last executing test programs: 33.988312675s ago: executing program 32 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x44}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x40}) close_range(r7, 0xffffffffffffffff, 0x0) 29.542592068s ago: executing program 2 (id=300): keyctl$join(0x1, 0x0) request_key(&(0x7f0000002600)='asymmetric\x00', &(0x7f0000002640)={'syz', 0x1}, &(0x7f0000002680)='[+,\x00', 0x0) 29.525180608s ago: executing program 2 (id=302): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) read$FUSE(r0, 0x0, 0x0) 29.464037628s ago: executing program 2 (id=305): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="40020000100013072dbd700000000000fc010000000000000000000000000001e000000200000000000000000000000000000000000000000a0000002e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000001010000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007010100"], 0x240}}, 0x0) 29.365966818s ago: executing program 2 (id=306): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@errors_remount}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') read$FUSE(r1, &(0x7f0000001e80)={0x2020}, 0x2062) 29.12335108s ago: executing program 2 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xe, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 28.970397321s ago: executing program 2 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002240)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x1, 0x10, 0x7}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008011}, 0x4) 28.932052771s ago: executing program 33 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002240)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x1, 0x10, 0x7}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008011}, 0x4) 27.515950708s ago: executing program 0 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000004c0)={0xb8, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_TUPLE={0xa4, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xffffffffffffff61, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xaf09}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8}, 0x40000) 27.513163518s ago: executing program 0 (id=358): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, 0x0, 0x9000, 0x0, 0x0) mount_setattr(r1, &(0x7f0000000280)='./file0\x00', 0x1100, &(0x7f00000002c0)={0x1, 0xf0, 0x100000, {r1}}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x1, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x8}]}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "ba2254c3"}, @main=@item_012={0x2, 0x0, 0x9, "deeb"}, @local=@item_012={0x2, 0x2, 0x2, "8fe0"}, @global=@item_4={0x3, 0x1, 0x0, "0800be00"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "09037a31"}, @local=@item_4={0x3, 0x2, 0x5, "c7b83395"}]}}, 0x0}, 0x0) socket(0x2, 0x3, 0x6) 25.544231429s ago: executing program 0 (id=385): r0 = socket$igmp(0x2, 0x3, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='9', 0x1}]) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x1, 0xe5f6, "480983", 0x0, 0x7}) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x4, 0xfffffffe}, 0x3c) 25.20756572s ago: executing program 4 (id=389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000580)={@broadcast, @local, @void, {@llc_tr={0x11, {@llc={0x0, 0x4e, 'B'}}}}}, 0x0) 25.016218631s ago: executing program 4 (id=390): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f0000000080)=ANY=[], 0x1, 0x1507, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xfffffff7a003e45c, 0x10000000000000) 24.841754222s ago: executing program 4 (id=393): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x2, 0x254, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x1000000000000, 0x400000}) 24.713791283s ago: executing program 4 (id=397): r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x3000}], 0x1, 0x7800, 0x0, 0x3) 24.551520304s ago: executing program 0 (id=400): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000200)='./file1\x00') 24.546548194s ago: executing program 4 (id=401): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) shutdown(r0, 0x1) 24.356195545s ago: executing program 4 (id=402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.915380537s ago: executing program 34 (id=402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.38057448s ago: executing program 0 (id=409): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 23.077818711s ago: executing program 0 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.077755901s ago: executing program 35 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.830764017s ago: executing program 6 (id=429): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f0000000080)=ANY=[], 0x1, 0x1507, &(0x7f0000001b00)="$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") open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200, 0x0) 21.565096839s ago: executing program 6 (id=433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 20.536244234s ago: executing program 6 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x1, 0x8, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x80000001, 0x2, {0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5}, 0x0, 0x2, 0x7ffe}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) 20.167677216s ago: executing program 8 (id=468): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) shutdown(r0, 0x1) 20.104099267s ago: executing program 8 (id=469): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 19.992118057s ago: executing program 6 (id=474): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='size=E']) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020) 19.838575218s ago: executing program 8 (id=476): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x28011, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x10103e, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x40000) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, 0x0) 19.812458268s ago: executing program 6 (id=477): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x5, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x20000085) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listen(0xffffffffffffffff, 0x8) 19.5402452s ago: executing program 6 (id=481): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) 19.54007651s ago: executing program 36 (id=481): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) 19.507665369s ago: executing program 8 (id=483): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x25, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0xffffffffffffffff}) 19.39767115s ago: executing program 8 (id=485): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x300001a, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0xd, 0x2aa, &(0x7f0000001300)="$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") r0 = getpid() r1 = socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x30, 0x24, 0xd0f, 0x2, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x4000004) syz_pidfd_open(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x123042, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$getown(r5, 0x9) close(r4) socket$netlink(0x10, 0x3, 0x8000000004) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x7c) read$FUSE(r6, &(0x7f0000002180)={0x2020}, 0x2020) r7 = signalfd4(r6, &(0x7f0000000140)={[0x8000]}, 0x8, 0x80000) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) syz_open_procfs$namespace(0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000040)={0x207ffd, 0x6}, 0x8) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000180)={0x6, 0x10001, 0x3, 0x3, 0x19, "46e988ab1834db8f1acdf99f61c12837ae5fbd"}) shutdown(r8, 0x0) 18.484917295s ago: executing program 8 (id=503): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3b6}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ptrace(0x10, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 5.637383901s ago: executing program 5 (id=666): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x400c080) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 5.564241011s ago: executing program 5 (id=667): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.708400251s ago: executing program 9 (id=683): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88601, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) 3.624162981s ago: executing program 9 (id=684): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a0102000000000000000002000000090001"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 3.371496603s ago: executing program 37 (id=503): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3b6}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ptrace(0x10, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 2.846155906s ago: executing program 3 (id=693): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.776255816s ago: executing program 9 (id=694): syz_usb_connect(0x0, 0x4f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000150109023d00020000000009049c00030103510009050a000000ec00000905031301000000000725012c"], 0x0) 2.776143276s ago: executing program 3 (id=695): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.714708676s ago: executing program 3 (id=696): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2004000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x25, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0xffffffffffffffff}) 2.194541509s ago: executing program 5 (id=697): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00?'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0xf, 0x5, "3ca63e104e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.823379661s ago: executing program 3 (id=698): syz_usb_connect(0x0, 0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ba4d20871180603b0b50102030109023200010000000009040000000e01000008240600018a2aa805240000000d240f0100000000070000000006"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42501, 0x0) preadv(r0, 0x0, 0x0, 0x8001, 0x2) 1.483904083s ago: executing program 1 (id=706): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000026c0)=@delchain={0x5ac, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x570, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x548, 0x7, [@m_gact={0xb0, 0x8, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1eb, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1e14, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18f0, 0x8}}]}, {0x5d, 0x6, "016e0e8ccce8b438002b9a280a547f6dcc992613bee7e806d9e109449422cbe54423fbdabccd281045d5e6f219d08e9d8413a7e7c05279c68c7feb414ca2bdc1564df509a816a7534774b4ae6f8fa13216cf11f3899d1dc6cf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x168, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x8, 0x8, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x10000000, 0x2eca, 0x5}, 0x3}}]}, {0xd9, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc066125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d139e8371981dc62a4369aa602ac542d2123e008f091efa1ef638699b7da3eaf710563945"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x12c, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x8, 0x6, 0x6, 0x7}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="a48ea8b24dc2"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="d830ffae9662"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xad, 0x6, "274fe8ad5464eac54caeb2c9bfafd0d27035c4d2ef2038d8e51fc32d91b5a8bb285779ed45eecdf6e53cc2a654c60fc1c69ab8bf54a2810705818519a2ec6d06c1b9f6d88fc0c993efbfea2e07d7cb41b65897ace41d0b63543be909e9ef56a7b5c41b308bf7c933caf377b77500c4b2a0831b5db55639e67466aea7e3de0e87540a4ce8343e518bc1b40859579c5897549d71e7ceeb1fede1cc05003db8e7bb9458d14d89f1542254"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x16c, 0x12, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x2, 0x7d}}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7ff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xc9, 