usb 1-1: SerialNumber: syz [ 151.701028][ T4523] EXT4-fs error (device loop3): ext4_orphan_get:1260: comm syz.3.1430: bad orphan inode 8192 [ 151.712319][ T4523] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 151.785002][ T4531] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 151.795898][ T4531] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.862357][ T4537] cgroup1: Bad value for 'name' [ 151.888526][ T4537] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 151.911229][ T4531] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.1433: bg 0: block 248: padding at end of block bitmap is not set [ 151.983932][ T375] usb 1-1: 0:2 : does not exist [ 152.026096][ T4531] EXT4-fs (loop3): 1 truncate cleaned up [ 152.054127][ T4531] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,grpquota,quota,noblock_validity,nodiscard,nomblk_io_submit,,errors=continue [ 152.148251][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.155342][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.163005][ T4536] device bridge_slave_0 entered promiscuous mode [ 152.170484][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.177364][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.185034][ T4536] device bridge_slave_1 entered promiscuous mode [ 152.212612][ T13] usb 5-1: USB disconnect, device number 14 [ 152.353205][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.360078][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.367246][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.374102][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.500336][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.508467][ T375] usb 1-1: USB disconnect, device number 17 [ 152.517752][ T2233] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.525668][ T2233] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.541662][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.549919][ T2233] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.556752][ T2233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.564793][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.596172][ T2233] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.603047][ T2233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.620392][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.640215][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.659161][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.676994][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.692642][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.707199][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.718764][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.352524][ T4578] cgroup1: Bad value for 'name' [ 153.627020][ T13] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 153.709743][ T4586] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.736311][ T4586] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.868253][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 153.939522][ T4559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 154.409191][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 154.430846][ T4615] EXT4-fs error (device loop3): ext4_orphan_get:1260: comm syz.3.1460: bad orphan inode 8192 [ 154.441273][ T4615] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 154.458289][ T1855] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 154.478467][ T23] kauditd_printk_skb: 70 callbacks suppressed [ 154.478480][ T23] audit: type=1326 audit(1719914321.730:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0144db1b code=0x7ffc0000 [ 154.526016][ T23] audit: type=1326 audit(1719914321.760:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0144db1b code=0x7ffc0000 [ 154.579372][ T23] audit: type=1400 audit(1719914321.830:475): avc: denied { setopt } for pid=4630 comm="syz.3.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.716115][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 154.744616][ T23] audit: type=1326 audit(1719914321.990:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0144db1b code=0x7ffc0000 [ 154.932520][ T23] audit: type=1326 audit(1719914322.180:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0144db1b code=0x7ffc0000 [ 155.018619][ T23] audit: type=1326 audit(1719914322.270:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0144db1b code=0x7ffc0000 [ 155.042465][ T23] audit: type=1326 audit(1719914322.290:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0144db1b code=0x7ffc0000 [ 155.068400][ T23] audit: type=1326 audit(1719914322.320:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0144db1b code=0x7ffc0000 [ 155.091931][ T1855] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.094774][ T23] audit: type=1326 audit(1719914322.350:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0144db1b code=0x7ffc0000 [ 155.102090][ T1855] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.127895][ T4650] EXT4-fs error (device loop3): ext4_orphan_get:1260: comm syz.3.1474: bad orphan inode 8192 [ 155.145153][ T4650] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 155.155176][ T23] audit: type=1326 audit(1719914322.410:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0144db1b code=0x7ffc0000 [ 155.208685][ T1855] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.218376][ T1855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.226903][ T1855] usb 5-1: SerialNumber: syz [ 155.371509][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 155.529691][ T1855] usb 5-1: 0:2 : does not exist [ 155.573612][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 155.798277][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.858283][ T13] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 155.859533][ T4690] EXT4-fs error (device loop1): ext4_orphan_get:1260: comm syz.1.1489: bad orphan inode 8192 [ 155.875088][ T13] usb 2-1: can't read configurations, error -71 [ 155.876657][ T4690] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 155.911642][ T4665] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 155.926457][ T4665] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 155.939167][ T4665] EXT4-fs (loop3): This should not happen!! Data will be lost [ 155.939167][ T4665] [ 155.949028][ T4665] EXT4-fs (loop3): Total free blocks count 0 [ 155.954820][ T4665] EXT4-fs (loop3): Free/Dirty block details [ 155.961654][ T4665] EXT4-fs (loop3): free_blocks=68451041280 [ 155.967528][ T4665] EXT4-fs (loop3): dirty_blocks=16 [ 155.972879][ T1855] usb 5-1: USB disconnect, device number 15 [ 155.983531][ T4665] EXT4-fs (loop3): Block reservation details [ 155.993314][ T4665] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 156.185979][ T4709] netlink: 'syz.2.1493': attribute type 5 has an invalid length. [ 156.935367][ T4720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 157.498306][ T2233] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 157.916612][ T4749] input: syz0 as /devices/virtual/input/input33 [ 158.048357][ T2233] usb 3-1: Using ep0 maxpacket: 8 [ 158.199303][ T4732] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 158.288280][ T4768] netlink: 'syz.1.1510': attribute type 5 has an invalid length. [ 158.595974][ T4773] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 158.610020][ T4782] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 158.653819][ T4782] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 158.662945][ T4782] overlayfs: failed to get metacopy (-117) [ 158.749829][ T4787] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue [ 158.763465][ T4787] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 160.428644][ T4822] netlink: 'syz.4.1531': attribute type 5 has an invalid length. [ 160.661347][ T1855] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.708302][ T2233] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.778334][ T2233] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 160.795490][ T2233] usb 3-1: can't read configurations, error -71 [ 160.880358][ T4839] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 160.908375][ T1855] usb 4-1: Using ep0 maxpacket: 16 [ 161.288322][ T1855] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 161.753647][ T4867] 9p: Unknown uid 00000000004294967295 [ 161.768463][ T1855] usb 4-1: New USB device found, idVendor=1b3d, idProduct=015e, bcdDevice=bb.da [ 161.771679][ T23] kauditd_printk_skb: 23 callbacks suppressed [ 161.771691][ T23] audit: type=1400 audit(1719914329.000:506): avc: denied { getopt } for pid=4866 comm="syz.0.