last executing test programs: 5.994795001s ago: executing program 1 (id=222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 5.977734442s ago: executing program 1 (id=223): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pause() 5.112512791s ago: executing program 1 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 5.018859768s ago: executing program 1 (id=244): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000042, &(0x7f0000000400), 0x3, 0x4ea, &(0x7f00000006c0)="$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") mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 4.862291998s ago: executing program 2 (id=247): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000400), 0xfe, 0x43a, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) 4.758533915s ago: executing program 2 (id=248): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000280), 0x45, 0x779, &(0x7f00000007c0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x2400c000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) 4.602296216s ago: executing program 4 (id=249): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfe81) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0), 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x9}) 4.475123365s ago: executing program 4 (id=250): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x314, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, "8b"}, @main=@item_4={0x3, 0x0, 0x0, "521e3d3b"}]}}, 0x0}, 0x0) 4.262610509s ago: executing program 2 (id=251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100080001220300090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x5, 0x7, 0xfffc, 0xfff}}}, 0x0) 3.618785293s ago: executing program 1 (id=252): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r1}, 0x1) 2.986624726s ago: executing program 3 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.975156637s ago: executing program 3 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.9452356s ago: executing program 3 (id=259): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{}, {@noblock_validity}, {@resuid}, {@nobh}, {@lazytime}, {@usrquota}, {@mblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 2.78210945s ago: executing program 3 (id=261): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.757809452s ago: executing program 1 (id=262): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="000006"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x0, 0x0, 0x1, "93"}, 0x0, 0x0, 0x0, 0x0}) 2.583190704s ago: executing program 3 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x8140aecc, &(0x7f0000000340)) 2.387377058s ago: executing program 4 (id=265): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100080001220300090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x5, 0x7, 0xfffc, 0xfff}}}, 0x0) 2.258512266s ago: executing program 2 (id=266): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0xe, &(0x7f0000000580)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@debug}]}, 0x3, 0x43b, &(0x7f0000000e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000008180)='blkio.bfq.dequeue\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 2.072997769s ago: executing program 3 (id=264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x33) 2.044922751s ago: executing program 2 (id=267): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 1.838326165s ago: executing program 2 (id=268): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 806.351175ms ago: executing program 0 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$cgroup(0x0, 0x0, 0x0, 0x802c, 0x0) r0 = inotify_init1(0x0) epoll_create1(0x80000) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xb4f) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 774.286038ms ago: executing program 0 (id=278): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') 701.742873ms ago: executing program 0 (id=279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000480)='\v', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000200)=""/75, 0x4b}], 0x1}}], 0x1, 0x42, 0x0) 475.019718ms ago: executing program 0 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000004000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 440.14173ms ago: executing program 4 (id=282): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000008180)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) read$FUSE(r1, &(0x7f000000a180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0x0, r2, {0x6, 0x2, 0x6, 0x5, 0x7, 0x8, {0x0, 0x8, 0x2, 0xe3f, 0x6, 0x200, 0xffff, 0x700, 0x1, 0x1000, 0xfffffff9, r3, r4, 0x400, 0x3}}}, 0x90) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 423.545562ms ago: executing program 4 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b4266ef66ba420066b8e20066bad104ec0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 182.839698ms ago: executing program 4 (id=284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000040000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) 45.355477ms ago: executing program 0 (id=281): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000007000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 0 (id=285): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000f70085000000080000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0xbae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="610346"]}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. [ 20.067635][ T28] audit: type=1400 audit(1726499378.878:66): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.068708][ T280] cgroup: Unknown subsys name 'net' [ 20.090479][ T28] audit: type=1400 audit(1726499378.878:67): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.118126][ T28] audit: type=1400 audit(1726499378.908:68): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.118318][ T280] cgroup: Unknown subsys name 'devices' [ 20.227471][ T280] cgroup: Unknown subsys name 'hugetlb' [ 20.232910][ T280] cgroup: Unknown subsys name 'rlimit' [ 20.332360][ T28] audit: type=1400 audit(1726499379.138:69): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.347749][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.355695][ T28] audit: type=1400 audit(1726499379.138:70): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.387861][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.388420][ T28] audit: type=1400 audit(1726499379.138:71): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.420236][ T28] audit: type=1400 audit(1726499379.178:72): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.445742][ T28] audit: type=1400 audit(1726499379.178:73): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.471254][ T28] audit: type=1400 audit(1726499379.198:74): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.497157][ T28] audit: type=1400 audit(1726499379.198:75): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.995729][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.002672][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.010147][ T291] device bridge_slave_0 entered promiscuous mode [ 21.026946][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.033895][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.041165][ T291] device bridge_slave_1 entered promiscuous mode [ 21.089649][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.097074][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.104404][ T293] device bridge_slave_0 entered promiscuous mode [ 21.114550][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.121864][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.129103][ T290] device bridge_slave_0 entered promiscuous mode [ 21.139030][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.145934][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.153018][ T293] device bridge_slave_1 entered promiscuous mode [ 21.163113][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.170358][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.178383][ T290] device bridge_slave_1 entered promiscuous mode [ 21.205218][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.212149][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.219670][ T292] device bridge_slave_0 entered promiscuous mode [ 21.239588][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.246451][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.253660][ T292] device bridge_slave_1 entered promiscuous mode [ 21.266767][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.274133][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.281509][ T294] device bridge_slave_0 entered promiscuous mode [ 21.290537][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.297749][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.305220][ T294] device bridge_slave_1 entered promiscuous mode [ 21.488382][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.495247][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.511932][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.519964][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.527128][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.534074][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.543975][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.551015][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.558202][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.564967][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.577932][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.584955][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.592094][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.598990][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.607964][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.614824][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.622168][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.629447][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.674884][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.682685][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.690822][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.698081][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.705353][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.712762][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.720639][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.728295][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.735368][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.743681][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.750933][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.775175][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