0x6, "e429cc476e5a6b2bfe572c4920d343d428d2d62e337aedf0b81700410284c9b3bf0a511fffa6d416cc3b5ff995d0cd3e4f2656fb972f24e7c94b2df03aaad9835392bca70719cb1aa7cd3abe1c6df10410af14e75e2e761362bf9c813542b1375d5c28f2eb45a767eb9b182d3c67c24285c4482806a7087d1d4021f864e35922a41e9f5db9775b3d88b1058b40237c9a4d9c801ba52bae5aebc90c4cddd7b2c193e3fd550d29bb604246cdd79b7624d92c95813d7639db2837fff30928788aa929c8b28924"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x94, 0x2, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x3d}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.483754143s ago: executing program 1 (id=707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 1.461314793s ago: executing program 1 (id=708): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2004000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x25, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0xffffffffffffffff}) 1.157236574s ago: executing program 9 (id=710): mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 1.120668614s ago: executing program 7 (id=711): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.120518234s ago: executing program 9 (id=712): r0 = io_uring_setup(0x30d1, &(0x7f0000000340)={0x0, 0x0, 0x2, 0xffffffff, 0xce}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0x2000009) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) close_range(r0, 0xffffffffffffffff, 0x0) 1.120412534s ago: executing program 7 (id=713): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.120351154s ago: executing program 7 (id=714): epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 992.284125ms ago: executing program 9 (id=715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 579.275857ms ago: executing program 1 (id=716): socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 569.243417ms ago: executing program 1 (id=717): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'cpuset'}]}, 0x8) 496.237677ms ago: executing program 1 (id=718): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f00000001c0)={0x0, 0x2, 0x4, {0x4, 0x0, "441a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) 272.392458ms ago: executing program 7 (id=719): r0 = io_uring_setup(0x30d5, &(0x7f00000001c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 245.399569ms ago: executing program 7 (id=720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000300)="0f01c80f20d86635200000000f22d86766c7442400f223949f6766c74424020700c0fe6766c744240600000000670f011c2467f00fbabb00980000f6bad10466b8cd01000066efd09a4c00650f01cbf20f704e4c0b66b8010000000f01c1b8f9000f00d0", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 172.261259ms ago: executing program 7 (id=721): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000cf, 0x4) 58.960579ms ago: executing program 5 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x4000) 48.14618ms ago: executing program 5 (id=723): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) 257.55µs ago: executing program 3 (id=724): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') lseek(r0, 0x2, 0x1) 94.61µs ago: executing program 3 (id=725): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001840)={0x2020}, 0x2020) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(r0, 0x1) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 0s ago: executing program 5 (id=726): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2004000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x25, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0xffffffffffffffff}) kernel console output (not intermixed with test programs): [ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.733813][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.741753][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.749534][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.757456][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.765267][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.772665][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.780776][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.793824][ T291] device veth0_vlan entered promiscuous mode [ 20.802147][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.810258][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.818565][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.826140][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.834102][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.842265][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.859823][ T292] device veth0_vlan entered promiscuous mode [ 20.865832][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.873302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.880719][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.888968][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.897120][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.904961][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.912910][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.920770][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.928692][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.936272][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.944206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.951468][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.963806][ T291] device veth1_macvtap entered promiscuous mode [ 20.972965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.980450][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.988628][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.996984][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.004927][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.013168][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.021180][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.046393][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.054319][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.062739][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.071089][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.079375][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.087101][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.094785][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.102065][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.110550][ T292] device veth1_macvtap entered promiscuous mode [ 21.117936][ T288] device veth0_vlan entered promiscuous mode [ 21.142160][ T288] device veth1_macvtap entered promiscuous mode [ 21.174981][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.182717][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.191782][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.200811][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.208486][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.216810][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.225039][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.233581][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.242181][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.250655][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.259400][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.268314][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.288783][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.307255][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.309669][ T321] loop1: detected capacity change from 0 to 512 [ 21.321627][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.330350][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.408882][ T334] loop4: detected capacity change from 0 to 2048 [ 21.415747][ T321] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 21.430633][ T321] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.470221][ T338] syz.2.9 (338) used greatest stack depth: 21168 bytes left [ 21.476088][ T340] loop3: detected capacity change from 0 to 1024 [ 21.498371][ T342] Non-string source [ 21.501801][ T345] loop0: detected capacity change from 0 to 512 [ 21.506282][ T334] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 21.514625][ T348] loop2: detected capacity change from 0 to 128 [ 21.524694][ T334] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.556680][ T345] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 21.576943][ T340] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 21.602520][ T348] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 21.617421][ T348] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 21.669412][ T362] loop4: detected capacity change from 0 to 1024 [ 21.689426][ T364] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.713819][ T362] EXT4-fs (loop4): Ignoring removed oldalloc option [ 21.749527][ T374] loop0: detected capacity change from 0 to 16 [ 21.756797][ T362] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e803c018, mo2=0003] [ 21.764713][ T362] System zones: 0-1, 3-12 [ 21.769696][ T362] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,grpjquota=,jqfmt=vfsold,discard,noauto_da_alloc,delalloc,jqfmt=vfsv0,oldalloc,debug,,errors=continue. Quota mode: none. [ 21.854268][ T374] erofs: (device loop0): mounted with root inode @ nid 36. [ 21.867371][ T378] loop4: detected capacity change from 0 to 256 [ 21.890501][ T378] exfat: Deprecated parameter 'utf8' [ 21.903460][ T378] exfat: Deprecated parameter 'utf8' [ 21.910263][ T370] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 21.920331][ T378] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 21.990188][ T399] ======================================================= [ 21.990188][ T399] WARNING: The mand mount option has been deprecated and [ 21.990188][ T399] and is ignored by this kernel. Remove the mand [ 21.990188][ T399] option from the mount to silence this warning. [ 21.990188][ T399] ======================================================= [ 22.026519][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.044706][ T401] loop2: detected capacity change from 0 to 512 [ 22.107748][ T401] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,barrier,,errors=continue. Quota mode: writeback. [ 22.123259][ T401] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 22.135470][ T401] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #2: comm syz.2.34: corrupted inode contents [ 22.147316][ T401] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #2: comm syz.2.34: mark_inode_dirty error [ 22.158293][ T370] usb 2-1: Using ep0 maxpacket: 32 [ 22.158732][ T401] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #2: comm syz.2.34: corrupted inode contents [ 22.174827][ T401] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.34: mark_inode_dirty error [ 22.296443][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 22.316415][ T370] usb 2-1: unable to get BOS descriptor or descriptor too short [ 22.326550][ T322] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 22.378687][ T411] netlink: 'syz.2.36': attribute type 16 has an invalid length. [ 22.386154][ T411] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.36'. [ 22.396770][ T370] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 22.405712][ T370] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 22.415977][ T370] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 22.424896][ T370] usb 2-1: config 128 has no interface number 0 [ 22.431112][ T370] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 22.442356][ T26] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.453109][ T370] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 22.463065][ T26] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.472665][ T370] usb 2-1: config 128 interface 127 has no altsetting 0 [ 22.479467][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 22.488480][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.550224][ T26] hub 4-1:4.0: USB hub found [ 22.646511][ T370] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 22.655439][ T370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.663317][ T370] usb 2-1: Product: syz [ 22.667364][ T370] usb 2-1: Manufacturer: syz [ 22.671771][ T370] usb 2-1: SerialNumber: syz [ 22.716578][ T322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.728305][ T322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.738105][ T322] usb 5-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 