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.781486][ T1855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.827544][ T1855] usb 4-1: Product: syz [ 161.831808][ T1855] usb 4-1: Manufacturer: syz [ 161.836256][ T1855] usb 4-1: SerialNumber: syz [ 161.854087][ T4871] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 161.855260][ T1855] usb 4-1: config 0 descriptor?? [ 161.919075][ T1855] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 161.933545][ T1855] usb 4-1: Detected FT-X [ 161.997520][ T4879] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4879 comm=syz.4.1551 [ 162.138644][ T1855] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 162.268327][ T1855] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 162.289319][ T1855] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 162.301711][ T1855] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 162.310568][ T4886] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=880ce118, mo2=0000] [ 162.319859][ T1855] usb 4-1: USB disconnect, device number 14 [ 162.326726][ T1855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 162.336995][ T1855] ftdi_sio 4-1:0.0: device disconnected [ 162.343804][ T4886] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 69: comm syz.1.1555: lblock 8 mapped to illegal pblock 69 (length 1) [ 162.359306][ T4886] Quota error (device loop1): write_blk: dquota write failed [ 162.370449][ T4886] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 68: comm syz.1.1555: lblock 7 mapped to illegal pblock 68 (length 1) [ 162.388939][ T23] audit: type=1400 audit(1719914329.640:507): avc: denied { mount } for pid=4890 comm="syz.4.1556" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 162.396934][ T4871] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 162.415625][ T23] audit: type=1400 audit(1719914329.640:508): avc: denied { watch watch_reads } for pid=4890 comm="syz.4.1556" path="/53/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 162.431342][ T4871] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 162.448787][ T23] audit: type=1400 audit(1719914329.680:509): avc: denied { unmount } for pid=4216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 162.460114][ T4886] Quota error (device loop1): write_blk: dquota write failed [ 162.479598][ T4871] EXT4-fs (loop2): This should not happen!! Data will be lost [ 162.479598][ T4871] [ 162.486871][ T4886] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 67: comm syz.1.1555: lblock 6 mapped to illegal pblock 67 (length 1) [ 162.527049][ T4871] EXT4-fs (loop2): Total free blocks count 0 [ 162.533721][ T4871] EXT4-fs (loop2): Free/Dirty block details [ 162.542760][ T4871] EXT4-fs (loop2): free_blocks=68451041280 [ 162.546020][ T4886] Quota error (device loop1): write_blk: dquota write failed [ 162.550804][ T4871] EXT4-fs (loop2): dirty_blocks=16 [ 162.556372][ T4886] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 162.561802][ T4871] EXT4-fs (loop2): Block reservation details [ 162.571016][ T4886] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 48: comm syz.1.1555: lblock 0 mapped to illegal pblock 48 (length 1) [ 162.576573][ T4871] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 162.591082][ T4886] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 162.605262][ T4886] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 162.615038][ T4886] EXT4-fs warning (device loop1): ext4_evict_inode:304: couldn't mark inode dirty (err -117) [ 162.625132][ T4886] EXT4-fs (loop1): 1 orphan inode deleted [ 162.630731][ T4886] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,quota,noblock_validity,nodiscard,journal_dev=0x0000000000000004,norecovery,bsddf,debug,,errors=continue [ 162.649407][ T445] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.663488][ T445] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 162.689048][ T4886] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 162.738525][ T4904] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4904 comm=syz.0.1563 [ 163.028262][ T1552] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 163.328303][ T1552] usb 1-1: Using ep0 maxpacket: 16 [ 163.588412][ T1552] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 163.596670][ T1552] usb 1-1: config 0 has no interface number 0 [ 163.602871][ T1552] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.613579][ T1552] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.738354][ T1552] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 163.747287][ T1552] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 163.755302][ T1552] usb 1-1: Product: syz [ 163.759894][ T1552] usb 1-1: SerialNumber: syz [ 163.765160][ T1552] usb 1-1: config 0 descriptor?? [ 163.995015][ T4940] 9p: Unknown uid 00000000004294967295 [ 164.059513][ T1552] usb 1-1: USB disconnect, device number 18 [ 164.081001][ T4944] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=880ce118, mo2=0000] [ 164.091293][ T4944] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 69: comm syz.1.1577: lblock 8 mapped to illegal pblock 69 (length 1) [ 164.105498][ T4944] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 68: comm syz.1.1577: lblock 7 mapped to illegal pblock 68 (length 1) [ 164.119922][ T4944] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 67: comm syz.1.1577: lblock 6 mapped to illegal pblock 67 (length 1) [ 164.134242][ T4944] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 48: comm syz.1.1577: lblock 0 mapped to illegal pblock 48 (length 1) [ 164.148425][ T4944] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 164.157731][ T4944] EXT4-fs warning (device loop1): ext4_evict_inode:304: couldn't mark inode dirty (err -117) [ 164.167838][ T4944] EXT4-fs (loop1): 1 orphan inode deleted [ 164.173423][ T4944] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,quota,noblock_validity,nodiscard,journal_dev=0x0000000000000004,norecovery,bsddf,debug,,errors=continue [ 164.173493][ T445] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 164.205124][ T4944] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 164.268286][ T2233] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 164.360409][ T4954] ------------[ cut here ]------------ [ 164.365722][ T4954] WARNING: CPU: 0 PID: 4954 at mm/page_alloc.c:4875 __alloc_pages_nodemask+0x5d5/0x840 [ 164.375139][ T4954] Modules linked in: [ 164.378900][ T4954] CPU: 0 PID: 4954 Comm: syz.1.1581 Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 164.388506][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 164.398434][ T4954] RIP: 0010:__alloc_pages_nodemask+0x5d5/0x840 [ 164.404480][ T4954] Code: e1 07 80 c1 03 38 c1 0f 8c 12 fd ff ff 4c 89 f7 89 74 24 38 e8 1c 27 04 00 8b 74 24 38 48 8d bc 24 a0 00 00 00 e9 f5 fc ff ff <0f> 0b 31 db e9 ef fd ff ff 43 80 7c 3d 00 00 74 0a 48 8b 7c 24 48 [ 164.424043][ T4954] RSP: 0018:ffff8881ecccf8e0 EFLAGS: 00010246 [ 164.429946][ T4954] RAX: ffff8881ecccf990 RBX: 0000000000040dc0 RCX: 0000000000000000 [ 164.437755][ T4954] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffff8881ecccf9a8 [ 164.445593][ T4954] RBP: ffff8881ecccfa30 R08: dffffc0000000000 R09: ffff8881ecccf990 [ 164.453467][ T4954] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103d999f2c [ 164.461269][ T4954] R13: ffff8881e91dd150 R14: 000000000000001a R15: dffffc0000000000 [ 164.469168][ T4954] FS: 00007f2571d5e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 164.477935][ T4954] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.484373][ T4954] CR2: 00007f2572c6b030 CR3: 00000001e032d000 CR4: 00000000003406b0 [ 164.492343][ T4954] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.500154][ T4954] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 164.507959][ T4954] Call Trace: [ 164.511097][ T4954] ? __warn+0x162/0x250 [ 164.515087][ T4954] ? report_bug+0x3a1/0x4e0 [ 164.519423][ T4954] ? __alloc_pages_nodemask+0x5d5/0x840 [ 164.524811][ T4954] ? __alloc_pages_nodemask+0x5d5/0x840 [ 164.530188][ T4954] ? do_invalid_op+0x6e/0x110 [ 164.534699][ T4954] ? invalid_op+0x1e/0x30 [ 164.538870][ T4954] ? __alloc_pages_nodemask+0x5d5/0x840 [ 164.544514][ T4954] ? cpus_share_cache+0x110/0x110 [ 164.549369][ T4954] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 164.554769][ T4954] kmalloc_order_trace+0x2a/0x100 [ 164.559628][ T4954] input_mt_init_slots+0xc6/0x9d0 [ 164.564478][ T4954] uinput_create_device+0x50f/0x620 [ 164.569596][ T4954] uinput_ioctl_handler+0xa63/0x16a0 [ 164.574720][ T4954] ? do_futex+0x13c1/0x19f0 [ 164.579047][ T4954] ? uinput_release+0x50/0x50 [ 164.583570][ T4954] ? memset+0x1f/0x40 [ 164.587389][ T4954] ? fsnotify+0x1280/0x1340 [ 164.591731][ T4954] ? uinput_poll+0x110/0x110 [ 164.596151][ T4954] do_vfs_ioctl+0x742/0x1720 [ 164.600703][ T4954] ? ioctl_preallocate+0x250/0x250 [ 164.605628][ T4954] ? __fget+0x407/0x490 [ 164.609649][ T4954] ? fget_many+0x20/0x20 [ 164.613706][ T4954] ? switch_fpu_return+0x1d4/0x410 [ 164.618648][ T4954] ? security_file_ioctl+0x7d/0xa0 [ 164.623593][ T4954] __x64_sys_ioctl+0xd4/0x110 [ 164.628106][ T4954] do_syscall_64+0xca/0x1c0 [ 164.632460][ T4954] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 164.638260][ T4954] RIP: 0033:0x7f2572adcf19 [ 164.642513][ T4954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.661952][ T4954] RSP: 002b:00007f2571d5e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.670203][ T4954] RAX: ffffffffffffffda RBX: 00007f2572c6af60 RCX: 00007f2572adcf19 [ 164.678023][ T4954] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 164.685819][ T4954] RBP: 00007f2572b4bbcd R08: 0000000000000000 R09: 0000000000000000 [ 164.693802][ T4954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.701619][ T4954] R13: 000000000000000b R14: 00007f2572c6af60 R15: 00007ffebcddda68 [ 164.709435][ T4954] ---[ end trace 604cf2d16e154148 ]--- [ 164.858342][ T2233] usb 3-1: Using ep0 maxpacket: 16 [ 165.248314][ T2233] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 165.615834][ T2233] usb 3-1: New USB device found, idVendor=1b3d, idProduct=015e, bcdDevice=bb.da [ 165.624773][ T2233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.646989][ T2233] usb 3-1: Product: syz [ 165.652559][ T2233] usb 3-1: Manufacturer: syz [ 165.657118][ T2233] usb 3-1: SerialNumber: syz [ 165.681030][ T2233] usb 3-1: config 0 descriptor?? [ 165.729876][ T2233] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 165.747616][ T2233] usb 3-1: Detected FT-X [ 165.948306][ T2233] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 165.968343][ T2233] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 165.995819][ T2233] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 166.004148][ T2233] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.013930][ T2233] usb 3-1: USB disconnect, device number 14 [ 166.020739][ T2233] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 166.035189][ T2233] ftdi_sio 3-1:0.0: device disconnected [ 166.238565][ T5] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 166.348235][ T1855] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 166.514818][ T5009] netlink: 'syz.4.1600': attribute type 5 has an invalid length. [ 166.677636][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 166.737069][ T5013] FAT-fs (loop2): Directory bread(block 64) failed [ 166.743534][ T5013] FAT-fs (loop2): Directory bread(block 65) failed [ 166.744437][ T4993] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.749981][ T5013] FAT-fs (loop2): Directory bread(block 66) failed [ 166.763528][ T5013] FAT-fs (loop2): Directory bread(block 67) failed [ 166.769894][ T5013] FAT-fs (loop2): Directory bread(block 68) failed [ 166.776151][ T5013] FAT-fs (loop2): Directory bread(block 69) failed [ 166.782665][ T5013] FAT-fs (loop2): Directory bread(block 70) failed [ 166.788951][ T5013] FAT-fs (loop2): Directory bread(block 71) failed [ 166.795303][ T5013] FAT-fs (loop2): Directory bread(block 72) failed [ 166.801635][ T5013] FAT-fs (loop2): Directory bread(block 73) failed [ 166.898284][ T1855] usb 1-1: Using ep0 maxpacket: 16 [ 167.078519][ T1855] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 167.087117][ T1855] usb 1-1: config 0 has no interface number 0 [ 167.094820][ T1855] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.107402][ T1855] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.220137][ T5021] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 167.234193][ T5021] ext4 filesystem being mounted at /192/bus supports timestamps until 2038 (0x7fffffff) [ 167.238482][ T1855] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 167.278260][ T1855] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 167.286157][ T1855] usb 1-1: Product: syz [ 167.290451][ T1855] usb 1-1: SerialNumber: syz [ 167.295912][ T1855] usb 1-1: config 0 descriptor?? [ 167.775501][ T1855] usb 1-1: USB disconnect, device number 19 [ 168.136819][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 168.308435][ T23] kauditd_printk_skb: 8 callbacks suppressed [ 168.308446][ T23] audit: type=1400 audit(1719914335.567:512): avc: denied { remount } for pid=5052 comm="syz.0.1615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.336792][ T5056] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.583199][ T1855] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 168.828247][ T1855] usb 5-1: Using ep0 maxpacket: 16 [ 169.168645][ T5083] EXT4-fs (loop3): unsupported descriptor size 2 [ 169.178368][ T5] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.185975][ T1855] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 169.248352][ T5] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 169.255871][ T5] usb 4-1: can't read configurations, error -71 [ 169.348352][ T1855] usb 5-1: New USB device found, idVendor=1b3d, idProduct=015e, bcdDevice=bb.da [ 169.357372][ T1855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.365192][ T1855] usb 5-1: Product: syz [ 169.369165][ T1855] usb 5-1: Manufacturer: syz [ 169.373527][ T1855] usb 5-1: SerialNumber: syz [ 169.379050][ T1855] usb 5-1: config 0 descriptor?? [ 169.429142][ T1855] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 169.437085][ T1855] usb 5-1: Detected FT-X [ 169.448523][ T373] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 169.638351][ T1855] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 169.659968][ T5096] syz.0.1629 uses obsolete (PF_INET,SOCK_PACKET) [ 169.668493][ T1855] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 169.688309][ T373] usb 2-1: Using ep0 maxpacket: 16 [ 169.694695][ T23] audit: type=1400 audit(1719914336.947:513): avc: denied { name_bind } for pid=5097 comm="syz.2.1630" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 169.715897][ T1855] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 169.724045][ T1855] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 169.733199][ T1855] usb 5-1: USB disconnect, device number 16 [ 169.739591][ T1855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 169.749241][ T1855] ftdi_sio 5-1:0.0: device disconnected [ 169.805328][ T5109] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.812660][ T23] audit: type=1400 audit(1719914337.067:514): avc: denied { connect } for pid=5110 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.833518][ T373] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 170.346542][ T373] usb 2-1: config 0 has no interface number 0 [ 170.352856][ T373] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 170.363855][ T373] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 170.488387][ T373] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 170.497350][ T373] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 170.505567][ T373] usb 2-1: Product: syz [ 170.510184][ T373] usb 2-1: SerialNumber: syz [ 170.519658][ T373] usb 2-1: config 0 descriptor?? [ 170.675207][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.682557][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.690599][ T5134] device bridge_slave_0 entered promiscuous mode [ 170.697850][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.704956][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.712803][ T5134] device bridge_slave_1 entered promiscuous mode [ 170.851707][ T373] usb 2-1: USB disconnect, device number 16 [ 170.866581][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.873444][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.880600][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.887453][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.972244][ T5147] input: syz1 as /devices/virtual/input/input35 [ 171.099868][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.111759][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.121391][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.148474][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.157487][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.164378][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.173970][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.183541][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.190412][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.229302][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.237260][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.268594][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.277022][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.299828][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.318369][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.326796][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.347308][ T23] audit: type=1400 audit(1719914338.601:515): avc: denied { mount } for pid=5134 comm="syz-executor" name="/" dev="tmpfs" ino=56709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.498294][ T23] audit: type=1400 audit(1719914338.751:516): avc: denied { bind } for pid=5159 comm="syz.0.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.533644][ T23] audit: type=1400 audit(1719914338.751:517): avc: denied { listen } for pid=5159 comm="syz.0.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.554165][ T23] audit: type=1400 audit(1719914338.751:518): avc: denied { accept } for pid=5159 comm="syz.0.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.679444][ T5175] netlink: 'syz.3.1650': attribute type 5 has an invalid length. [ 171.950786][ T393] device bridge_slave_1 left promiscuous mode [ 171.959569][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.966364][ T5183] sit: non-ECT from 172.30.0.3 with TOS=0x1 [ 171.972612][ T393] device bridge_slave_0 left promiscuous mode [ 171.980439][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.436383][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 172.565799][ T5190] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 172.578132][ T5190] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 172.586603][ T5190] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 172.594933][ T5190] EXT4-fs error (device loop1) in ext4_orphan_del:3211: error 27 [ 172.603678][ T5190] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 172.611922][ T5190] EXT4-fs error (device loop1) in ext4_orphan_cleanup:2816: error 27 [ 172.627398][ T5190] EXT4-fs (loop1): 1 truncate cleaned up [ 172.641125][ T5202] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 172.656114][ T5190] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 172.676990][ T5190] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038 (0x7fffffff) [ 172.977821][ T432] udevd[432]: failed to send result of seq 11412 to main daemon: Connection refused [ 172.992864][ T432] printk: udevd: 7 output lines suppressed due to ratelimiting [ 173.364663][ T23] audit: type=1400 audit(1719914340.619:519): avc: denied { write } for pid=5219 comm="syz.1.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.397030][ T23] audit: type=1400 audit(1719914340.649:520): avc: denied { bind } for pid=5221 comm="syz.0.