.783355][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.791642][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.798666][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.826429][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.834035][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.841849][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.849718][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.857706][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.864527][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.871902][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.879878][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.886861][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.894003][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.902191][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.909310][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.916666][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.924873][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.931830][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.939003][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.946727][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.954683][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.961628][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.969138][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.977555][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.984560][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.992270][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.000653][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.007596][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.014913][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.023025][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.029952][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.045749][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.053920][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.060799][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.068109][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.076385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.089965][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.098064][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.110023][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.118269][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.135819][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.143802][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.152517][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.160560][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.168685][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.177058][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.203242][ T292] device veth0_vlan entered promiscuous mode [ 22.210535][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.218525][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.225861][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.233305][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.242263][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.250525][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.258438][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.266207][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.274154][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.282603][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.290756][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.298987][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.307538][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.315877][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.323671][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.333549][ T294] device veth0_vlan entered promiscuous mode [ 22.346327][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.354001][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.361840][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.369696][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.377524][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.385785][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.393934][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.402106][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.410139][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.417601][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.424876][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.432235][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.449896][ T290] device veth0_vlan entered promiscuous mode [ 22.456719][ T293] device veth0_vlan entered promiscuous mode [ 22.469765][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.477454][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.485304][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.493578][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.507722][ T292] device veth1_macvtap entered promiscuous mode [ 22.518357][ T291] device veth0_vlan entered promiscuous mode [ 22.527790][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.536055][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.544369][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.552671][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.560128][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.567957][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.575735][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.585840][ T294] device veth1_macvtap entered promiscuous mode [ 22.592878][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.600342][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.611944][ T290] device veth1_macvtap entered promiscuous mode [ 22.623764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.632396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.641070][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.649860][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.658408][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.667228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.685259][ T293] device veth1_macvtap entered promiscuous mode [ 22.698074][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.707298][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.716486][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.724929][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.733397][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.741514][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.758627][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.767239][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.775442][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.793977][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.803396][ T291] device veth1_macvtap entered promiscuous mode [ 22.815642][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.823486][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.832479][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.841670][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.849977][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.892301][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.900607][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.909632][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.918310][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.929644][ T321] Illegal XDP return value 1439324774 on prog (id 2) dev syz_tun, expect packet loss! [ 23.007564][ T338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 23.111628][ T353] loop4: detected capacity change from 0 to 2048 [ 23.166304][ T353] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 23.198252][ T353] syz.4.16[353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.198333][ T353] syz.4.16[353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.238654][ T291] EXT4-fs (loop4): unmounting filesystem. [ 23.338459][ T371] loop4: detected capacity change from 0 to 512 [ 23.350941][ T371] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.23: inode #1: comm syz.4.23: iget: illegal inode # [ 23.364024][ T371] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.23: error while reading EA inode 1 err=-117 [ 23.376094][ T367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21'. [ 23.394938][ T371] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 23.410654][ T371] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.23: inode #1: comm syz.4.23: iget: illegal inode # [ 23.431148][ T371] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.23: error while reading EA inode 1 err=-117 [ 23.442900][ T376] input: syz1 as /devices/virtual/input/input4 [ 23.454581][ T371] EXT4-fs (loop4): 1 orphan inode deleted [ 23.462348][ T371] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 23.514845][ T291] EXT4-fs (loop4): unmounting filesystem. [ 23.556330][ T399] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.618336][ T404] loop3: detected capacity change from 0 to 2048 [ 23.662499][ T404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 23.703715][ T294] EXT4-fs (loop3): unmounting filesystem. [ 23.835561][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.973882][ T438] loop0: detected capacity change from 0 to 16 [ 23.995394][ T438] erofs: (device loop0): mounted with root inode @ nid 36. [ 24.007995][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 24.029528][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.030159][ T438] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 24.037043][ T456] block device autoloading is deprecated and will be removed. [ 24.075582][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 24.100806][ T461] loop1: detected capacity change from 0 to 2048 [ 24.151128][ T461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 24.195612][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.236027][ T461] support for cryptoloop has been removed. Use dm-crypt instead. [ 24.336808][ T293] EXT4-fs (loop1): unmounting filesystem. [ 24.346984][ T293] syz-executor (293) used greatest stack depth: 21200 bytes left [ 24.375617][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.384711][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.393252][ T6] usb 3-1: Product: syz [ 24.397472][ T6] usb 3-1: Manufacturer: syz [ 24.402150][ T6] usb 3-1: SerialNumber: syz [ 24.425607][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.436797][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.447530][ T24] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 24.456536][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.470971][ T24] usb 4-1: config 0 descriptor?? [ 24.487883][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.494928][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.502319][ T481] device bridge_slave_0 entered promiscuous mode [ 24.510192][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.517836][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.518532][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.527222][ T481] device bridge_slave_1 entered promiscuous mode [ 24.573836][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.580885][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.588121][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.595209][ T481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.615427][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.622875][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.630825][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.648537][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.656759][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.663672][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.671121][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.679720][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.686621][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.693750][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.701806][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.719339][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.730898][ T481] device veth0_vlan entered promiscuous mode [ 24.737597][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.745466][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.752933][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.764438][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.773719][ T481] device veth1_macvtap entered promiscuous mode [ 24.779924][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 24.784655][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.795819][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.836736][ T491] Invalid ELF header magic: != ELF [ 24.909050][ T503] loop1: detected capacity change from 0 to 1024 [ 24.916090][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.919398][ T503] EXT4-fs: Ignoring removed orlov option [ 24.927573][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.932729][ T503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 24.948527][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.963093][ T39] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 24.967235][ T503] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 24.972217][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.989829][ T24] hid-steam 0003:28DE:1142.0001: item fetching failed at offset 4/5 [ 25.000005][ T24] hid-steam 0003:28DE:1142.0001: steam_probe:parse of hid interface failed [ 25.009296][ T24] hid-steam: probe of 0003:28DE:1142.0001 failed with error -22 [ 25.017187][ T39] usb 1-1: config 0 descriptor?? [ 25.020422][ T481] EXT4-fs (loop1): unmounting filesystem. [ 25.089272][ T518] syz.1.83 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 25.116812][ T520] loop4: detected capacity change from 0 to 512 [ 25.123210][ T520] EXT4-fs: Ignoring removed bh option [ 25.129093][ T520] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 25.145215][ T520] EXT4-fs (loop4): 1 truncate cleaned up [ 25.151335][ T520] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 25.162796][ T520] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 25.178704][ T291] EXT4-fs (loop4): unmounting filesystem. [ 25.206220][ T482] usb 4-1: USB disconnect, device number 2 [ 25.215950][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 25.215960][ T28] audit: type=1400 audit(1726499384.028:161): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.245289][ T28] audit: type=1400 audit(1726499384.028:162): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.264412][ T533] loop4: detected capacity change from 0 to 2048 [ 25.270722][ T28] audit: type=1400 audit(1726499384.028:163): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.275859][ T533] EXT4-fs: Ignoring removed orlov option [ 25.317106][ T533] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.334292][ T28] audit: type=1400 audit(1726499384.138:164): avc: denied { write } for pid=532 comm="syz.4.89" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.418865][ T291] EXT4-fs (loop4): unmounting filesystem. [ 25.436189][ T10] device bridge_slave_1 left promiscuous mode [ 25.442322][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.449861][ T10] device bridge_slave_0 left promiscuous mode [ 25.455968][ T295] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.462672][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.471418][ T10] device veth1_macvtap left promiscuous mode [ 25.477914][ T10] device veth0_vlan left promiscuous mode [ 25.535682][ T6] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 25.537069][ T39] koneplus 0003:1E7D:2E22.0002: item fetching failed at offset 0/2 [ 25.542984][ T6] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 25.554339][ T39] koneplus 0003:1E7D:2E22.0002: parse failed [ 25.561759][ T39] koneplus: probe of 0003:1E7D:2E22.0002 failed with error -22 [ 25.616169][ T28] audit: type=1400 audit(1726499384.428:165): avc: denied { ioctl } for pid=545 comm="syz.4.93" path="socket:[16454]" dev="sockfs" ino=16454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.652874][ T28] audit: type=1400 audit(1726499384.458:166): avc: denied { create } for pid=547 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 25.723211][ T28] audit: type=1400 audit(1726499384.528:167): avc: denied { read write } for pid=553 comm="syz.3.97" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.755734][ T28] audit: type=1400 audit(1726499384.528:168): avc: denied { open } for pid=553 comm="syz.3.97" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.787554][ T6] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 25.816294][ T6] usb 3-1: USB disconnect, device number 2 [ 25.826808][ T6] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 25.838278][ T295] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 25.851516][ T24] usb 1-1: USB disconnect, device number 2 [ 25.856366][ T295] usb 2-1: config 0 has no interface number 0 [ 25.865638][ T28] audit: type=1400 audit(1726499384.628:169): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.902670][ T295] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.913932][ T295] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.926202][ T28] audit: type=1400 audit(1726499384.628:170): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 25.992516][ T572] loop4: detected capacity change from 0 to 512 [ 26.017765][ T572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 26.026851][ T295] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 26.036058][ T572] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 26.046047][ T295] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 26.053864][ T295] usb 2-1: Manufacturer: syz [ 26.070809][ T295] usb 2-1: config 0 descriptor?? [ 26.091117][ T291] EXT4-fs (loop4): unmounting filesystem. [ 26.185577][ T482] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.324592][ T6] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 26.332138][ T6] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 26.339964][ T6] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 26.384918][ T609] loop0: detected capacity change from 0 to 512 [ 26.391770][ T609] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 26.427693][ T615] 9pnet: p9_errstr2errno: server reported unknown error Çi6 [ 26.435673][ T482] usb 4-1: Using ep0 maxpacket: 16 [ 26.446724][ T617] devtmpfs: Unknown parameter 'di¤ËÊ' [ 26.469849][ T559] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 26.558851][ T295] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0004/input/input5 [ 26.571401][ T295] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 26.595651][ T482] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.606926][ T482] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 26.617205][ T482] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 26.631005][ T482] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.640516][ T482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.665698][ T562] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 26.686050][ T482] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 26.761036][ T39] usb 2-1: USB disconnect, device number 2 [ 26.895968][ T482] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 27.098391][ T295] usb 4-1: USB disconnect, device number 3 [ 27.245579][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.279910][ T634] syz.1.119[634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.279959][ T634] syz.1.119[634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.432842][ T636] loop1: detected capacity change from 0 to 40427 [ 27.468940][ T636] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 27.477020][ T636] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 27.486357][ T636] F2FS-fs (loop1): invalid crc value [ 27.511790][ T636] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.558521][ T636] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 27.566131][ T636] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 27.574273][ T654] loop2: detected capacity change from 0 to 128 [ 27.588505][ T654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.597221][ T654] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 27.633052][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 27.643789][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 27.669287][ T290] EXT4-fs (loop2): unmounting filesystem. [ 27.686407][ T39] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 27.696642][ T39] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 27.785635][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.800479][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 27.817252][ T39] usb 5-1: SerialNumber: syz [ 27.845631][ T632] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 27.897789][ T690] loop3: detected capacity change from 0 to 1024 [ 27.907402][ T690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.930825][ T294] EXT4-fs (loop3): unmounting filesystem. [ 28.067818][ T632] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 28.095425][ T707] loop3: detected capacity change from 0 to 256 [ 28.102009][ T482] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.102876][ T707] exfat: Deprecated parameter 'utf8' [ 28.118121][ T707] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 28.215552][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.229229][ T713] loop0: detected capacity change from 0 to 256 [ 28.247192][ T713] exfat: Deprecated parameter 'utf8' [ 28.252411][ T713] exfat: Deprecated parameter 'utf8' [ 28.260289][ T713] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x811ad48d, utbl_chksum : 0xe619d30d) [ 28.335378][ T709] loop3: detected capacity change from 0 to 40427 [ 28.346569][ T709] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 28.353370][ T709] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 28.361732][ T482] usb 3-1: Using ep0 maxpacket: 8 [ 28.370008][ T709] F2FS-fs (loop3): invalid crc value [ 28.372033][ T723] 9pnet: p9_errstr2errno: server reported unknown error ™^Pœ£— [ 28.380806][ T709] F2FS-fs (loop3): Found nat_bits in checkpoint [ 28.428828][ T729] loop0: detected capacity change from 0 to 4096 [ 28.429683][ T709] F2FS-fs (loop3): Start checkpoint disabled! [ 28.442990][ T709] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 28.443595][ T729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.450423][ T709] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 28.481248][ T729] fs-verity: sha256 using implementation "sha256-avx2" [ 28.488374][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 28.489495][ T729] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.158: Failed to acquire dquot type 1 [ 28.508184][ T39] cdc_ether 5-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.4-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 28.520841][ T482] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 28.530744][ T482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.531108][ T292] EXT4-fs (loop0): unmounting filesystem. [ 28.540074][ T482] usb 3-1: config 0 descriptor?? [ 28.624633][ T741] syz.0.160[741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.624707][ T741] syz.0.160[741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.711052][ T487] usb 5-1: USB disconnect, device number 2 [ 28.730248][ T487] cdc_ether 5-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.4-1, Mobile Broadband Network Device [ 28.785794][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 28.794841][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.811359][ T24] usb 2-1: Product: syz [ 28.822552][ T778] loop0: detected capacity change from 0 to 1024 [ 28.829833][ T24] usb 2-1: Manufacturer: syz [ 28.834668][ T24] usb 2-1: SerialNumber: syz [ 28.840278][ T24] usb 2-1: config 0 descriptor?? [ 28.849285][ T778] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.892481][ T292] EXT4-fs (loop0): unmounting filesystem. [ 29.005542][ T295] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.201018][ T793] loop0: detected capacity change from 0 to 8192 [ 29.246230][ T295] usb 4-1: Using ep0 maxpacket: 16 [ 29.413045][ T295] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 29.515572][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.565687][ T312] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.585643][ T295] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 29.595008][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.605866][ T295] usb 4-1: Product: syz [ 29.610244][ T295] usb 4-1: Manufacturer: syz [ 29.616059][ T295] usb 4-1: SerialNumber: syz [ 29.629008][ T295] usb 4-1: config 0 descriptor?? [ 29.676193][ T295] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 29.683840][ T295] usb 4-1: Detected FT232R [ 29.704716][ T811] loop1: detected capacity change from 0 to 512 [ 29.711481][ T811] ======================================================= [ 29.711481][ T811] WARNING: The mand mount option has been deprecated and [ 29.711481][ T811] and is ignored by this kernel. Remove the mand [ 29.711481][ T811] option from the mount to silence this warning. [ 29.711481][ T811] ======================================================= [ 29.747270][ T811] EXT4-fs: Ignoring removed bh option [ 29.752726][ T811] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 29.815600][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 29.885647][ T295] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 29.895578][ T482] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 29.905948][ T482] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 29.910579][ T813] loop1: detected capacity change from 0 to 40427 [ 29.916616][ T482] asix: probe of 3-1:0.0 failed with error -71 [ 29.917581][ T482] usb 3-1: USB disconnect, device number 3 [ 29.936045][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.938584][ T813] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.946388][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 29.962078][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.973317][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.985265][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.989851][ T813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 29.993795][ T312] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 30.010134][ T6] usb 5-1: config 0 descriptor?? [ 30.015977][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.028704][ T312] usb 1-1: config 0 descriptor?? [ 30.033985][ T481] syz-executor: attempt to access beyond end of device [ 30.033985][ T481] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.066764][ T6] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 30.083917][ T6] usb 5-1: No valid video chain found. [ 30.115367][ T821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 30.147265][ T295] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 30.273379][ T6] usb 5-1: USB disconnect, device number 3 [ 30.348981][ T295] usb 4-1: USB disconnect, device number 4 [ 30.356972][ T295] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 30.367232][ T295] ftdi_sio 4-1:0.0: device disconnected [ 30.496199][ T312] greenasia 0003:0E8F:0012.0005: item fetching failed at offset 1/3 [ 30.504250][ T312] greenasia 0003:0E8F:0012.0005: parse failed [ 30.510365][ T312] greenasia: probe of 0003:0E8F:0012.0005 failed with error -22 [ 30.704430][ T313] usb 1-1: USB disconnect, device number 3 [ 30.786933][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 30.786949][ T28] audit: type=1400 audit(1726499389.598:229): avc: denied { ioctl } for pid=845 comm="syz.4.194" path="/39/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.786960][ T846] Source file dentry negative [ 30.841730][ T850] loop2: detected capacity change from 0 to 1024 [ 30.858894][ T850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.894063][ T290] EXT4-fs (loop2): unmounting filesystem. [ 30.907376][ T28] audit: type=1400 audit(1726499389.718:230): avc: denied { read } for pid=858 comm="syz.3.198" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.932316][ T28] audit: type=1400 audit(1726499389.718:231): avc: denied { open } for pid=858 comm="syz.3.198" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.957053][ T28] audit: type=1400 audit(1726499389.718:232): avc: denied { ioctl } for pid=858 comm="syz.3.198" path="/dev/ppp" dev="devtmpfs" ino=138 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.036027][ T28] audit: type=1400 audit(1726499389.848:233): avc: denied { bind } for pid=865 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.056500][ T28] audit: type=1400 audit(1726499389.848:234): avc: denied { listen } for pid=865 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.076169][ T28] audit: type=1400 audit(1726499389.848:235): avc: denied { connect } for pid=865 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.096872][ T28] audit: type=1400 audit(1726499389.848:236): avc: denied { accept } for pid=865 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.155566][ T24] rtl8150 2-1:0.0: couldn't reset the device [ 31.161963][ T24] rtl8150: probe of 2-1:0.0 failed with error -5 [ 31.169769][ T24] usb 2-1: USB disconnect, device number 3 [ 31.228979][ T880] loop0: detected capacity change from 0 to 256 [ 31.247646][ T28] audit: type=1400 audit(1726499390.058:237): avc: denied { remove_name } for pid=879 comm="syz.0.207" name="file1" dev="loop0" ino=1048606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.271130][ T28] audit: type=1400 audit(1726499390.058:238): avc: denied { rename } for pid=879 comm="syz.0.207" name="file1" dev="loop0" ino=1048606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.294127][ T313] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 31.327031][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.334387][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.341986][ T312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.349733][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.357405][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.364899][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.372625][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.380150][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.387822][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.395307][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.403291][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.411729][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.419357][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.426716][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.433852][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.441250][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.449029][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.456477][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.463609][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.471054][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.478501][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.485810][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.493482][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.501897][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.510408][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.518589][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.526795][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.534106][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.541511][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.545592][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.549202][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.564151][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.572212][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.580529][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.588400][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.595633][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.595734][ T487] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.603313][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.611108][ T482] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.619158][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.636006][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.643602][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.651413][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.658850][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.666136][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.674236][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.675881][ T313] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 31.682436][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.693184][ T313] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 31.701932][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.714863][ T313] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 31.719309][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.728013][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.739211][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.755171][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.766169][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.774977][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.782650][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.796247][ T312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.805370][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.814105][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 31.822194][ T295] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 [ 31.832170][ T312] usb 4-1: config 0 descriptor?? [ 31.945635][ T24] usb 2-1: config 0 has no interfaces? [ 32.005649][ T487] usb 3-1: config 0 has no interfaces? [ 32.010985][ T487] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 32.020270][ T482] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 32.028485][ T482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 32.039497][ T487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.047346][ T482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 32.058724][ T482] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.071820][ T487] usb 3-1: config 0 descriptor?? [ 32.076774][ T482] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.085856][ T482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.094596][ T482] usb 1-1: config 0 descriptor?? [ 32.115722][ T886] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 32.115773][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 32.132758][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.141266][ T24] usb 2-1: Product: syz [ 32.145247][ T24] usb 2-1: Manufacturer: syz [ 32.149869][ T24] usb 2-1: SerialNumber: syz [ 32.154745][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 32.225663][ T313] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 32.233576][ T313] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input6 [ 32.242948][ T313] input: failed to attach handler kbd to device input6, error: -5 [ 32.254075][ T313] usb 5-1: USB disconnect, device number 4 [ 32.326748][ T312] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 32.386489][ T312] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 32.391966][ T487] usb 3-1: USB disconnect, device number 4 [ 32.411202][ T829] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 32.435661][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 32.443839][ T24] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 32.545338][ T312] usb 4-1: USB disconnect, device number 5 [ 32.576226][ T482] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 32.585313][ T482] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 32.596013][ T482] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 32.856167][ T6] usb 1-1: USB disconnect, device number 4 [ 33.045563][ T312] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 33.088791][ T913] loop3: detected capacity change from 0 to 512 [ 33.117343][ T913] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 33.126281][ T913] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 33.141978][ T294] EXT4-fs (loop3): unmounting filesystem. [ 33.193830][ T924] loop3: detected capacity change from 0 to 1024 [ 33.203318][ T924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 33.222172][ T294] EXT4-fs (loop3): unmounting filesystem. [ 33.228019][ T294] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 33.237706][ T294] EXT4-fs error (device loop3): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 33.249218][ T294] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 33.259340][ T294] EXT4-fs error (device loop3): ext4_quota_off:7053: inode #4: comm syz-executor: mark_inode_dirty error [ 33.344945][ T929] loop3: detected capacity change from 0 to 512 [ 33.356202][ T929] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.227: attempt to clear invalid blocks 2 len 1 [ 33.369584][ T929] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 33.385268][ T929] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.227: invalid indirect mapped block 1819239214 (level 0) [ 33.399735][ T929] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.227: invalid indirect mapped block 1819239214 (level 1) [ 33.415977][ T929] EXT4-fs (loop3): 1 truncate cleaned up [ 33.421465][ T929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 33.432454][ T929] EXT4-fs (loop3): shut down requested (2) [ 33.441866][ T294] EXT4-fs (loop3): unmounting filesystem. [ 33.445762][ T312] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 33.635608][ T312] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 33.649416][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.665183][ T312] usb 5-1: Product: syz [ 33.673781][ T312] usb 5-1: Manufacturer: syz [ 33.683661][ T312] usb 5-1: SerialNumber: syz [ 33.695062][ T312] usb 5-1: config 0 descriptor?? [ 33.715567][ T892] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 33.957594][ T43] device bridge_slave_1 left promiscuous mode [ 33.965092][ T312] usb 5-1: USB disconnect, device number 5 [ 33.967552][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.001556][ T528] udevd[528]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.017713][ T951] loop2: detected capacity change from 0 to 128 [ 34.030197][ T43] device bridge_slave_0 left promiscuous mode [ 34.036208][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.064735][ T951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.074607][ T951] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038 (0x7fffffff) [ 34.084916][ T43] device veth1_macvtap left promiscuous mode [ 34.096034][ T43] device veth0_vlan left promiscuous mode [ 34.141206][ T290] EXT4-fs (loop2): unmounting filesystem. [ 34.209834][ T962] loop2: detected capacity change from 0 to 512 [ 34.218126][ T962] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.247: casefold flag without casefold feature [ 34.231629][ T962] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.247: missing EA_INODE flag [ 34.252236][ T962] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.247: error while reading EA inode 12 err=-117 [ 34.265682][ T962] EXT4-fs (loop2): 1 orphan inode deleted [ 34.274782][ T962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.312926][ T290] EXT4-fs (loop2): unmounting filesystem. [ 34.338809][ T966] loop2: detected capacity change from 0 to 2048 [ 34.346995][ T952] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.353978][ T952] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.361586][ T952] device bridge_slave_0 entered promiscuous mode [ 34.362326][ T966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.375852][ T952] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.383212][ T952] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.391252][ T952] device bridge_slave_1 entered promiscuous mode [ 34.413677][ T956] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.420780][ T956] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.428512][ T956] device bridge_slave_0 entered promiscuous mode [ 34.450669][ T956] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.461905][ T956] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.471407][ T956] device bridge_slave_1 entered promiscuous mode [ 34.473533][ T976] loop4: detected capacity change from 0 to 512 [ 34.508995][ T976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.520607][ T976] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 34.545001][ T954] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.554143][ T954] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.562270][ T954] device bridge_slave_0 entered promiscuous mode [ 34.596069][ T291] EXT4-fs (loop4): unmounting filesystem. [ 34.603429][ T954] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.610150][ T974] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.610741][ T954] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.628220][ T974] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 34.638558][ T954] device bridge_slave_1 entered promiscuous mode [ 34.647909][ T974] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.647909][ T974] [ 34.665533][ T974] EXT4-fs (loop2): Total free blocks count 0 [ 34.678252][ T974] EXT4-fs (loop2): Free/Dirty block details [ 34.684952][ T974] EXT4-fs (loop2): free_blocks=2415919104 [ 34.690854][ T974] EXT4-fs (loop2): dirty_blocks=8192 [ 34.696562][ T974] EXT4-fs (loop2): Block reservation details [ 34.702635][ T974] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 34.713551][ T982] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 2048 with error 28 [ 34.857473][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.864756][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.872641][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.880895][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.891096][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.897978][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.905281][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.913356][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.921334][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.928951][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.937339][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.945387][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.945580][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 