22.747017][ T322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.756810][ T322] usb 5-1: config 0 descriptor?? [ 22.766481][ T26] hub 4-1:4.0: 2 ports detected [ 22.771553][ T26] usb 4-1: selecting invalid altsetting 1 [ 22.777313][ T26] hub 4-1:4.0: Using single TT (err -22) [ 22.976588][ T26] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 22.982822][ T26] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 23.019254][ T26] usb 4-1: USB disconnect, device number 2 [ 23.129761][ T370] usb 2-1: USB disconnect, device number 2 [ 23.238045][ T322] wacom 0003:056A:00DD.0001: Unknown device_type for 'HID 056a:00dd'. Assuming pen. [ 23.263006][ T322] wacom 0003:056A:00DD.0001: hidraw0: USB HID v0.20 Device [HID 056a:00dd] on usb-dummy_hcd.4-1/input0 [ 23.276023][ T322] input: Wacom Bamboo Connect Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00DD.0001/input/input4 [ 23.297477][ T431] loop0: detected capacity change from 0 to 1024 [ 23.368400][ T431] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.43: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 23.386884][ T431] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.43: couldn't read orphan inode 11 (err -117) [ 23.391303][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 23.406412][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 23.414348][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 23.422064][ T431] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 23.447751][ T26] usb 5-1: USB disconnect, device number 2 [ 23.455787][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 23.465614][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 23.473276][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 23.473304][ T30] audit: type=1400 audit(1731942445.567:154): avc: denied { block_suspend } for pid=437 comm="syz.2.46" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 23.479479][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 23.511001][ T431] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.43: Invalid block bitmap block 0 in block_group 0 [ 23.538287][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 23.547657][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 23.557367][ T431] Quota error (device loop0): write_blk: dquota write failed [ 23.564627][ T431] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 23.584806][ T431] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.43: Failed to acquire dquot type 0 [ 23.596815][ T30] audit: type=1400 audit(1731942445.697:155): avc: denied { create } for pid=430 comm="syz.0.43" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 23.618578][ T431] syz.0.43 (431) used greatest stack depth: 20264 bytes left [ 23.633646][ T311] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 23.642046][ T311] EXT4-fs error (device loop0): ext4_release_dquot:6210: comm kworker/u4:4: Failed to release dquot type 0 [ 23.651319][ T30] audit: type=1400 audit(1731942445.747:156): avc: denied { ioctl } for pid=457 comm="syz.1.58" path="socket:[16815]" dev="sockfs" ino=16815 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.660448][ T460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 23.704675][ T30] audit: type=1400 audit(1731942445.797:157): avc: denied { write } for pid=463 comm="syz.3.61" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 23.773433][ T475] loop0: detected capacity change from 0 to 512 [ 23.805312][ T479] loop3: detected capacity change from 0 to 1024 [ 23.811764][ T481] loop1: detected capacity change from 0 to 1024 [ 23.826945][ T479] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 23.834060][ T479] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 23.846450][ T322] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.847614][ T479] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback. [ 23.872595][ T484] loop0: detected capacity change from 0 to 512 [ 23.876440][ T481] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 23.895993][ T479] fscrypt (loop3, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 23.900189][ T481] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000101,noinit_itable,nomblk_io_submit,grpquota,nodiscard,. Quota mode: writeback. [ 23.974187][ T488] loop3: detected capacity change from 0 to 512 [ 23.984098][ T484] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 24.000651][ T484] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 24.013276][ T484] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 24.027245][ T484] EXT4-fs (loop0): 1 truncate cleaned up [ 24.038395][ T484] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nombcache,block_validity,quota,,errors=continue. Quota mode: writeback. [ 24.060060][ T488] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 24.074046][ T30] audit: type=1400 audit(1731942446.157:158): avc: denied { sys_module } for pid=497 comm="syz.1.72" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.090670][ T502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.75'. [ 24.105072][ T488] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 24.122139][ T30] audit: type=1400 audit(1731942446.177:159): avc: denied { create } for pid=499 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 24.142894][ T30] audit: type=1400 audit(1731942446.177:160): avc: denied { write } for pid=499 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 24.172548][ T488] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 24.211418][ T513] loop0: detected capacity change from 0 to 256 [ 24.225197][ T513] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 24.253284][ T519] netlink: 'syz.3.78': attribute type 27 has an invalid length. [ 24.305293][ T531] loop3: detected capacity change from 0 to 256 [ 24.311504][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.324326][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.334138][ T322] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 24.345952][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.361549][ T531] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 24.373649][ T322] usb 3-1: config 0 descriptor?? [ 24.396391][ T537] loop0: detected capacity change from 0 to 256 [ 24.413044][ T537] exFAT-fs (loop0): error, found bogus dentry(2) beyond unused empty group(0) (start_clu : 5, cur_clu : 5) [ 24.425688][ T537] exFAT-fs (loop0): Filesystem has been set read-only [ 24.487825][ T556] loop4: detected capacity change from 0 to 1024 [ 24.560045][ T556] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.99: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 24.580776][ T556] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.99: couldn't read orphan inode 11 (err -117) [ 24.592848][ T556] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 24.619000][ T556] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.99: Invalid block bitmap block 0 in block_group 0 [ 24.660974][ T556] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.99: Failed to acquire dquot type 0 [ 24.683339][ T566] netlink: 'syz.3.100': attribute type 16 has an invalid length. [ 24.691062][ T566] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.100'. [ 24.732694][ T311] EXT4-fs error (device loop4): ext4_release_dquot:6210: comm kworker/u4:4: Failed to release dquot type 0 [ 24.880262][ T322] hid-generic 0003:05AC:4262.0002: unbalanced delimiter at end of report description [ 24.901197][ T322] hid-generic: probe of 0003:05AC:4262.0002 failed with error -22 [ 25.095619][ T26] usb 3-1: USB disconnect, device number 2 [ 25.444606][ T598] loop4: detected capacity change from 0 to 128 [ 25.463249][ T600] loop3: detected capacity change from 0 to 1024 [ 25.534569][ T600] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.113: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 25.553522][ T600] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.113: couldn't read orphan inode 11 (err -117) [ 25.565930][ T600] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 25.593310][ T604] netlink: 'syz.0.123': attribute type 16 has an invalid length. [ 25.601409][ T604] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.123'. [ 25.640002][ T600] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.113: Invalid block bitmap block 0 in block_group 0 [ 25.664799][ T600] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.113: Failed to acquire dquot type 0 [ 25.715372][ T611] loop1: detected capacity change from 0 to 512 [ 25.741717][ T311] EXT4-fs error (device loop3): ext4_release_dquot:6210: comm kworker/u4:4: Failed to release dquot type 0 [ 25.744826][ T608] loop2: detected capacity change from 0 to 2048 [ 25.771219][ T611] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.117: corrupted inode contents [ 25.787131][ T611] EXT4-fs error (device loop1): ext4_dirty_inode:6038: inode #16: comm syz.1.117: mark_inode_dirty error [ 25.790095][ T618] loop4: detected capacity change from 0 to 512 [ 25.806862][ T611] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.117: corrupted inode contents [ 25.819752][ T611] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.117: mark_inode_dirty error [ 25.831227][ T611] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.117: corrupted inode contents [ 25.843337][ T611] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 25.852400][ T611] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.117: corrupted inode contents [ 25.853973][ T618] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.120: inode #1: comm syz.4.120: iget: illegal inode # [ 25.879292][ T618] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.120: error while reading EA inode 1 err=-117 [ 25.892383][ T618] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.120: inode #1: comm syz.4.120: iget: illegal inode # [ 25.898133][ T611] EXT4-fs error (device loop1): ext4_truncate:4303: inode #16: comm syz.1.117: mark_inode_dirty error [ 25.916896][ T618] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.120: error while reading EA inode 1 err=-117 [ 25.921606][ T608] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.947444][ T611] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 25.948162][ T618] EXT4-fs (loop4): 1 orphan inode deleted [ 25.961930][ T618] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 25.995830][ T611] EXT4-fs (loop1): 1 truncate cleaned up [ 26.032512][ T611] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.043822][ T611] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.724266][ T639] loop2: detected capacity change from 0 to 1024 [ 26.815630][ T647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.131'. [ 26.847380][ T639] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 26.901258][ T639] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 26.973982][ T664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.139'. [ 26.984026][ T664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.139'. [ 27.098244][ T684] netlink: 'syz.4.136': attribute type 16 has an invalid length. [ 27.105789][ T684] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.136'. [ 27.206484][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.329546][ T694] loop1: detected capacity change from 0 to 2048 [ 27.392754][ T696] loop3: detected capacity change from 0 to 4096 [ 27.442467][ T694] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.456440][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 27.485401][ T696] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 27.522716][ T696] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #15: comm syz.3.152: corrupted inode contents [ 27.532210][ T710] netlink: 48 bytes leftover after parsing attributes in process `syz.2.157'. [ 27.544405][ T696] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #15: comm syz.3.152: mark_inode_dirty error [ 27.556210][ T696] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #15: comm syz.3.152: corrupted inode contents [ 27.568379][ T696] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.152: mark_inode_dirty error [ 27.580561][ T696] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #15: comm syz.3.152: corrupted inode contents [ 27.723826][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 68, changing to 10 [ 27.735182][ T696] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.152: mark_inode_dirty error [ 27.735342][ T696] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #15: comm syz.3.152: corrupted inode contents [ 27.763693][ T696] EXT4-fs error (device loop3): ext4_truncate:4303: inode #15: comm syz.3.152: mark_inode_dirty error [ 28.661991][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50465, setting to 1024 [ 28.684601][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 28.684614][ T30] audit: type=1326 audit(1731942450.777:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=717 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa63c13719 code=0x7ffc0000 [ 28.691424][ T696] EXT4-fs error (device loop3): ext4_evict_inode:294: comm syz.3.152: couldn't truncate inode 15 (err -117) [ 28.720161][ T719] loop2: detected capacity change from 0 to 1024 [ 28.728410][ T30] audit: type=1326 audit(1731942450.777:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=717 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7ffa63c13719 code=0x7ffc0000 [ 28.754619][ T30] audit: type=1326 audit(1731942450.777:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=717 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa63c13719 code=0x7ffc0000 [ 28.757021][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.791129][ T26] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.800375][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.809255][ T26] usb 1-1: config 0 descriptor?? [ 28.817253][ T719] EXT4-fs (loop2): Ignoring removed orlov option [ 28.823476][ T719] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 28.826464][ T661] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.834069][ T719] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 28.858012][ T726] loop1: detected capacity change from 0 to 512 [ 28.864253][ T719] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 28.873979][ T719] EXT4-fs (loop2): invalid journal inode [ 28.879537][ T719] EXT4-fs (loop2): can't get journal size [ 28.886899][ T719] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,norecovery,orlov,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 28.972418][ T726] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 30.229235][ T30] audit: type=1400 audit(1731942451.267:207): avc: denied { relabelfrom } for pid=724 comm="syz.3.163" name="" dev="pipefs" ino=17569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 30.251713][ T726] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.309366][ T748] loop3: detected capacity change from 0 to 512 [ 30.330427][ T749] loop2: detected capacity change from 0 to 512 [ 30.338739][ T30] audit: type=1400 audit(1731942452.437:208): avc: denied { rename } for pid=725 comm="syz.1.159" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.448920][ T748] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.170: inode #1: comm syz.3.170: iget: illegal inode # [ 30.461793][ T748] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.170: error while reading EA inode 1 err=-117 [ 30.480662][ T26] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input7 [ 30.506643][ T748] EXT4-fs (loop3): 1 orphan inode deleted [ 30.506893][ T749] EXT4-fs (loop2): Test dummy encryption mode enabled [ 30.512193][ T748] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000006,grpid,resgid=0x0000000000000000,grpquota,noauto_da_alloc,journal_dev=0x000000000000003b,grpjquota=,,errors=continue. Quota mode: writeback. [ 30.547069][ T749] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.171: inline data xattr refers to an external xattr inode [ 30.550857][ T30] audit: type=1400 audit(1731942452.637:209): avc: denied { create } for pid=752 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.561759][ T749] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.171: couldn't read orphan inode 12 (err -117) [ 30.587472][ T26] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 30.592163][ T603] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.611558][ T749] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 30.611568][ T30] audit: type=1400 audit(1731942452.647:210): avc: denied { getopt } for pid=752 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.623507][ T30] audit: type=1400 audit(1731942452.707:211): avc: denied { rename } for pid=746 comm="syz.3.170" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.678293][ T30] audit: type=1400 audit(1731942452.737:212): avc: denied { create } for pid=746 comm="syz.3.170" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 30.751689][ T762] loop3: detected capacity change from 0 to 512 [ 30.776023][ T30] audit: type=1400 audit(1731942452.867:213): avc: denied { create } for pid=766 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.807452][ T772] loop2: detected capacity change from 0 to 512 [ 30.815347][ T762] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.173: corrupted inode contents [ 30.827134][ T762] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #16: comm syz.3.173: mark_inode_dirty error [ 30.838343][ T762] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.173: corrupted inode contents [ 30.850073][ T762] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.173: mark_inode_dirty error [ 30.861447][ T762] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.173: corrupted inode contents [ 30.873554][ T762] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 30.873919][ T772] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 30.882107][ T762] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.173: corrupted inode contents [ 30.908906][ T772] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.178: Unimplemented hash flags: 0x0001 [ 30.911439][ T603] usb 5-1: Using ep0 maxpacket: 8 [ 30.920295][ T772] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.178: Corrupt directory, running e2fsck is recommended [ 30.925364][ T762] EXT4-fs error (device loop3): ext4_truncate:4303: inode #16: comm syz.3.173: mark_inode_dirty error [ 30.942626][ T772] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.178: Unimplemented hash flags: 0x0001 [ 30.949588][ T762] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 30.959770][ T772] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.178: Corrupt directory, running e2fsck is recommended [ 30.969184][ T762] EXT4-fs (loop3): 1 truncate cleaned up [ 30.986856][ T762] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 30.989007][ T772] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.178: Unimplemented hash flags: 0x0001 [ 30.997975][ T762] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.008838][ T772] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.178: Corrupt directory, running e2fsck is recommended [ 31.066425][ T603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.077231][ T603] usb 5-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00 [ 31.078735][ T783] loop2: detected capacity change from 0 to 2048 [ 31.086067][ T603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.101225][ T603] usb 5-1: config 0 descriptor?? [ 31.127620][ T783] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,,errors=continue. Quota mode: none. [ 31.148911][ T783] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.214343][ T794] loop2: detected capacity change from 0 to 512 [ 31.307591][ T794] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.318458][ T794] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.370753][ T805] loop3: detected capacity change from 0 to 1024 [ 31.371874][ T803] loop2: detected capacity change from 0 to 4096 [ 31.387635][ T805] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 31.419186][ T805] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.190: Invalid inode table block 7360457007093395821 in block_group 0 [ 31.433221][ T805] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 31.442611][ T805] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #15: comm syz.3.190: mark_inode_dirty error [ 31.454960][ T805] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.190: Invalid inode table block 7360457007093395821 in block_group 0 [ 31.466725][ T803] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 31.469270][ T805] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.190: Invalid inode table block 7360457007093395821 in block_group 0 [ 31.491961][ T803] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #15: comm syz.2.187: corrupted inode contents [ 31.495190][ T805] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.190: Invalid inode table block 7360457007093395821 in block_group 0 [ 31.507593][ T803] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #15: comm syz.2.187: mark_inode_dirty error [ 31.520850][ T805] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.190: Invalid inode table block 7360457007093395821 in block_group 0 [ 31.532168][ T803] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #15: comm syz.2.187: corrupted inode contents [ 31.545810][ T809] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.190: Invalid inode table block 7360457007093395821 in block_group 0 [ 31.557159][ T803] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.187: mark_inode_dirty error [ 31.573952][ T805] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.190: Invalid inode table block 7360457007093395821 in block_group 0 [ 31.581764][ T803] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #15: comm syz.2.187: corrupted inode contents [ 31.596022][ T809] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.190: Invalid inode table block 7360457007093395821 in block_group 0 [ 31.608373][ T603] wacom 0003:056A:010F.0004: unknown main item tag 0x2 [ 31.621512][ T803] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.187: mark_inode_dirty error [ 31.632636][ T603] wacom 0003:056A:010F.0004: hidraw1: USB HID v0.00 Device [HID 056a:010f] on usb-dummy_hcd.4-1/input0 [ 31.641707][ T803] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #15: comm syz.2.187: corrupted inode contents [ 31.661259][ T803] EXT4-fs error (device loop2): ext4_truncate:4303: inode #15: comm syz.2.187: mark_inode_dirty error [ 31.672378][ T803] EXT4-fs error (device loop2): ext4_evict_inode:294: comm syz.2.187: couldn't truncate inode 15 (err -117) [ 31.766354][ T740] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 31.818437][ T39] usb 5-1: USB disconnect, device number 3 [ 31.862996][ T821] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.870035][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.878000][ T821] device bridge_slave_0 entered promiscuous mode [ 31.884651][ T821] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.891543][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.898675][ T821] device bridge_slave_1 entered promiscuous mode [ 31.946767][ T821] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.953632][ T821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.960750][ T821] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.962565][ T830] loop2: detected capacity change from 0 to 256 [ 31.967517][ T821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.987266][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.994680][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.002507][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.026916][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.035277][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.042148][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.051849][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.060082][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.066937][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.090405][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.098332][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.112232][ T821] device veth0_vlan entered promiscuous mode [ 