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.754148][ T5218] overlayfs: statfs failed on './file0' [ 173.773084][ T5233] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 173.781444][ T5233] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 173.789930][ T5233] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 173.798563][ T5233] EXT4-fs error (device loop3) in ext4_orphan_del:3211: error 27 [ 173.806311][ T5233] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 173.812838][ T1552] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 173.816007][ T5233] EXT4-fs error (device loop3) in ext4_orphan_cleanup:2816: error 27 [ 173.831283][ T5233] EXT4-fs (loop3): 1 truncate cleaned up [ 173.836787][ T5233] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 173.846373][ T5233] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 174.178319][ T1552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.189348][ T1552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.199245][ T1552] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 174.208104][ T1552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.216937][ T1552] usb 1-1: config 0 descriptor?? [ 174.548243][ T124] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 174.699786][ T1552] itetech 0003:258A:6A88.0019: unbalanced collection at end of report description [ 174.709325][ T1552] itetech: probe of 0003:258A:6A88.0019 failed with error -22 [ 175.121091][ T379] usb 1-1: USB disconnect, device number 20 [ 175.268801][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.280111][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.290109][ T124] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 175.299188][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.312287][ T124] usb 3-1: config 0 descriptor?? [ 175.850514][ T124] logitech-hidpp-device 0003:046D:C086.001A: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 176.036590][ T124] usb 3-1: USB disconnect, device number 15 [ 177.257167][ T5338] input: syz1 as /devices/virtual/input/input36 [ 177.673867][ T5352] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 177.681456][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 178.523783][ T5376] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 178.542508][ T5376] ext4 filesystem being mounted at /213/bus supports timestamps until 2038 (0x7fffffff) [ 178.693123][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 179.260454][ T5415] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 179.274742][ T5415] ext4 filesystem being mounted at /98/bus supports timestamps until 2038 (0x7fffffff) [ 179.958284][ T1552] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 180.080876][ T5451] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 180.094925][ T5451] ext4 filesystem being mounted at /23/bus supports timestamps until 2038 (0x7fffffff) [ 180.353050][ T1552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.364094][ T1552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.394596][ T1552] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 180.403579][ T1552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.569999][ T1552] usb 3-1: config 0 descriptor?? [ 182.252210][ T1552] itetech 0003:258A:6A88.001B: unbalanced collection at end of report description [ 182.266374][ T1552] itetech: probe of 0003:258A:6A88.001B failed with error -22 [ 182.462142][ T2233] usb 3-1: USB disconnect, device number 16 [ 182.515758][ T23] audit: type=1400 audit(1719914349.769:521): avc: denied { transfer } for pid=5521 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 182.716117][ T5541] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 182.743612][ T5541] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf, [ 182.773985][ T5558] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 182.799918][ T5558] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=-9223372036854716906 [ 182.811483][ T5558] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=-9223372036854716906 [ 182.824868][ T5558] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=-9223372036854716906 [ 183.105969][ T5567] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.114145][ T5571] overlayfs: workdir and upperdir must be separate subtrees [ 183.114887][ T5567] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 183.189328][ T5567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1788'. [ 183.198515][ T5567] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 183.216681][ T23] audit: type=1326 audit(1719914350.469:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0144df19 code=0x7ffc0000 [ 183.240164][ T23] audit: type=1326 audit(1719914350.469:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0144df19 code=0x7ffc0000 [ 183.240184][ T23] audit: type=1326 audit(1719914350.469:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2b0144df19 code=0x7ffc0000 [ 183.240202][ T23] audit: type=1326 audit(1719914350.469:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0144df19 code=0x7ffc0000 [ 183.240219][ T23] audit: type=1326 audit(1719914350.469:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0144df19 code=0x7ffc0000 [ 183.240236][ T23] audit: type=1326 audit(1719914350.469:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2b0144df19 code=0x7ffc0000 [ 183.240254][ T23] audit: type=1326 audit(1719914350.469:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0144df19 code=0x7ffc0000 [ 183.240271][ T23] audit: type=1326 audit(1719914350.469:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0144df19 code=0x7ffc0000 [ 183.240288][ T23] audit: type=1326 audit(1719914350.469:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b0144df19 code=0x7ffc0000 [ 183.585174][ T5597] overlayfs: workdir and upperdir must be separate subtrees [ 183.738256][ T2233] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 183.804515][ T5609] hub 6-0:1.0: USB hub found [ 183.809954][ T5609] hub 6-0:1.0: 1 port detected [ 184.050961][ T5619] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 184.069950][ T5619] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf, [ 184.090531][ T1552] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 184.118369][ T2233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.129348][ T2233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.139507][ T2233] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 184.148437][ T2233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.157516][ T2233] usb 3-1: config 0 descriptor?? [ 184.206925][ T5629] overlayfs: workdir and upperdir must be separate subtrees [ 184.228900][ T5635] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 184.238102][ T5635] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=-9223372036854716246 [ 184.248695][ T5635] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=-9223372036854716246 [ 184.259737][ T5635] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=-9223372036854716246 [ 184.271240][ T5635] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=-9223372036854716246 [ 184.349542][ T5637] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.358469][ T5637] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 184.638338][ T1552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.649413][ T1552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.659266][ T1552] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 184.668465][ T1552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.677981][ T1552] usb 5-1: config 0 descriptor?? [ 184.712955][ T5637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1818'. [ 184.723421][ T5637] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 184.861869][ T2233] logitech-hidpp-device 0003:046D:C086.001C: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 185.094192][ T379] usb 3-1: USB disconnect, device number 17 [ 185.159688][ T1552] itetech 0003:258A:6A88.001D: unbalanced collection at end of report description [ 185.169038][ T1552] itetech: probe of 0003:258A:6A88.001D failed with error -22 [ 185.205776][ T5660] overlayfs: workdir and upperdir must be separate subtrees [ 185.367003][ T5677] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 185.376926][ T1552] usb 5-1: USB disconnect, device number 17 [ 185.401562][ T5677] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf, [ 185.418394][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.433412][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.441200][ T5682] device bridge_slave_0 entered promiscuous mode [ 185.456471][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.473440][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.482196][ T5682] device bridge_slave_1 entered promiscuous mode [ 185.545147][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.552028][ T5682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.559312][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.566150][ T5682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.604804][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.628593][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.647501][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.671092][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.684242][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.691142][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.698875][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.707014][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.713908][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.735515][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.747021][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.770641][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.798664][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.832320][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.860425][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.870409][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.881431][ T5727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5727 comm=syz.1.1856 [ 185.951173][ T5727] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 185.960830][ T5727] ext4 filesystem being mounted at /247/bus supports