34.952459][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.977314][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.985863][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.994620][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.001564][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.009499][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.036437][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.045128][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.053654][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.062362][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.069692][ T482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.077212][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.085347][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.093391][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.117483][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.125448][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.133105][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.140464][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.149545][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.158069][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.165203][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.176652][ T956] device veth0_vlan entered promiscuous mode [ 35.189612][ T952] device veth0_vlan entered promiscuous mode [ 35.196862][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.204715][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.212779][ T312] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.220907][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.228833][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.236231][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.244193][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.251664][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.259015][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.268054][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.274974][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.290291][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.298611][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.306950][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.316328][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.327744][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.337698][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.338634][ T956] device veth1_macvtap entered promiscuous mode [ 35.350507][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 35.367279][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.377702][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.378624][ T24] usb 5-1: config 0 descriptor?? [ 35.386863][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.398999][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.414538][ T954] device veth0_vlan entered promiscuous mode [ 35.424208][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.432937][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.440296][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.457196][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.467404][ T952] device veth1_macvtap entered promiscuous mode [ 35.476078][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 35.482501][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.490912][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.499380][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.507671][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.523378][ T954] device veth1_macvtap entered promiscuous mode [ 35.532312][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.540910][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.548987][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.564314][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.573557][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.582117][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.591152][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.601985][ T43] device bridge_slave_1 left promiscuous mode [ 35.608740][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.615680][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 35.627952][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 35.628707][ T43] device bridge_slave_0 left promiscuous mode [ 35.640186][ T312] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 35.655401][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.655933][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.671803][ T312] usb 3-1: config 0 descriptor?? [ 35.677074][ T43] device bridge_slave_1 left promiscuous mode [ 35.683136][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.690632][ T43] device bridge_slave_0 left promiscuous mode [ 35.696747][ T987] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.704036][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.712274][ T43] device veth1_macvtap left promiscuous mode [ 35.718754][ T43] device veth0_vlan left promiscuous mode [ 35.724503][ T43] device veth1_macvtap left promiscuous mode [ 35.726075][ T312] hub 3-1:0.0: USB hub found [ 35.733538][ T43] device veth0_vlan left promiscuous mode [ 35.803430][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 35.803444][ T28] audit: type=1400 audit(1726499394.608:281): avc: denied { mount } for pid=998 comm="syz.0.255" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.867261][ T24] wacom 0003:056A:0314.0009: unknown main item tag 0x0 [ 35.877721][ T24] wacom 0003:056A:0314.0009: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 35.892121][ T24] wacom 0003:056A:0314.0009: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.4-1/input0 [ 35.910612][ T24] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0314.0009/input/input9 [ 35.923868][ T28] audit: type=1400 audit(1726499394.738:282): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=478 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.956131][ T28] audit: type=1400 audit(1726499394.738:283): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=478 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.981114][ T28] audit: type=1400 audit(1726499394.738:284): avc: denied { unmount } for pid=952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.002091][ T28] audit: type=1400 audit(1726499394.798:285): avc: denied { unmount } for pid=954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.042898][ T28] audit: type=1400 audit(1726499394.818:286): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=478 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.043067][ T1001] loop0: detected capacity change from 0 to 2048 [ 36.074006][ T312] hub 3-1:0.0: 3 ports detected [ 36.098644][ T1001] Alternate GPT is invalid, using primary GPT. [ 36.112092][ T1001] loop0: p2 p3 p7 [ 36.142985][ T19] usb 5-1: USB disconnect, device number 6 [ 36.160048][ T1009] loop3: detected capacity change from 0 to 1024 [ 36.167244][ T1009] EXT4-fs: Ignoring removed nobh option [ 36.176274][ T1009] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.191844][ T1009] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.192745][ T528] udevd[528]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 36.202425][ T28] audit: type=1400 audit(1726499395.018:287): avc: denied { mount } for pid=1008 comm="syz.3.259" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.212094][ T317] udevd[317]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 36.237370][ T559] udevd[559]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 36.276338][ T312] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 36.281665][ T954] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 48: comm syz-executor: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.297442][ T312] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 36.317771][ T954] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 36.327317][ T954] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 36.339590][ T954] EXT4-fs (loop3): unmounting filesystem. [ 36.345237][ T954] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 36.354781][ T954] EXT4-fs error (device loop3): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 36.366099][ T954] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 36.375411][ T954] EXT4-fs error (device loop3): ext4_quota_off:7053: inode #4: comm syz-executor: mark_inode_dirty error [ 36.425774][ T312] usbhid 3-1:0.0: can't add hid device: -71 [ 36.431549][ T312] usbhid: probe of 3-1:0.0 failed with error -71 [ 36.455580][ T313] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.471500][ T312] usb 3-1: USB disconnect, device number 5 [ 36.545664][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.552819][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.560907][ T1016] device bridge_slave_0 entered promiscuous mode [ 36.571040][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.578047][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.585272][ T1016] device bridge_slave_1 entered promiscuous mode [ 36.591655][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.647177][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.654655][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.668226][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.682158][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.690548][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.697403][ T487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.706862][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.717359][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.725757][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.733881][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.740862][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.756346][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.764434][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.772478][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.784243][ T1016] device veth0_vlan entered promiscuous mode [ 36.790652][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.799219][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.807285][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.815757][ T313] usb 1-1: config 0 has an invalid interface number: 226 but max is 0 [ 36.822576][ T1024] loop2: detected capacity change from 0 to 512 [ 36.823905][ T313] usb 1-1: config 0 has no interface number 0 [ 36.843819][ T1024] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 36.846520][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.863342][ T1024] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 36.864921][ T1016] device veth1_macvtap entered promiscuous mode [ 36.873986][ T1024] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.266: Corrupt directory, running e2fsck is recommended [ 36.894093][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.894299][ T1024] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 36.903315][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.919039][ T1024] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.266: corrupted in-inode xattr [ 36.931396][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 36.938066][ T1024] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.266: couldn't read orphan inode 15 (err -117) [ 36.949847][ T1024] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.955774][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 36.959439][ T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 36.969220][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 37.005636][ T313] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=db.47 [ 37.005682][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.005699][ T313] usb 1-1: Product: syz [ 37.005711][ T313] usb 1-1: Manufacturer: syz [ 37.005722][ T313] usb 1-1: SerialNumber: syz [ 37.009870][ T1024] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.009899][ T1024] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 37.009913][ T1024] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.266: Corrupt directory, running e2fsck is recommended [ 37.011164][ T1024] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.011191][ T1024] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 37.011205][ T1024] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.266: Corrupt directory, running e2fsck is recommended [ 37.012412][ T313] usb 1-1: config 0 descriptor?? [ 37.012767][ T1024] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.012788][ T1024] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 37.012802][ T1024] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.266: Corrupt directory, running e2fsck is recommended [ 37.013991][ T1024] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.034310][ T290] EXT4-fs (loop2): unmounting filesystem. [ 37.039839][ T1027] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 37.181992][ T43] device bridge_slave_1 left promiscuous mode [ 37.182293][ T313] hub 1-1:0.226: bad descriptor, ignoring hub [ 37.189440][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.194880][ T313] hub: probe of 1-1:0.226 failed with error -5 [ 37.207492][ T43] device bridge_slave_0 left promiscuous mode [ 37.207567][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.207711][ T313] usbhid 1-1:0.226: couldn't find an input interrupt endpoint [ 37.219860][ T28] audit: type=1400 audit(1726499396.028:288): avc: denied { create } for pid=1030 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.221259][ T28] audit: type=1400 audit(1726499396.028:289): avc: denied { write } for pid=1030 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.221382][ T28] audit: type=1400 audit(1726499396.028:290): avc: denied { nlmsg_write } for pid=1030 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.224327][ T43] device veth1_macvtap left promiscuous mode [ 37.224380][ T43] device veth0_vlan left promiscuous mode [ 37.298038][ T24] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 37.335527][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 37.337192][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.350232][ T24] usb 2-1: Product: syz [ 37.354317][ T24] usb 2-1: Manufacturer: syz [ 37.359039][ T24] usb 2-1: SerialNumber: syz [ 37.366537][ T24] usb 2-1: config 0 descriptor?? [ 37.385611][ T1014] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.393009][ T1014] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.475670][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 37.487214][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 37.498309][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 37.507497][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.515591][ T313] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.519606][ T19] usb 5-1: config 0 descriptor?? [ 37.545771][ T1022] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 37.566402][ T19] hub 5-1:0.0: USB hub found [ 37.607641][ T1014] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.614786][ T1014] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.645766][ T487] usb 1-1: USB disconnect, device number 5 [ 37.885626][ T19] hub 5-1:0.0: 3 ports detected [ 37.885625][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.885652][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.911275][ T313] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 37.920278][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.928526][ T313] usb 3-1: config 0 descriptor?? [ 38.067003][ T24] dm9601: No valid MAC address in EEPROM, using 16:91:37:44:ce:43 [ 38.105596][ T19] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 38.111892][ T19] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 38.225652][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 38.231437][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 38.266833][ T19] usb 5-1: USB disconnect, device number 7 [ 38.267114][ T1055] incfs: Can't find or create .index dir in ./file0 [ 38.278994][ T1055] incfs: mount failed -22 [ 38.305350][ T1057] loop0: detected capacity change from 0 to 1024 [ 38.326651][ T1057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.363657][ T952] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 38.374678][ T952] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 38.385437][ T952] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 38.397992][ T952] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 38.409033][ T952] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 38.419965][ T952] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 38.430601][ T952] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 38.441194][ T952] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 38.451870][ T952] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 38.462574][ T952] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 38.539515][ T952] EXT4-fs (loop0): unmounting filesystem. [ 38.655167][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.662408][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.670125][ T1061] device bridge_slave_0 entered promiscuous mode [ 38.679617][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.686673][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.693880][ T1061] device bridge_slave_1 entered promiscuous mode [ 38.744357][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.751740][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.758906][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.765766][ T1061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.793709][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.801332][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.808599][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.820196][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.828238][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.835176][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.843727][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.851815][ T24] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 38.860513][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.867489][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.882467][ T24] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 16:91:37:44:ce:43 [ 38.905598][ T313] usb 3-1: string descriptor 0 read error: -71 [ 38.909012][ T1061] device veth0_vlan entered promiscuous mode [ 38.913900][ T24] usb 2-1: USB disconnect, device number 5 [ 38.924461][ T24] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 38.926469][ T1061] device veth1_macvtap entered promiscuous mode [ 38.935522][ T313] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 38.950878][ T313] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 38.959416][ T313] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 38.967741][ T313] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 38.975057][ T313] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 38.985108][ T313] usb 3-1: USB disconnect, device number 6 [ 38.993670][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.003317][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.012067][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.021016][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.032130][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.040064][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.048652][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.058732][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.066898][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.074904][ T487] ================================================================== [ 39.082778][ T487] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 39.089806][ T487] Read of size 8 at addr ffff88810fa0ace0 by task kworker/1:5/487 [ 39.097446][ T487] [ 39.099636][ T487] CPU: 1 PID: 487 Comm: kworker/1:5 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 39.109174][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 39.119459][ T487] Workqueue: 0x0 (events) [ 39.123710][ T487] Call Trace: [ 39.126937][ T487] [ 39.129689][ T487] dump_stack_lvl+0x151/0x1b7 [ 39.134221][ T487] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 39.139497][ T487] ? _printk+0xd1/0x111 [ 39.143506][ T487] ? __virt_addr_valid+0x242/0x2f0 [ 39.148725][ T487] print_report+0x158/0x4e0 [ 39.152962][ T487] ? __virt_addr_valid+0x242/0x2f0 [ 39.157924][ T487] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 39.164073][ T487] ? worker_thread+0xa36/0x1260 [ 39.168838][ T487] kasan_report+0x13c/0x170 [ 39.173319][ T487] ? worker_thread+0xa36/0x1260 [ 39.178233][ T487] __asan_report_load8_noabort+0x14/0x20 [ 39.183787][ T487] worker_thread+0xa36/0x1260 [ 39.188294][ T487] ? __kasan_check_read+0x11/0x20 [ 39.193284][ T487] kthread+0x26d/0x300 [ 39.197271][ T487] ? worker_clr_flags+0x1a0/0x1a0 [ 39.202234][ T487] ? kthread_blkcg+0xd0/0xd0 [ 39.206672][ T487] ret_from_fork+0x1f/0x30 [ 39.210930][ T487] [ 39.213886][ T487] [ 39.216133][ T487] Allocated by task 24: [ 39.220240][ T487] kasan_set_track+0x4b/0x70 [ 39.224999][ T487] kasan_save_alloc_info+0x1f/0x30 [ 39.229944][ T487] __kasan_kmalloc+0x9c/0xb0 [ 39.234460][ T487] __kmalloc_node+0xb4/0x1e0 [ 39.238968][ T487] kvmalloc_node+0x221/0x640 [ 39.243387][ T487] alloc_netdev_mqs+0x8c/0xf90 [ 39.247986][ T487] alloc_etherdev_mqs+0x36/0x40 [ 39.252673][ T487] usbnet_probe+0x207/0x27c0 [ 39.257192][ T487] usb_probe_interface+0x5b6/0xa90 [ 39.262217][ T487] really_probe+0x2b8/0x920 [ 39.266563][ T487] __driver_probe_device+0x1a0/0x310 [ 39.271862][ T487] driver_probe_device+0x54/0x3d0 [ 39.276745][ T487] __device_attach_driver+0x2e3/0x490 [ 39.282188][ T487] bus_for_each_drv+0x183/0x200 [ 39.286830][ T487] __device_attach+0x312/0x510 [ 39.291481][ T487] device_initial_probe+0x1a/0x20 [ 39.296350][ T487] bus_probe_device+0xbe/0x1e0 [ 39.300941][ T487] device_add+0xb60/0xf10 [ 39.305108][ T487] usb_set_configuration+0x190f/0x1e80 [ 39.310489][ T487] usb_generic_driver_probe+0x8b/0x150 [ 39.315782][ T487] usb_probe_device+0x144/0x260 [ 39.320466][ T487] really_probe+0x2b8/0x920 [ 39.324894][ T487] __driver_probe_device+0x1a0/0x310 [ 39.330018][ T487] driver_probe_device+0x54/0x3d0 [ 39.334961][ T487] __device_attach_driver+0x2e3/0x490 [ 39.340170][ T487] bus_for_each_drv+0x183/0x200 [ 39.344858][ T487] __device_attach+0x312/0x510 [ 39.349484][ T487] device_initial_probe+0x1a/0x20 [ 39.354326][ T487] bus_probe_device+0xbe/0x1e0 [ 39.359124][ T487] device_add+0xb60/0xf10 [ 39.363290][ T487] usb_new_device+0xf2f/0x1820 [ 39.367975][ T487] hub_event+0x2db1/0x4830 [ 39.372227][ T487] process_one_work+0x73d/0xcb0 [ 39.376913][ T487] worker_thread+0xa60/0x1260 [ 39.381513][ T487] kthread+0x26d/0x300 [ 39.385427][ T487] ret_from_fork+0x1f/0x30 [ 39.389677][ T487] [ 39.391841][ T487] Freed by task 24: [ 39.395496][ T487] kasan_set_track+0x4b/0x70 [ 39.399939][ T487] kasan_save_free_info+0x2b/0x40 [ 39.405297][ T487] ____kasan_slab_free+0x131/0x180 [ 39.410372][ T487] __kasan_slab_free+0x11/0x20 [ 39.415068][ T487] __kmem_cache_free+0x218/0x3b0 [ 39.419833][ T487] kfree+0x7a/0xf0 [ 39.423392][ T487] kvfree+0x35/0x40 [ 39.427324][ T487] netdev_freemem+0x3f/0x60 [ 39.431657][ T487] netdev_release+0x7f/0xb0 [ 39.436113][ T487] device_release+0x95/0x1c0 [ 39.440720][ T487] kobject_put+0x178/0x260 [ 39.445267][ T487] put_device+0x1f/0x30 [ 39.449339][ T487] free_netdev+0x393/0x480 [ 39.453800][ T487] usbnet_disconnect+0x245/0x390 [ 39.458839][ T487] usb_unbind_interface+0x1fa/0x8c0 [ 39.463854][ T487] device_release_driver_internal+0x53e/0x870 [ 39.469864][ T487] device_release_driver+0x19/0x20 [ 39.474912][ T487] bus_remove_device+0x2fa/0x360 [ 39.479769][ T487] device_del+0x663/0xe90 [ 39.483943][ T487] usb_disable_device+0x380/0x720 [ 39.488889][ T487] usb_disconnect+0x32a/0x890 [ 39.493395][ T487] hub_event+0x1ed8/0x4830 [ 39.497649][ T487] process_one_work+0x73d/0xcb0 [ 39.502336][ T487] worker_thread+0xd71/0x1260 [ 39.506853][ T487] kthread+0x26d/0x300 [ 39.510763][ T487] ret_from_fork+0x1f/0x30 [ 39.515030][ T487] [ 39.517185][ T487] Last potentially related work creation: [ 39.522772][ T487] kasan_save_stack+0x3b/0x60 [ 39.527247][ T487] __kasan_record_aux_stack+0xb4/0xc0 [ 39.533151][ T487] kasan_record_aux_stack_noalloc+0xb/0x10 [ 39.538875][ T487] insert_work+0x56/0x310 [ 39.543151][ T487] __queue_work+0x9b6/0xd70 [ 39.547878][ T487] queue_work_on+0x105/0x170 [ 39.552358][ T487] usbnet_link_change+0xeb/0x100 [ 39.557327][ T487] usbnet_probe+0x1dbe/0x27c0 [ 39.561809][ T487] usb_probe_interface+0x5b6/0xa90 [ 39.566933][ T487] really_probe+0x2b8/0x920 [ 39.571478][ T487] __driver_probe_device+0x1a0/0x310 [ 39.576668][ T487] driver_probe_device+0x54/0x3d0 [ 39.581536][ T487] __device_attach_driver+0x2e3/0x490 [ 39.587020][ T487] bus_for_each_drv+0x183/0x200 [ 39.591688][ T487] __device_attach+0x312/0x510 [ 39.596283][ T487] device_initial_probe+0x1a/0x20 [ 39.601142][ T487] bus_probe_device+0xbe/0x1e0 [ 39.605757][ T487] device_add+0xb60/0xf10 [ 39.609916][ T487] usb_set_configuration+0x190f/0x1e80 [ 39.615210][ T487] usb_generic_driver_probe+0x8b/0x150 [ 39.620509][ T487] usb_probe_device+0x144/0x260 [ 39.625381][ T487] really_probe+0x2b8/0x920 [ 39.629900][ T487] __driver_probe_device+0x1a0/0x310 [ 39.635190][ T487] driver_probe_device+0x54/0x3d0 [ 39.640141][ T487] __device_attach_driver+0x2e3/0x490 [ 39.645359][ T487] bus_for_each_drv+0x183/0x200 [ 39.650119][ T487] __device_attach+0x312/0x510 [ 39.654736][ T487] device_initial_probe+0x1a/0x20 [ 39.659580][ T487] bus_probe_device+0xbe/0x1e0 [ 39.664180][ T487] device_add+0xb60/0xf10 [ 39.668366][ T487] usb_new_device+0xf2f/0x1820 [ 39.672952][ T487] hub_event+0x2db1/0x4830 [ 39.677479][ T487] process_one_work+0x73d/0xcb0 [ 39.682173][ T487] worker_thread+0xa60/0x1260 [ 39.686750][ T487] kthread+0x26d/0x300 [ 39.690657][ T487] ret_from_fork+0x1f/0x30 [ 39.694914][ T487] [ 39.697187][ T487] The buggy address belongs to the object at ffff88810fa0a000 [ 39.697187][ T487] which belongs to the cache kmalloc-4k of size 4096 [ 39.711252][ T487] The buggy address is located 3296 bytes inside of [ 39.711252][ T487] 4096-byte region [ffff88810fa0a000, ffff88810fa0b000) [ 39.724518][ T487] [ 39.726773][ T487] The buggy address belongs to the physical page: [ 39.733132][ T487] page:ffffea00043e8200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fa08 [ 39.743174][ T487] head:ffffea00043e8200 order:3 compound_mapcount:0 compound_pincount:0 [ 39.751481][ T487] flags: 0x4000000000010200(slab|head|zone=1) [ 39.757487][ T487] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 39.765980][ T487] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 39.774673][ T487] page dumped because: kasan: bad access detected [ 39.781093][ T487] page_owner tracks the page as allocated [ 39.786637][ T487] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 102, tgid 102 (udevd), ts 22785819251, free_ts 22676801831 [ 39.808890][ T487] post_alloc_hook+0x213/0x220 [ 39.813479][ T487] prep_new_page+0x1b/0x110 [ 39.818080][ T487] get_page_from_freelist+0x27ea/0x2870 [ 39.823461][ T487] __alloc_pages+0x3a1/0x780 [ 39.827882][ T487] alloc_slab_page+0x6c/0xf0 [ 39.832483][ T487] new_slab+0x90/0x3e0 [ 39.836501][ T487] ___slab_alloc+0x6f9/0xb80 [ 39.840899][ T487] __slab_alloc+0x5d/0xa0 [ 39.845066][ T487] __kmem_cache_alloc_node+0x1af/0x250 [ 39.850374][ T487] kmalloc_trace+0x2a/0xa0 [ 39.854706][ T487] kernfs_iop_get_link+0x65/0x610 [ 39.859565][ T487] vfs_readlink+0x166/0x390 [ 39.863998][ T487] do_readlinkat+0x27f/0x3a0 [ 39.868412][ T487] __x64_sys_readlink+0x7f/0x90 [ 39.873096][ T487] x64_sys_call+0x297/0x9a0 [ 39.877443][ T487] do_syscall_64+0x3b/0xb0 [ 39.881709][ T487] page last free stack trace: [ 39.886202][ T487] free_unref_page_prepare+0x83d/0x850 [ 39.891503][ T487] free_unref_page+0xb2/0x5c0 [ 39.896221][ T487] __free_pages+0x61/0xf0 [ 39.900379][ T487] __free_slab+0xce/0x1a0 [ 39.904545][ T487] __unfreeze_partials+0x165/0x1a0 [ 39.909588][ T487] put_cpu_partial+0xa9/0x100 [ 39.914186][ T487] __slab_free+0x1c8/0x280 [ 39.918431][ T487] ___cache_free+0xc6/0xd0 [ 39.922776][ T487] qlist_free_all+0xc5/0x140 [ 39.927200][ T487] kasan_quarantine_reduce+0x15a/0x180 [ 39.932491][ T487] __kasan_slab_alloc+0x24/0x80 [ 39.937267][ T487] slab_post_alloc_hook+0x53/0x2c0 [ 39.942213][ T487] __kmem_cache_alloc_node+0x191/0x250 [ 39.947507][ T487] kmalloc_trace+0x2a/0xa0 [ 39.951761][ T487] ____ip_mc_inc_group+0x215/0x8d0 [ 39.956709][ T487] ip_mc_up+0x10f/0x1e0 [ 39.960816][ T487] [ 39.962959][ T487] Memory state around the buggy address: [ 39.968434][ T487] ffff88810fa0ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.976338][ T487] ffff88810fa0ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.984236][ T487] >ffff88810fa0ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.992121][ T487] ^ [ 39.999247][ T487] ffff88810fa0ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 40.007251][ T487] ffff88810fa0ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 40.015226][ T487] ================================================================== [ 40.023223][ T487] Disabling lock debugging due to kernel taint [ 40.030194][ T1029] Bluetooth: hci0: command 0x1003 tx timeout [ 40.036109][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.115527][ T19] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 40.221389][ T10] device bridge_slave_1 left promiscuous mode [ 40.227739][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.236602][ T291] syz-executor (291) used greatest stack depth: 20776 bytes left [ 40.244378][ T10] device bridge_slave_0 left promiscuous mode [ 40.250573][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.259017][ T10] device veth1_macvtap left promiscuous mode [ 40.264952][ T10] device veth0_vlan left promiscuous mode [ 41.307106][ T10] device bridge_slave_1 left promiscuous mode [ 41.313345][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.321256][ T10] device bridge_slave_0 left promiscuous mode [ 41.327907][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.336443][ T10] device bridge_slave_1 left promiscuous mode [ 41.342518][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.350120][ T10] device bridge_slave_0 left promiscuous mode [ 41.356230][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.364127][ T10] device bridge_slave_1 left promiscuous mode [ 41.370372][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.377851][ T10] device bridge_slave_0 left promiscuous mode [ 41.384142][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.392145][ T10] device bridge_slave_1 left promiscuous mode [ 41.398517][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.406245][ T10] device bridge_slave_0 left promiscuous mode [ 41.412210][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.420142][ T10] device bridge_slave_1 left promiscuous mode [ 41.426273][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.433677][ T10] device bridge_slave_0 left promiscuous mode [ 41.439926][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.448668][ T10] device veth1_macvtap left promiscuous mode [ 41.454891][ T10] device veth0_vlan left promiscuous mode [ 41.461039][ T10] device veth1_macvtap left promiscuous mode [ 41.466885][ T10] device veth0_vlan left promiscuous mode [ 41.472669][ T10] device veth1_macvtap left promiscuous mode [ 41.478910][ T10] device veth0_vlan left promiscuous mode [ 41.484663][ T10] device veth1_macvtap left promiscuous mode [ 41.490960][ T10] device veth0_vlan left promiscuous mode [ 41.497071][ T10] device veth1_macvtap left promiscuous mode [ 41.503027][ T10] device veth0_vlan left promiscuous mode