timestamps until 2038 (0x7fffffff) [ 186.109504][ T393] device bridge_slave_1 left promiscuous mode [ 186.116725][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.143080][ T393] device bridge_slave_0 left promiscuous mode [ 186.149665][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.224976][ T5762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1866'. [ 186.408410][ T5] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 186.571242][ T5774] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 186.589691][ T5774] ext4 filesystem being mounted at /71/bus supports timestamps until 2038 (0x7fffffff) [ 186.658275][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 187.018324][ T5] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 187.185551][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.192788][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.194316][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.201765][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.210304][ T5794] device bridge_slave_0 entered promiscuous mode [ 187.216584][ T5] usb 1-1: Product: syz [ 187.224238][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.226466][ T5] usb 1-1: Manufacturer: syz [ 187.233734][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.237739][ T5] usb 1-1: SerialNumber: syz [ 187.246534][ T5794] device bridge_slave_1 entered promiscuous mode [ 187.278243][ T375] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 187.298959][ T5] usb 1-1: bad CDC descriptors [ 187.317723][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.324593][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.331754][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.338611][ T5794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.386360][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.395257][ T862] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.402742][ T862] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.420736][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.430487][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.437364][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.445475][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.454013][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.460925][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.485654][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.500883][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.514731][ T5807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5807 comm=syz.4.1885 [ 187.533901][ T5] usb 1-1: USB disconnect, device number 21 [ 187.551780][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.560383][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.573276][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.581225][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.596853][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.605534][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.620147][ T5807] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 187.626977][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.629017][ T5807] ext4 filesystem being mounted at /131/bus supports timestamps until 2038 (0x7fffffff) [ 187.637866][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.677246][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.685851][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.726812][ T375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.737869][ T375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.747981][ T375] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 187.756889][ T375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.768904][ T375] usb 2-1: config 0 descriptor?? [ 187.788731][ T393] device bridge_slave_1 left promiscuous mode [ 187.794960][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.802500][ T393] device bridge_slave_0 left promiscuous mode [ 187.808588][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.083767][ T5822] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 188.118370][ T5822] ext4 filesystem being mounted at /73/bus supports timestamps until 2038 (0x7fffffff) [ 188.400991][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.417680][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.438658][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.453748][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.468584][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.476993][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.479322][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.488814][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.491432][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.504872][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.506291][ T5847] device bridge_slave_0 entered promiscuous mode [ 188.516855][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.527353][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.535604][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.543127][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.550856][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.559071][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.566364][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.573934][ T375] hid-generic 0003:044F:B65D.001E: unknown main item tag 0x0 [ 188.581211][ T375] hid-generic 0003:044F:B65D.001E: unbalanced collection at end of report description [ 188.591039][ T375] hid-generic: probe of 0003:044F:B65D.001E failed with error -22 [ 188.613680][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.621332][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.634769][ T5847] device bridge_slave_1 entered promiscuous mode [ 188.677534][ T375] usb 2-1: USB disconnect, device number 17 [ 188.740605][ T5862] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 188.767519][ T5862] ext4 filesystem being mounted at /80/bus supports timestamps until 2038 (0x7fffffff) [ 188.806225][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.844531][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.889596][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.897921][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.913026][ T5870] fuse: Bad value for 'fd' [ 188.918618][ T862] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.925445][ T862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.933673][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.942064][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.950541][ T862] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.957420][ T862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.964913][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.004872][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.015133][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.075648][ T5877] device syzkaller0 entered promiscuous mode [ 189.096736][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.131204][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.150928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.199140][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.211046][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.217934][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.225612][ T5868] device bridge_slave_0 entered promiscuous mode [ 189.236593][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.243481][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.251522][ T5868] device bridge_slave_1 entered promiscuous mode [ 189.262477][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.300616][ T393] device bridge_slave_1 left promiscuous mode [ 189.308868][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.333864][ T393] device bridge_slave_0 left promiscuous mode [ 189.342937][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.573621][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.580501][ T5868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.587717][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.594622][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.623619][ T5888] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.632665][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.649124][ T5900] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 189.658383][ T862] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.659194][ T5900] EXT4-fs (loop4): orphan cleanup on readonly fs [ 189.671567][ T862] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.673833][ T5900] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #4: comm syz.4.1916: pblk 0 bad header/extent: invalid magic - magic 50a, entries 0, max 4(0), depth 0(0) [ 189.700619][ T5900] EXT4-fs error (device loop4): ext4_quota_enable:6059: comm syz.4.1916: Bad quota inode: 4, type: 1 [ 189.702139][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.720714][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.721477][ T5900] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.729234][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.743782][ T5888] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 189.750214][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.775955][ T5900] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 189.789086][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.799404][ T5888] attempt to access beyond end of device [ 189.799404][ T5888] loop2: rw=10241, want=45104, limit=40427 [ 189.804845][ T5900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 189.820047][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.838910][ T862] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.845805][ T862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.863665][ T23] kauditd_printk_skb: 141 callbacks suppressed [ 189.863677][ T23] audit: type=1400 audit(1719914357.119:672): avc: denied { setattr } for pid=5912 comm="syz.3.1919" name="" dev="pipefs" ino=61972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 189.879612][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.897764][ T5900] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz.4.1916: corrupted xattr block 19 [ 189.900911][ T4536] attempt to access beyond end of device [ 189.900911][ T4536] loop2: rw=2049, want=45112, limit=40427 [ 189.914047][ T5900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 189.925229][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.933412][ T5900] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz.4.1916: corrupted xattr block 19 [ 189.963007][ T5900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 189.963394][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.972131][ T5900] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz.4.1916: corrupted xattr block 19 [ 189.995609][ T5900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 190.004982][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.019232][ T5913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=5913 comm=syz.3.1919 [ 190.037223][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.046712][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.055313][ T5913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=5913 comm=syz.3.1919 [ 190.074348][ T5913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=5913 comm=syz.3.1919 [ 190.090583][ T5913] netlink: 13752 bytes leftover after parsing attributes in process `syz.3.1919'. [ 190.101983][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.112162][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.123180][ T5913] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1919'. [ 190.146835][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.160899][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.182236][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.191453][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.213585][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.222023][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.248296][ T5918] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 190.270582][ T5922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5922 comm=syz.1.1924 [ 190.275500][ T5918] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002] [ 190.300580][ T5918] System zones: 0-1, 4-36, 102-102 [ 190.306162][ T5918] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue [ 190.325003][ T5931] fuse: Bad value for 'fd' [ 190.400314][ T5922] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 190.409310][ T5922] ext4 filesystem being mounted at /250/bus supports timestamps until 2038 (0x7fffffff) [ 190.550593][ T1855] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 191.199107][ T5847] EXT4-fs error (device loop4): __ext4_iget:5217: inode #15: block 1803188595: comm syz-executor: invalid block [ 191.239979][ T5847] EXT4-fs error (device loop4): __ext4_iget:5217: inode #15: block 1803188595: comm syz-executor: invalid block [ 191.320381][ T5952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=5952 comm=syz.0.1932 [ 191.333034][ T5952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=5952 comm=syz.0.1932 [ 191.346038][ T5952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=5952 comm=syz.0.1932 [ 191.358534][ T5952] netlink: 13752 bytes leftover after parsing attributes in process `syz.0.1932'. [ 191.367669][ T5952] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1932'. [ 191.438362][ T1855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.454795][ T1855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.466608][ T1855] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 191.469355][ T393] device bridge_slave_1 left promiscuous mode [ 191.481412][ T1855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.490109][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.490343][ T5963] fuse: Bad value for 'fd' [ 191.502450][ T1855] usb 4-1: config 0 descriptor?? [ 191.508081][ T393] device bridge_slave_0 left promiscuous mode [ 191.514610][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.653196][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.660302][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.667679][ T5960] device bridge_slave_0 entered promiscuous mode [ 191.678988][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.685865][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.693388][ T5960] device bridge_slave_1 entered promiscuous mode [ 191.743397][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.750258][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.757646][ T5964] device bridge_slave_0 entered promiscuous mode [ 191.764950][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.772129][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.779788][ T5964] device bridge_slave_1 entered promiscuous mode [ 191.872219][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.879309][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.886433][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.893195][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.916706][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.923667][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.930787][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.937519][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.970860][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 191.978525][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 191.985103][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.985815][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 191.994109][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.001252][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.015344][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.015468][ T1552] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.022471][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.036531][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.036614][ T1552] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.043756][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.057792][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.057872][ T1552] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.065007][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.079178][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.086352][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.093581][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.100793][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.100812][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.100828][ T1855] hid-generic 0003:044F:B65D.001F: unknown main item tag 0x0 [ 192.100845][ T1855] hid-generic 0003:044F:B65D.001F: unbalanced collection at end of report description [ 192.101202][ T1855] hid-generic: probe of 0003:044F:B65D.001F failed with error -22 [ 192.149655][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.159066][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.167228][ T1552] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.174092][ T1552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.181767][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.191190][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.199509][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.199937][ T5974] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 192.207830][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.244482][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.252257][ T5974] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002] [ 192.260734][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.268468][ T5974] System zones: 0-1, 4-36, 102-102 [ 192.270616][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.274155][ T5974] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue [ 192.283119][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.312676][ T1552] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.319551][ T1552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.327691][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.336738][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.345577][ T1552] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.352446][ T1552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.436754][ T2233] usb 4-1: USB disconnect, device number 17 [ 192.457097][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.465115][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.473172][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.481457][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.501915][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.598644][ T1855] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 192.736696][ T2265] EXT4-fs error (device loop1): __ext4_iget:5217: inode #15: block 1803188595: comm syz-executor: invalid block [ 192.740180][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.757873][ T2265] EXT4-fs error (device loop1): __ext4_iget:5217: inode #15: block 1803188595: comm syz-executor: invalid block [ 192.768574][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.777733][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.801190][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.809407][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.823697][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.832415][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.845943][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.854305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.868263][ T1855] usb 1-1: Using ep0 maxpacket: 8 [ 192.870292][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.881602][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.897136][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.906013][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.926817][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.948935][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.973631][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.982371][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.997562][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.006193][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.008442][ T1855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.092614][ T393] device bridge_slave_1 left promiscuous mode [ 193.099732][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.107171][ T393] device bridge_slave_0 left promiscuous mode [ 193.108402][ T1855] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 193.113592][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.128837][ T1855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 193.136821][ T1855] usb 1-1: SerialNumber: syz [ 193.137465][ T393] device bridge_slave_1 left promiscuous mode [ 193.142252][ T1855] usb 1-1: config 0 descriptor?? [ 193.148553][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.159750][ T393] device bridge_slave_0 left promiscuous mode [ 193.168122][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.199160][ T1855] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 193.215118][ T1855] uvcvideo: No valid video chain found. [ 193.248378][ T373] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 193.406468][ T862] usb 1-1: USB disconnect, device number 22 [ 193.443578][ T23] audit: type=1400 audit(1719914360.699:673): avc: denied { ioctl } for pid=6003 comm="syz.2.1950" path="socket:[63537]" dev="sockfs" ino=63537 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.492263][ T6004] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 193.518669][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.525511][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.537145][ T5985] device bridge_slave_0 entered promiscuous mode [ 193.560705][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.567547][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.588943][ T5985] device bridge_slave_1 entered promiscuous mode [ 193.609092][ T23] audit: type=1326 audit(1719914360.869:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.2.1953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc35acfcf19 code=0x0 [ 193.678571][ T373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.695496][ T373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.714875][ T373] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 193.733107][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.740108][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.747211][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.754075][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.761605][ T373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.771438][ T373] usb 5-1: config 0 descriptor?? [ 193.811237][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.819492][ T1552] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.826691][ T1552] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.850452][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.859082][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.865932][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.873506][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.881967][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.888855][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.909949][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.917927][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.939017][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.958598][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.979813][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.999784][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.018983][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.305359][ T6025] input: syz1 as /devices/virtual/input/input40 [ 194.478879][ T373] itetech 0003:258A:6A88.0020: unbalanced collection at end of report description [ 194.491322][ T373] itetech: probe of 0003:258A:6A88.0020 failed with error -22 [ 194.650842][ T23] audit: type=1400 audit(1719914361.909:675): avc: denied { remount } for pid=6034 comm="syz.0.1961" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 194.680879][ T2233] usb 5-1: USB disconnect, device number 18 [ 195.000605][ T6037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.106372][ T6037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.133335][ T6037] attempt to access beyond end of device [ 195.133335][ T6037] loop2: rw=10241, want=45104, limit=40427 [ 195.168455][ T373] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 195.371038][ T5960] attempt to access beyond end of device [ 195.371038][ T5960] loop2: rw=2049, want=45112, limit=40427 [ 195.428428][ T373] usb 1-1: Using ep0 maxpacket: 8 [ 195.548290][ T373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.612749][ T23] audit: type=1400 audit(1719914362.869:676): avc: denied { write } for pid=6063 comm="syz.4.1972" path="socket:[64557]" dev="sockfs" ino=64557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.658657][ T373] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 195.672337][ T373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 195.688668][ T373] usb 1-1: SerialNumber: syz [ 195.696481][ T373] usb 1-1: config 0 descriptor?? [ 195.739060][ T373] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 195.746199][ T373] uvcvideo: No valid video chain found. [ 195.943415][ T1855] usb 1-1: USB disconnect, device number 23 [ 195.978284][ T373] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 196.257516][ T6082] input: syz1 as /devices/virtual/input/input42 [ 196.418874][ T373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.435149][ T373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.450722][ T373] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.472311][ T373] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 196.486567][ T373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.496356][ T373] usb 5-1: config 0 descriptor?? [ 196.520079][ T6092] EXT4-fs (loop3): Test dummy encryption mode enabled [ 196.530468][ T6092] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #15: comm syz.3.1982: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 196.541654][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'. [ 196.548838][ T6092] EXT4-fs (loop3): Remounting filesystem read-only [ 196.563739][ T6092] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.1982: couldn't read orphan inode 15 (err -117) [ 196.564202][ T23] audit: type=1400 audit(1719914363.819:677): avc: denied { relabelfrom } for pid=6096 comm="syz.1.1984" name="" dev="pipefs" ino=64671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 196.576095][ T6092] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,test_dummy_encryption,nombcache,jqfmt=vfsv0,lazytime,errors=remount-ro,auto_da_alloc, [ 196.598116][ T6097] SELinux: Context system_u: is not valid (left unmapped). [ 196.614933][ T6092] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 196.621006][ T23] audit: type=1400 audit(1719914363.889:678): avc: denied { relabelto } for pid=6096 comm="syz.1.1984" name="" dev="pipefs" ino=64671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 196.727257][ T6113] binder: 6111:6113 unknown command 0 [ 196.733495][ T6113] binder: 6111:6113 ioctl c0306201 20000480 returned -22 [ 197.048744][ T375] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 197.109368][ T373] prodikeys 0003:041E:2801.0021: unexpected long global item [ 197.113454][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 197.116959][ T373] prodikeys 0003:041E:2801.0021: hid parse failed [ 197.132158][ T373] prodikeys: probe of 0003:041E:2801.0021 failed with error -22 [ 197.194318][ T23] audit: type=1400 audit(1719914364.449:679): avc: denied { rename } for pid=6133 comm="syz.2.2000" name="file0" dev="incremental-fs" ino=64773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.219477][ T5960] ------------[ cut here ]------------ [ 197.224759][ T5960] WARNING: CPU: 1 PID: 5960 at fs/inode.c:302 drop_nlink+0xbb/0x100 [ 197.232548][ T5960] Modules linked in: [ 197.236288][ T5960] CPU: 1 PID: 5960 Comm: syz-executor Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 197.247483][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.257395][ T5960] RIP: 0010:drop_nlink+0xbb/0x100 [ 197.262237][ T5960] Code: 49 8b 1e 48 8d bb d0 04 00 00 be 08 00 00 00 e8 7b 9a f2 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 d5 e1 c2 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 197.281787][ T5960] RSP: 0018:ffff8881ed967c68 EFLAGS: 00010293 [ 197.287683][ T5960] RAX: ffffffff81a1572b RBX: 1ffff110391fe774 RCX: ffff8881e8facec0 [ 197.295701][ T5960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.303603][ T5960] RBP: 0000000000000000 R08: ffffffff81a156af R09: 0000000000000003 [ 197.311413][ T5960] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881c8ff3ba0 [ 197.319225][ T5960] R13: dffffc0000000000 R14: ffff8881c8ff3b58 R15: dffffc0000000000 [ 197.327045][ T5960] FS: 0000555555695500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 197.335801][ T5960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.342342][ T5960] CR2: 0000001b30619ff8 CR3: 00000001df832000 CR4: 00000000003406a0 [ 197.350155][ T5960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.357962][ T5960] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.365778][ T5960] Call Trace: [ 197.368997][ T5960] ? __warn+0x162/0x250 [ 197.372992][ T5960] ? report_bug+0x3a1/0x4e0 [ 197.377322][ T5960] ? drop_nlink+0xbb/0x100 [ 197.381578][ T5960] ? drop_nlink+0xbb/0x100 [ 197.385826][ T5960] ? do_invalid_op+0x6e/0x110 [ 197.390342][ T5960] ? invalid_op+0x1e/0x30 [ 197.394509][ T5960] ? drop_nlink+0x3f/0x100 [ 197.398756][ T5960] ? drop_nlink+0xbb/0x100 [ 197.403013][ T5960] ? drop_nlink+0xbb/0x100 [ 197.407263][ T5960] ? drop_nlink+0xbb/0x100 [ 197.411560][ T5960] shmem_rmdir+0x54/0x80 [ 197.415602][ T5960] vfs_rmdir+0x285/0x3c0 [ 197.419681][ T5960] incfs_kill_sb+0x105/0x200 [ 197.424114][ T5960] deactivate_locked_super+0xa8/0x110 [ 197.429421][ T5960] deactivate_super+0x1e2/0x2a0 [ 197.434110][ T5960] ? vfs_submount+0xb0/0xb0 [ 197.438439][ T5960] ? deactivate_locked_super+0x110/0x110 [ 197.443940][ T5960] ? fast_dput+0x7a/0x280 [ 197.448073][ T5960] cleanup_mnt+0x44e/0x500 [ 197.452361][ T5960] task_work_run+0x140/0x170 [ 197.456757][ T5960] exit_to_usermode_loop+0x190/0x1a0 [ 197.461962][ T5960] prepare_exit_to_usermode+0x199/0x200 [ 197.467344][ T5960] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 197.473069][ T5960] RIP: 0033:0x7fc35acfe247 [ 197.477322][ T5960] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 197.496760][ T5960] RSP: 002b:00007ffd7eda7398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 197.505003][ T5960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc35acfe247 [ 197.512839][ T5960] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7eda7450 [ 197.520634][ T5960] RBP: 00007ffd7eda7450 R08: 0000000000000000 R09: 0000000000000000 [ 197.528443][ T5960] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7eda8520 [ 197.536252][ T5960] R13: 00007fc35ad6a65d R14: 000000000003023e R15: 0000000000000006 [ 197.544068][ T5960] ---[ end trace 604cf2d16e154149 ]--- [ 197.552000][ T5960] ================================================================== [ 197.559893][ T5960] BUG: KASAN: null-ptr-deref in ihold+0x1b/0x50 [ 197.565957][ T5960] Write of size 4 at addr 0000000000000160 by task syz-executor/5960 [ 197.573849][ T5960] [ 197.576028][ T5960] CPU: 0 PID: 5960 Comm: syz-executor Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 197.587440][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.597326][ T5960] Call Trace: [ 197.600468][ T5960] dump_stack+0x1d8/0x241 [ 197.604621][ T5960] ? panic+0x89d/0x89d [ 197.608531][ T5960] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 197.614167][ T5960] ? _raw_spin_trylock_bh+0x190/0x190 [ 197.619378][ T5960] ? shmem_destroy_inode+0x5/0x10 [ 197.624236][ T5960] ? ihold+0x1b/0x50 [ 197.627965][ T5960] __kasan_report+0xe9/0x120 [ 197.632395][ T5960] ? ihold+0x1b/0x50 [ 197.636128][ T5960] kasan_report+0x30/0x60 [ 197.640381][ T5960] check_memory_region+0x272/0x280 [ 197.645411][ T5960] ihold+0x1b/0x50 [ 197.648971][ T5960] vfs_rmdir+0x1e0/0x3c0 [ 197.653052][ T5960] incfs_kill_sb+0x105/0x200 [ 197.657481][ T5960] deactivate_locked_super+0xa8/0x110 [ 197.662695][ T5960] deactivate_super+0x1e2/0x2a0 [ 197.667369][ T5960] ? vfs_submount+0xb0/0xb0 [ 197.671709][ T5960] ? deactivate_locked_super+0x110/0x110 [ 197.677183][ T5960] ? fast_dput+0x7a/0x280 [ 197.681343][ T5960] cleanup_mnt+0x44e/0x500 [ 197.685597][ T5960] task_work_run+0x140/0x170 [ 197.690026][ T5960] exit_to_usermode_loop+0x190/0x1a0 [ 197.695145][ T5960] prepare_exit_to_usermode+0x199/0x200 [ 197.700531][ T5960] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 197.706413][ T5960] RIP: 0033:0x7fc35acfe247 [ 197.710832][ T5960] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 197.730353][ T5960] RSP: 002b:00007ffd7eda7398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 197.738598][ T5960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc35acfe247 [ 197.746486][ T5960] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7eda7450 [ 197.754298][ T5960] RBP: 00007ffd7eda7450 R08: 0000000000000000 R09: 0000000000000000 [ 197.762116][ T5960] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7eda8520 [ 197.769922][ T5960] R13: 00007fc35ad6a65d R14: 000000000003023e R15: 0000000000000006 [ 197.777737][ T5960] ================================================================== [ 197.785628][ T5960] Disabling lock debugging due to kernel taint [ 197.808617][ T5960] BUG: kernel NULL pointer dereference, address: 0000000000000160 [ 197.816325][ T5960] #PF: supervisor write access in kernel mode [ 197.822221][ T5960] #PF: error_code(0x0002) - not-present page [ 197.828035][ T5960] PGD 1e9c1f067 P4D 1e9c1f067 PUD 0 [ 197.833162][ T5960] Oops: 0002 [#1] PREEMPT SMP KASAN [ 197.838198][ T5960] CPU: 0 PID: 5960 Comm: syz-executor Tainted: G B W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 197.849416][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.859292][ T5960] RIP: 0010:ihold+0x20/0x50 [ 197.863657][ T5960] Code: 0f 1f 84 00 00 00 00 00 66 90 55 53 48 89 fb e8 36 da c2 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 b5 92 f2 ff bd 01 00 00 00 0f c1 ab 60 01 00 00 ff c5 bf 02 00 00 00 89 ee e8 fa dc c2 ff [ 197.883065][ T5960] RSP: 0000:ffff8881ed967ca0 EFLAGS: 00010246 [ 197.888966][ T5960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881e8facec0 [ 197.896863][ T5960] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000ffffffff [ 197.904675][ T5960] RBP: 0000000000000001 R08: ffffffff813ae585 R09: 0000000000000003 [ 197.912486][ T5960] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000000 [ 197.920299][ T5960] R13: dffffc0000000000 R14: ffff8881de2dbb58 R15: 0000000000000000 [ 197.928116][ T5960] FS: 0000555555695500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 197.936877][ T5960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.943296][ T5960] CR2: 0000000000000160 CR3: 00000001df832000 CR4: 00000000003406b0 [ 197.951118][ T5960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.959005][ T5960] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.966813][ T5960] Call Trace: [ 197.969971][ T5960] ? __die+0xb4/0x100 [ 197.973767][ T5960] ? no_context+0xbda/0xe50 [ 197.978107][ T5960] ? schedule_preempt_disabled+0x20/0x20 [ 197.983581][ T5960] ? is_prefetch+0x4b0/0x4b0 [ 197.987995][ T5960] ? ihold+0x1b/0x50 [ 197.991730][ T5960] ? __do_page_fault+0xa7d/0xbb0 [ 197.996506][ T5960] ? __bad_area_nosemaphore+0xc0/0x460 [ 198.001802][ T5960] ? page_fault+0x2f/0x40 [ 198.006053][ T5960] ? check_panic_on_warn+0x55/0xa0 [ 198.011001][ T5960] ? ihold+0x20/0x50 [ 198.014730][ T5960] vfs_rmdir+0x1e0/0x3c0 [ 198.018814][ T5960] incfs_kill_sb+0x105/0x200 [ 198.023243][ T5960] deactivate_locked_super+0xa8/0x110 [ 198.028454][ T5960] deactivate_super+0x1e2/0x2a0 [ 198.033129][ T5960] ? vfs_submount+0xb0/0xb0 [ 198.037470][ T5960] ? deactivate_locked_super+0x110/0x110 [ 198.042939][ T5960] ? fast_dput+0x7a/0x280 [ 198.047105][ T5960] cleanup_mnt+0x44e/0x500 [ 198.051447][ T5960] task_work_run+0x140/0x170 [ 198.055871][ T5960] exit_to_usermode_loop+0x190/0x1a0 [ 198.060994][ T5960] prepare_exit_to_usermode+0x199/0x200 [ 198.066373][ T5960] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 198.072107][ T5960] RIP: 0033:0x7fc35acfe247 [ 198.076364][ T5960] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 198.095799][ T5960] RSP: 002b:00007ffd7eda7398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 198.104036][ T5960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc35acfe247 [ 198.111943][ T5960] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7eda7450 [ 198.119751][ T5960] RBP: 00007ffd7eda7450 R08: 0000000000000000 R09: 0000000000000000 [ 198.127566][ T5960] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7eda8520 [ 198.135379][ T5960] R13: 00007fc35ad6a65d R14: 000000000003023e R15: 0000000000000006 [ 198.143278][ T5960] Modules linked in: [ 198.147021][ T5960] CR2: 0000000000000160 [ 198.151006][ T5960] ---[ end trace 604cf2d16e15414a ]--- [ 198.156326][ T5960] RIP: 0010:ihold+0x20/0x50 [ 198.160639][ T5960] Code: 0f 1f 84 00 00 00 00 00 66 90 55 53 48 89 fb e8 36 da c2 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 b5 92 f2 ff bd 01 00 00 00 0f c1 ab 60 01 00 00 ff c5 bf 02 00 00 00 89 ee e8 fa dc c2 ff [ 198.180074][ T5960] RSP: 0000:ffff8881ed967ca0 EFLAGS: 00010246 [ 198.185977][ T5960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881e8facec0 [ 198.193789][ T5960] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000ffffffff [ 198.201598][ T5960] RBP: 0000000000000001 R08: ffffffff813ae585 R09: 0000000000000003 [ 198.209409][ T5960] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000000 [ 198.217307][ T5960] R13: dffffc0000000000 R14: ffff8881de2dbb58 R15: 0000000000000000 [ 198.225120][ T5960] FS: 0000555555695500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 198.233885][ T5960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.240310][ T5960] CR2: 0000000000000160 CR3: 00000001df832000 CR4: 00000000003406b0 [ 198.248124][ T5960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.255936][ T5960] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.263826][ T5960] Kernel panic - not syncing: Fatal exception [ 198.270004][ T5960] Kernel Offset: disabled [ 198.274130][ T5960] Rebooting in 86400 seconds..