32.125020][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.133926][ T835] loop0: detected capacity change from 0 to 1024 [ 32.135729][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.149115][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.152344][ T837] loop2: detected capacity change from 0 to 1024 [ 32.156539][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.166638][ T835] EXT4-fs (loop0): blocks per group (0) and clusters per group (32) inconsistent [ 32.175300][ T821] device veth1_macvtap entered promiscuous mode [ 32.187301][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.197672][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.206899][ T837] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 32.216666][ T837] SELinux: duplicate or incompatible mount options [ 32.217159][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.257194][ T45] device bridge_slave_1 left promiscuous mode [ 32.265395][ T839] loop0: detected capacity change from 0 to 512 [ 32.272850][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.288740][ T45] device bridge_slave_0 left promiscuous mode [ 32.288846][ T839] EXT4-fs (loop0): orphan cleanup on readonly fs [ 32.294742][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.310692][ T839] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.204: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 32.317671][ T45] device veth1_macvtap left promiscuous mode [ 32.335246][ T839] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.204: Bad quota inode: 4, type: 1 [ 32.342720][ T45] device veth0_vlan left promiscuous mode [ 32.352023][ T839] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.371400][ T839] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 32.378081][ T839] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,min_batch_time=0x00000000000000c9,journal_dev=0x0000000000000009,journal_dev=0x000000000000000b,barrier=0x0000000000000081,minixdf,inode_readahead_blks=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 32.431878][ T857] loop0: detected capacity change from 0 to 256 [ 32.441637][ T861] capability: warning: `syz.5.211' uses deprecated v2 capabilities in a way that may be insecure [ 32.457057][ T857] exfat: Deprecated parameter 'namecase' [ 32.462638][ T857] exfat: Deprecated parameter 'namecase' [ 32.488813][ T857] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 32.563171][ T878] loop5: detected capacity change from 0 to 256 [ 32.608001][ T891] loop4: detected capacity change from 0 to 256 [ 32.617200][ T878] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 32.640673][ T891] exfat: Bad value for 'uid' [ 32.658909][ T878] exFAT-fs (loop5): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 32.658909][ T878] [ 32.671105][ T26] usb 1-1: USB disconnect, device number 2 [ 32.677735][ T878] exFAT-fs (loop5): Filesystem has been set read-only [ 32.767704][ T912] loop4: detected capacity change from 0 to 2048 [ 32.793335][ T924] loop0: detected capacity change from 0 to 128 [ 32.923971][ T924] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 33.013248][ T603] Bluetooth: hci0: command 0x1003 tx timeout [ 33.019160][ T778] Bluetooth: hci0: sending frame failed (-49) [ 33.025522][ T924] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.025683][ T912] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.114521][ T933] loop0: detected capacity change from 0 to 512 [ 33.126924][ T933] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 33.147535][ T933] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000007,dioread_nolock,mblk_io_submit,discard,nogrpid,,errors=continue. Quota mode: none. [ 33.176398][ T603] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 33.242859][ T939] loop0: detected capacity change from 0 to 256 [ 33.325932][ T939] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 33.407000][ T959] loop0: detected capacity change from 0 to 512 [ 33.487566][ T959] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 33.503401][ T959] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.542026][ T971] loop4: detected capacity change from 0 to 512 [ 33.555704][ T971] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.587380][ T603] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 33.595396][ T603] usb 6-1: config 0 has no interface number 0 [ 33.605300][ T971] EXT4-fs (loop4): 1 truncate cleaned up [ 33.615383][ T977] loop0: detected capacity change from 0 to 2048 [ 33.623027][ T971] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nombcache,block_validity,quota,,errors=continue. Quota mode: writeback. [ 33.643572][ T603] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 33.659162][ T603] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 33.663499][ T979] loop2: detected capacity change from 0 to 1024 [ 33.673687][ T603] usb 6-1: config 0 interface 255 has no altsetting 0 [ 33.685147][ T603] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 33.695213][ T603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.704112][ T603] usb 6-1: config 0 descriptor?? [ 33.704512][ T977] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.730530][ T979] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 33.755341][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 33.755355][ T30] audit: type=1400 audit(1731942455.847:241): avc: denied { rename } for pid=978 comm="syz.2.261" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.789035][ T30] audit: type=1400 audit(1731942455.847:242): avc: denied { reparent } for pid=978 comm="syz.2.261" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.939322][ T996] loop2: detected capacity change from 0 to 512 [ 33.959307][ T60] usb 6-1: USB disconnect, device number 2 [ 33.959876][ T996] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.974544][ T996] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 33.985026][ T996] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 33.994070][ T996] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 34.003119][ T998] netlink: 'syz.4.262': attribute type 16 has an invalid length. [ 34.010680][ T998] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.262'. [ 34.020092][ T996] System zones: 0-2, 18-18, 34-34 [ 34.048263][ T996] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 34.064519][ T996] EXT4-fs (loop2): 1 truncate cleaned up [ 34.085985][ T996] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.484220][ T1010] loop0: detected capacity change from 0 to 2048 [ 34.536025][ T1010] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.557326][ T1010] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.811377][ T1033] loop5: detected capacity change from 0 to 1024 [ 34.887178][ T1033] EXT4-fs (loop5): Ignoring removed orlov option [ 34.893359][ T1033] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 34.953029][ T1033] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,jqfmt=vfsv0,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 35.076037][ T30] audit: type=1400 audit(1731942457.167:243): avc: denied { audit_write } for pid=1045 comm="syz.4.286" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 35.097159][ T299] Bluetooth: hci0: command 0x1001 tx timeout [ 35.103037][ T778] Bluetooth: hci0: sending frame failed (-49) [ 35.117747][ T1033] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.280: Logical block already allocated [ 35.199425][ T1054] netlink: 'syz.2.284': attribute type 16 has an invalid length. [ 35.206991][ T1054] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.284'. [ 35.298444][ T1057] fuseblk: Invalid rootmode [ 35.796385][ T30] audit: type=1400 audit(1731942457.877:244): avc: denied { shutdown } for pid=1059 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.837118][ T1070] loop0: detected capacity change from 0 to 512 [ 36.043642][ T1070] EXT4-fs (loop0): Test dummy encryption mode enabled [ 36.068878][ T1074] loop5: detected capacity change from 0 to 512 [ 36.087343][ T1070] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.294: inline data xattr refers to an external xattr inode [ 36.148468][ T1070] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.294: couldn't read orphan inode 12 (err -117) [ 36.167771][ T1074] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 36.171405][ T1070] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 36.211050][ T1074] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.232664][ T1070] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 36.241281][ T1070] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.294: Directory hole found for htree leaf block 0 [ 36.307630][ T1091] loop2: detected capacity change from 0 to 256 [ 36.334652][ T1093] loop0: detected capacity change from 0 to 512 [ 36.351938][ T1096] loop5: detected capacity change from 0 to 16 [ 36.377435][ T1093] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #17: comm syz.0.303: iget: bogus i_mode (0) [ 36.407147][ T1096] erofs: (device loop5): mounted with root inode @ nid 36. [ 36.428431][ T1093] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.303: couldn't read orphan inode 17 (err -117) [ 36.444117][ T1093] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.490051][ T1093] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.303: bg 0: block 7: invalid block bitmap [ 36.500812][ T1099] loop2: detected capacity change from 0 to 1024 [ 36.554466][ T370] kernel write not supported for file [eventfd] (pid: 370 comm: kworker/1:3) [ 36.564974][ T1099] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000007,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,errors=remount-ro,lazytime,usrquota,data_err=abort,data_err=abort,. Quota mode: writeback. [ 36.599014][ T30] audit: type=1400 audit(1731942458.697:245): avc: denied { mounton } for pid=1098 comm="syz.2.306" path="/76/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.613786][ T1116] loop0: detected capacity change from 0 to 256 [ 36.642845][ T30] audit: type=1400 audit(1731942458.737:246): avc: denied { rmdir } for pid=292 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.645807][ T1119] loop4: detected capacity change from 0 to 256 [ 36.673744][ T30] audit: type=1400 audit(1731942458.767:247): avc: denied { unlink } for pid=292 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 36.700328][ T1116] exfat: Deprecated parameter 'namecase' [ 36.705793][ T1116] exfat: Deprecated parameter 'namecase' [ 36.711472][ T1119] exfat: Unknown parameter '0x00000000000000030x0000000000000000' [ 36.712334][ T1121] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.730580][ T1116] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 36.746088][ T30] audit: type=1400 audit(1731942458.837:248): avc: denied { read } for pid=1115 comm="syz.0.312" name="file1" dev="loop0" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.761301][ T1124] loop5: detected capacity change from 0 to 1024 [ 36.769202][ T1116] attempt to access beyond end of device [ 36.769202][ T1116] loop0: rw=0, want=34225520825, limit=256 [ 36.822367][ T1116] attempt to access beyond end of device [ 36.822367][ T1116] loop0: rw=0, want=34225520825, limit=256 [ 36.827036][ T1124] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 36.880314][ T1113] loop4: detected capacity change from 0 to 512 [ 36.890803][ T1129] loop0: detected capacity change from 0 to 512 [ 36.916992][ T30] audit: type=1400 audit(1731942459.017:249): avc: denied { remount } for pid=1110 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.931322][ T1134] loop5: detected capacity change from 0 to 128 [ 36.946632][ T1129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.961990][ T1129] EXT4-fs (loop0): 1 truncate cleaned up [ 36.965945][ T1134] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 36.981204][ T1129] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,inode_readahead_blks=0x0000000000004000,grpquota,quota,,errors=continue. Quota mode: writeback. [ 36.988739][ T1134] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.051263][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.059333][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.067622][ T1130] device bridge_slave_0 entered promiscuous mode [ 37.074560][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.081876][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.089397][ T1130] device bridge_slave_1 entered promiscuous mode [ 37.176118][ T30] audit: type=1400 audit(1731942459.267:250): avc: denied { read } for pid=1144 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.200716][ T603] Bluetooth: hci0: command 0x1009 tx timeout [ 37.361009][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.370682][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.387730][ T8] device bridge_slave_1 left promiscuous mode [ 37.438458][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.486573][ T8] device bridge_slave_0 left promiscuous mode [ 37.577517][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.625207][ T8] device veth1_macvtap left promiscuous mode [ 37.628683][ T1162] loop5: detected capacity change from 0 to 1024 [ 37.631106][ T8] device veth0_vlan left promiscuous mode [ 37.695632][ T1162] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 37.706506][ T1162] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 37.716064][ T1162] EXT4-fs error (device loop5): ext4_get_journal_inode:5150: comm syz.5.331: inode #1: comm syz.5.331: iget: illegal inode # [ 37.729238][ T1162] EXT4-fs (loop5): no journal found [ 37.734271][ T1162] EXT4-fs (loop5): can't get journal size [ 37.741214][ T1162] EXT4-fs (loop5): failed to initialize system zone (-22) [ 37.748269][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.748437][ T1162] EXT4-fs (loop5): mount failed [ 37.756593][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.768924][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.775771][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.782997][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.791044][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.798993][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.805820][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.813184][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.825725][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.834337][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.849094][ T1169] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 37.854836][ T1169] syzkaller0: linktype set to 512 [ 37.860692][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.868723][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.896162][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.900717][ T1175] loop5: detected capacity change from 0 to 256 [ 37.909314][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.918187][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.920949][ T1175] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 37.925647][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.945959][ T1130] device veth0_vlan entered promiscuous mode [ 37.957155][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.966987][ T1130] device veth1_macvtap entered promiscuous mode [ 37.981986][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.990201][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.020071][ T1181] loop4: detected capacity change from 0 to 512 [ 38.020843][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.041661][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.081338][ T1181] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 38.099708][ T1181] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.170907][ T1204] loop6: detected capacity change from 0 to 256 [ 38.202206][ T1213] loop4: detected capacity change from 0 to 256 [ 38.234834][ T1218] netlink: 40 bytes leftover after parsing attributes in process `syz.6.354'. [ 38.243623][ T1218] netlink: 40 bytes leftover after parsing attributes in process `syz.6.354'. [ 38.267233][ T1223] loop6: detected capacity change from 0 to 256 [ 38.292811][ T1223] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 38.346696][ T1236] loop4: detected capacity change from 0 to 512 [ 38.357947][ T1238] loop6: detected capacity change from 0 to 16 [ 38.367586][ T1238] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.374969][ T1238] erofs: (device loop6): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 38.406824][ T1236] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.423870][ T1236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 38.436359][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 38.440026][ T1236] System zones: 1-12 [ 38.448045][ T1236] EXT4-fs (loop4): 1 truncate cleaned up [ 38.453495][ T1236] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nobarrier,debug,max_dir_size_kb=0x0000000000000004,quota,acl,,errors=continue. Quota mode: writeback. [ 38.526410][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.708027][ T1265] loop4: detected capacity change from 0 to 512 [ 38.768100][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 38.820162][ T1265] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 38.833908][ T1265] EXT4-fs (loop4): invalid journal inode [ 38.841505][ T1265] EXT4-fs (loop4): can't get journal size [ 38.848258][ T1265] EXT4-fs (loop4): 1 truncate cleaned up [ 38.853773][ T1265] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 38.886406][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.897265][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.907151][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.919994][ T60] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.928994][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.940300][ T60] usb 1-1: config 0 descriptor?? [ 39.106346][ T740] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 39.256420][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.267171][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.276670][ T6] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 39.285510][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.294430][ T6] usb 6-1: config 0 descriptor?? [ 39.346365][ T740] usb 7-1: Using ep0 maxpacket: 16 [ 39.402326][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 39.402341][ T30] audit: type=1400 audit(1731942461.497:255): avc: denied { append } for pid=1274 comm="syz.4.379" name="ppp" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.417196][ T60] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 39.442173][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input12 [ 39.476413][ T740] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.486013][ T740] usb 7-1: config 0 interface 0 has no altsetting 0 [ 39.492548][ T740] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 39.501806][ T740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.512371][ T740] usb 7-1: config 0 descriptor?? [ 39.531846][ T60] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 39.654663][ T60] usb 1-1: USB disconnect, device number 3 [ 39.666753][ T6] usbhid 6-1:0.0: can't add hid device: -71 [ 39.672821][ T6] usbhid: probe of 6-1:0.0 failed with error -71 [ 39.682506][ T6] usb 6-1: USB disconnect, device number 3 [ 40.017150][ T740] hid (null): report_id 3328464267 is invalid [ 40.023395][ T740] hid (null): unknown global tag 0x1c [ 40.031867][ T740] hid (null): unknown global tag 0xe [ 40.037063][ T740] hid (null): global environment stack underflow [ 40.043177][ T740] hid (null): unknown global tag 0xe [ 40.048345][ T740] hid (null): unknown global tag 0xe [ 40.054367][ T740] hid (null): unknown global tag 0xe [ 40.059695][ T740] hid (null): invalid report_count 1640429044 [ 40.066215][ T740] hid (null): unknown global tag 0x16 [ 40.071585][ T740] hid (null): unknown global tag 0xd [ 40.076748][ T740] hid (null): report_id 68860137 is invalid [ 40.082976][ T740] hid (null): invalid report_size 45650 [ 40.088481][ T740] hid (null): unknown global tag 0xc [ 40.099608][ T740] hid-generic 0003:060B:500A.0006: unknown main item tag 0x6 [ 40.111989][ T740] hid-generic 0003:060B:500A.0006: report_id 3328464267 is invalid [ 40.121309][ T740] hid-generic 0003:060B:500A.0006: item 0 4 1 8 parsing failed [ 40.129539][ T740] hid-generic: probe of 0003:060B:500A.0006 failed with error -22 [ 40.180224][ T30] audit: type=1400 audit(1731942462.277:256): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.240562][ T6] usb 7-1: USB disconnect, device number 2 [ 40.663387][ T1308] Illegal XDP return value 4294966772, expect packet loss! [ 40.776686][ T1310] loop4: detected capacity change from 0 to 256 [ 40.895763][ T30] audit: type=1400 audit(1731942462.987:257): avc: denied { append } for pid=1309 comm="syz.4.390" path=2F39312FE91F7189591E9233614B2F637075616363742E75736167655F75736572 dev="loop4" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.914498][ T1318] loop6: detected capacity change from 0 to 512 [ 40.954140][ T1320] loop1: detected capacity change from 0 to 512 [ 40.963248][ T1318] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 40.974273][ T1322] loop4: detected capacity change from 0 to 128 [ 40.978821][ T1318] EXT4-fs (loop6): 1 truncate cleaned up [ 40.985942][ T1318] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 40.989505][ T1322] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.015135][ T1322] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.037878][ T1320] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 41.051534][ T1320] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.079796][ T1331] loop4: detected capacity change from 0 to 256 [ 41.144468][ T291] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 41.151958][ T291] FAT-fs (loop4): Filesystem has been set read-only [ 41.158570][ T291] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 41.166361][ T30] audit: type=1400 audit(1731942463.237:258): avc: denied { mounton } for pid=1328 comm="syz.4.397" path="/93/file1/bus" dev="loop4" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 41.270920][ T30] audit: type=1400 audit(1731942463.347:259): avc: denied { create } for pid=1332 comm="syz.6.399" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.424067][ T1336] loop0: detected capacity change from 0 to 512 [ 41.730267][ T1340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 41.847456][ T30] audit: type=1400 audit(1731942463.357:260): avc: denied { write } for pid=1332 comm="syz.6.399" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.938782][ T1336] EXT4-fs (loop0): 1 orphan inode deleted [ 41.944503][ T1336] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.956867][ T30] audit: type=1400 audit(1731942463.357:261): avc: denied { open } for pid=1332 comm="syz.6.399" path="/21/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.980189][ T1336] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.119990][ T1352] loop6: detected capacity change from 0 to 1024 [ 42.168557][ T1357] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz.0.400: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.245225][ T30] audit: type=1400 audit(1731942463.367:262): avc: denied { ioctl } for pid=1332 comm="syz.6.399" path="/21/file0" dev="tmpfs" ino=129 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.286517][ T1360] loop5: detected capacity change from 0 to 512 [ 42.297264][ T1352] EXT4-fs (loop6): Test dummy encryption mode enabled [ 42.335015][ T1352] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,noblock_validity,noinit_itable,barrier=0x0000000000000005,max_batch_time=0x0000000000000004,data_err=abort,,errors=continue. Quota mode: writeback. [ 42.383916][ T288] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.418575][ T1360] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 42.424891][ T1360] EXT4-fs (loop5): mount failed [ 42.436363][ T30] audit: type=1400 audit(1731942463.497:263): avc: denied { unlink } for pid=1130 comm="syz-executor" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.468606][ T288] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 42.484317][ T288] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #2: comm syz-executor: mark_inode_dirty error [ 42.508996][ T1001] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 42.518643][ T1001] EXT4-fs error (device loop0): ext4_quota_off:6476: inode #4: comm syz.0.268: mark_inode_dirty error [ 42.533116][ T1359] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.547876][ T30] audit: type=1400 audit(1731942464.647:264): avc: denied { mounton } for pid=1358 comm="syz.5.408" path="/proc/110/task" dev="proc" ino=20064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 42.578536][ T1359] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.587415][ T1359] device bridge_slave_0 entered promiscuous mode [ 42.607208][ T1359] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.614046][ T1359] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.648605][ T1359] device bridge_slave_1 entered promiscuous mode [ 42.656837][ T311] device bridge_slave_1 left promiscuous mode [ 42.692021][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.731063][ T311] device bridge_slave_0 left promiscuous mode [ 42.758885][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.787248][ T311] device veth1_macvtap left promiscuous mode [ 42.793081][ T311] device veth0_vlan left promiscuous mode [ 43.561692][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.568895][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.577020][ T1385] device bridge_slave_0 entered promiscuous mode [ 43.613981][ T1385] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.628889][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.654955][ T1385] device bridge_slave_1 entered promiscuous mode [ 43.726249][ T1418] loop5: detected capacity change from 0 to 512 [ 43.744903][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.752141][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.766209][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.774635][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.782916][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.789787][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.789855][ T1418] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 43.814721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.828875][ T1418] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 43.832226][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.848272][ T1418] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.856201][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.874050][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.880906][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.902551][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.925714][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.026006][ T1427] loop6: detected capacity change from 0 to 256 [ 44.154092][ T1385] device veth0_vlan entered promiscuous mode [ 44.204105][ T1385] device veth1_macvtap entered promiscuous mode [ 44.388020][ T1445] loop8: detected capacity change from 0 to 256 [ 44.413304][ T1359] device veth0_vlan entered promiscuous mode [ 44.422908][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.433097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.441269][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.448901][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.463066][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.475683][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.484392][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.508719][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.518148][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.529586][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.537028][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.547284][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.561399][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.568281][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.589254][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.603295][ T1461] loop8: detected capacity change from 0 to 512 [ 44.603979][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.616219][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.624024][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.632510][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.641531][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.650972][ T1461] EXT4-fs (loop8): 1 truncate cleaned up [ 44.656503][ T1461] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.667518][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.698661][ T1464] fuse: blksize only supported for fuseblk [ 44.730609][ T1359] device veth1_macvtap entered promiscuous mode [ 44.758645][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.768764][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.777301][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.790111][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.798273][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.808674][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.817544][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.879559][ T1479] loop7: detected capacity change from 0 to 512 [ 44.916749][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 44.916765][ T30] audit: type=1400 audit(1731942467.017:274): avc: denied { write } for pid=1486 comm="syz.8.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.965884][ T1491] loop1: detected capacity change from 0 to 512 [ 44.977100][ T1479] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,noload,,errors=continue. Quota mode: writeback. [ 45.041492][ T1479] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.053649][ T1479] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.404: corrupted xattr block 33 [ 45.065694][ T1479] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 45.074708][ T30] audit: type=1400 audit(1731942467.167:275): avc: denied { ioctl } for pid=1500 comm="syz.5.459" path="socket:[21253]" dev="sockfs" ino=21253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.076394][ T1479] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.404: corrupted xattr block 33 [ 45.115718][ T1479] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 45.138659][ T1479] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.404: corrupted xattr block 33 [ 45.157637][ T1491] request_module fs-ct4 succeeded, but still no fs? [ 45.197524][ T1479] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 45.211325][ T1510] loop5: detected capacity change from 0 to 1024 [ 45.262288][ T311] device bridge_slave_1 left promiscuous mode [ 45.292349][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.323257][ T1510] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.365613][ T311] device bridge_slave_0 left promiscuous mode [ 45.384598][ T1474] loop1: detected capacity change from 0 to 1024 [ 45.393685][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.494617][ T1510] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 45.528259][ T311] device veth1_macvtap left promiscuous mode [ 45.538531][ T311] device veth0_vlan left promiscuous mode [ 45.554416][ T1474] EXT4-fs (loop1): Ignoring removed nobh option [ 45.565005][ T1474] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 45.565005][ T1474] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 45.565005][ T1474] [ 45.623579][ T1510] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.464: missing EA_INODE flag [ 45.642425][ T1510] EXT4-fs (loop5): Remounting filesystem read-only [ 45.648845][ T1510] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.464: error while reading EA inode 11 err=-117 [ 45.667097][ T1474] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,barrier=0x000000000000624a,norecovery,debug_want_extra_isize=0x0000000000000080,nobh,nodelalloc,acl,nouser_xattr,,errors=continue. Quota mode: none. [ 45.697780][ T1529] loop7: detected capacity change from 0 to 256 [ 45.756635][ T1527] netlink: 4 bytes leftover after parsing attributes in process `syz.8.469'. [ 45.777640][ T1529] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xa7648d78, utbl_chksum : 0xe619d30d) [ 45.778279][ T1537] loop6: detected capacity change from 0 to 128 [ 45.802782][ T1533] loop1: detected capacity change from 0 to 2048 [ 45.810146][ T1535] loop5: detected capacity change from 0 to 8192 [ 45.819118][ T30] audit: type=1400 audit(1731942467.917:276): avc: denied { mounton } for pid=1528 comm="syz.7.470" path="/2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop7" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.867196][ T1537] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.879488][ T1535] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.885719][ T30] audit: type=1400 audit(1731942467.977:277): avc: denied { unlink } for pid=1359 comm="syz-executor" name="file0" dev="loop7" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.917306][ T1537] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.926601][ T30] audit: type=1400 audit(1731942468.027:278): avc: denied { unmount } for pid=1359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.945742][ T1539] loop8: detected capacity change from 0 to 2048 [ 45.953335][ T1130] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 45.954085][ T1533] devpts: called with bogus options [ 45.969211][ T1130] FAT-fs (loop6): Filesystem has been set read-only [ 45.975725][ T1130] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 45.987744][ T30] audit: type=1400 audit(1731942468.027:279): avc: denied { mounton } for pid=1536 comm="syz.6.474" path="/30/file0/file0" dev="loop6" ino=1048635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 46.034592][ T30] audit: type=1400 audit(1731942468.047:280): avc: denied { mount } for pid=1532 comm="syz.1.472" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 46.061072][ T1545] loop1: detected capacity change from 0 to 8192 [ 46.062741][ T1539] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.084765][ T1547] binder: BINDER_SET_CONTEXT_MGR already set [ 46.111656][ T1545] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.122220][ T30] audit: type=1400 audit(1731942468.047:281): avc: denied { remount } for pid=1532 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 46.149756][ T1547] binder: 1546:1547 ioctl 4018620d 200001c0 returned -16 [ 46.153504][ T1550] loop5: detected capacity change from 0 to 128 [ 46.160558][ T30] audit: type=1400 audit(1731942468.087:282): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 46.200142][ T30] audit: type=1400 audit(1731942468.157:283): avc: denied { read } for pid=1546 comm="syz.7.480" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.276028][ T1550] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.286606][ T1550] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.342928][ T1555] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.379436][ T1555] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.388650][ T1555] device bridge_slave_0 entered promiscuous mode [ 46.390637][ T1564] loop8: detected capacity change from 0 to 256 [ 46.398159][ T1550] syz.5.479 (pid 1550) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 46.403106][ T1555] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.417847][ T1555] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.425094][ T1555] device bridge_slave_1 entered promiscuous mode [ 46.711935][ T1590] loop5: detected capacity change from 0 to 512 [ 46.920203][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.929739][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.955446][ T1590] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.496: casefold flag without casefold feature [ 47.000134][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.008438][ T1590] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.496: couldn't read orphan inode 15 (err -117) [ 47.021064][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.029605][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.036494][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.051018][ T1590] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.087587][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.115589][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.152892][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.159780][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.168682][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.176519][ T740] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 47.177174][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.192748][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.216775][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.225110][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.232921][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.233849][ T1606] loop7: detected capacity change from 0 to 1024 [ 47.241538][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.260669][ T311] device bridge_slave_1 left promiscuous mode [ 47.266868][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.273985][ T311] device bridge_slave_0 left promiscuous mode [ 47.280144][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.288092][ T311] device veth1_macvtap left promiscuous mode [ 47.293903][ T311] device veth0_vlan left promiscuous mode [ 47.350318][ T1606] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.350681][ T1555] device veth0_vlan entered promiscuous mode [ 47.366923][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.374760][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.382744][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.390278][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.397641][ T1606] loop_set_status: loop7 () has still dirty pages (nrpages=2) [ 47.410976][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.419074][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.428880][ T1555] device veth1_macvtap entered promiscuous mode [ 47.438139][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.445520][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.453707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.474937][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.485691][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.503161][ T1618] loop9: detected capacity change from 0 to 512 [ 47.531147][ T1618] EXT4-fs (loop9): Ignoring removed orlov option [ 47.537449][ T740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.540186][ T1618] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 47.548205][ T1288] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 47.565280][ T740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.567229][ T1618] EXT4-fs (loop9): 1 truncate cleaned up [ 47.581707][ T1618] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 47.649896][ T1633] loop9: detected capacity change from 0 to 256 [ 47.656541][ T740] usb 2-1: New USB device found, idVendor=27b8, idProduct=0001, bcdDevice= 0.01 [ 47.666885][ T740] usb 2-1: New USB device strings: Mfr=0, Product=19, SerialNumber=0 [ 47.681253][ T740] usb 2-1: Product: syz [ 47.687775][ T1640] netlink: 8 bytes leftover after parsing attributes in process `syz.7.514'. [ 47.691812][ T740] usb 2-1: config 0 descriptor?? [ 47.916534][ T1288] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 47.925017][ T1288] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.943393][ T1288] usb 6-1: config 0 has no interface number 0 [ 48.106432][ T1288] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 48.120832][ T1288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.131031][ T1288] usb 6-1: Product: syz [ 48.135048][ T1288] usb 6-1: Manufacturer: syz [ 48.139741][ T1288] usb 6-1: SerialNumber: syz [ 48.147952][ T1288] usb 6-1: config 0 descriptor?? [ 48.176601][ T740] hid (null): nested delimiters [ 48.182103][ T740] hid-generic 0003:27B8:0001.0007: nested delimiters [ 48.198661][ T740] hid-generic 0003:27B8:0001.0007: item 0 1 2 10 parsing failed [ 48.219778][ T740] hid-generic: probe of 0003:27B8:0001.0007 failed with error -22 [ 48.314168][ T1670] loop9: detected capacity change from 0 to 256 [ 48.381799][ T1670] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.384829][ T603] usb 2-1: USB disconnect, device number 3 [ 48.392371][ T1670] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 48.406419][ T1288] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 48.407750][ T1670] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf32de3a7, utbl_chksum : 0xe619d30d) [ 48.412588][ T1288] usb 6-1: No valid video chain found. [ 48.626011][ T60] usb 6-1: USB disconnect, device number 4 [ 48.869617][ T1676] loop7: detected capacity change from 0 to 1024 [ 48.949726][ T1676] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 48.976071][ T1676] EXT4-fs error (device loop7): ext4_xattr_ibody_get:603: inode #2: comm syz.7.528: corrupted in-inode xattr [ 48.987707][ T1676] EXT4-fs (loop7): Remounting filesystem read-only [ 48.994082][ T1676] EXT4-fs error (device loop7) in ext4_evict_inode:258: Readonly filesystem [ 49.185656][ T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 49.385228][ T1705] loop7: detected capacity change from 0 to 256 [ 49.414496][ T1709] syz.5.541 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.429782][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 49.453006][ T1705] exfat: Deprecated parameter 'namecase' [ 49.481146][ T1709] syz.5.541 uses obsolete (PF_INET,SOCK_PACKET) [ 49.509230][ T1705] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 49.546416][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.628095][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.665538][ T1705] exFAT-fs (loop7): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 266, unilen : 257 > 255 [ 49.676993][ T60] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 49.790058][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.817638][ T60] usb 2-1: config 0 descriptor?? [ 50.167361][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 50.173218][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 50.180177][ T60] usb 2-1: USB disconnect, device number 4 [ 50.203905][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 50.203919][ T30] audit: type=1400 audit(1731942472.297:294): avc: denied { ioctl } for pid=1729 comm="syz.5.548" path="socket:[23625]" dev="sockfs" ino=23625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.216238][ T1726] syz.7.547 (1726) used greatest stack depth: 20208 bytes left [ 50.244190][ T30] audit: type=1400 audit(1731942472.337:295): avc: denied { create } for pid=1729 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.589251][ T1741] loop9: detected capacity change from 0 to 1024 [ 50.656079][ T1751] cgroup: No subsys list or none specified [ 50.807705][ T1741] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 50.866033][ T1741] EXT4-fs (loop9): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,errors=continue,. Quota mode: writeback. [ 50.893372][ T30] audit: type=1326 audit(1731942472.987:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1739 comm="syz.9.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42ebcf9719 code=0x0 [ 50.973383][ T1766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 50.989230][ T1766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 51.022874][ T30] audit: type=1400 audit(1731942473.117:297): avc: denied { call } for pid=1762 comm="syz.7.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 51.390469][ T1775] loop7: detected capacity change from 0 to 1024 [ 51.397457][ T1777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 51.445193][ T1779] mmap: syz.1.568 (1779): VmData 29085696 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 51.474319][ T1775] EXT4-fs (loop7): Ignoring removed orlov option [ 51.485488][ T1775] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 51.522730][ T1775] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 51.756384][ T60] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 51.804201][ T1800] loop9: detected capacity change from 0 to 512 [ 51.814268][ T370] kernel write not supported for file bpf-prog (pid: 370 comm: kworker/1:3) [ 51.934433][ T1806] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 51.966691][ T1800] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 51.995481][ T1800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 52.011981][ T1800] System zones: 1-12 [ 52.016583][ T1800] EXT4-fs (loop9): 1 truncate cleaned up [ 52.022032][ T1800] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 52.126415][ T60] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.154110][ T60] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 52.163076][ T60] usb 6-1: config 1 has no interface number 0 [ 52.169183][ T60] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.180198][ T60] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 52.346460][ T60] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.359319][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.367480][ T60] usb 6-1: Product: syz [ 52.371453][ T60] usb 6-1: Manufacturer: syz [ 52.375978][ T60] usb 6-1: SerialNumber: syz [ 52.536412][ T39] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.576357][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 52.646373][ T1724] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 52.886378][ T1724] usb 10-1: Using ep0 maxpacket: 16 [ 52.896500][ T39] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.906446][ T39] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 52.915258][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.923833][ T39] usb 8-1: config 0 descriptor?? [ 52.936615][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.947398][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.956954][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 52.965723][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.974079][ T6] usb 2-1: config 0 descriptor?? [ 53.006436][ T1724] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 53.014470][ T1724] usb 10-1: config 0 has no interface number 0 [ 53.020534][ T1724] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.031227][ T1724] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.040911][ T1724] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 53.049778][ T1724] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.057783][ T60] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 53.063540][ T60] cdc_ncm 6-1:1.1: bind() failure [ 53.069514][ T1724] usb 10-1: config 0 descriptor?? [ 53.074457][ T60] usb 6-1: USB disconnect, device number 5 [ 53.467385][ T6] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 53.474536][ T6] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 53.481809][ T6] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 53.489491][ T6] magicmouse 0003:05AC:0265.0008: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 53.674833][ T6] usb 2-1: USB disconnect, device number 5 [ 53.766390][ T1724] uclogic 0003:28BD:0071.0009: failed retrieving string descriptor #100: -71 [ 53.775069][ T1724] uclogic 0003:28BD:0071.0009: failed retrieving pen parameters: -71 [ 53.785019][ T1724] uclogic 0003:28BD:0071.0009: pen probing failed: -71 [ 53.886374][ T1724] uclogic 0003:28BD:0071.0009: failed probing parameters: -71 [ 53.893679][ T1724] uclogic: probe of 0003:28BD:0071.0009 failed with error -71 [ 53.905315][ T1724] usb 10-1: USB disconnect, device number 2 [ 53.983221][ T1861] device gretap0 entered promiscuous mode [ 53.989050][ T1861] device vlan2 entered promiscuous mode [ 53.995330][ T1861] device gretap0 left promiscuous mode [ 54.603063][ T30] audit: type=1400 audit(1731942476.697:298): avc: denied { getopt } for pid=1890 comm="syz.9.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.686360][ T299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 54.896359][ T60] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 54.956388][ T299] usb 2-1: Using ep0 maxpacket: 32 [ 55.026577][ T1910] bridge: RTM_NEWNEIGH with invalid ether address [ 55.076163][ T30] audit: type=1400 audit(1731942477.147:299): avc: denied { create } for pid=1911 comm="syz.5.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.095996][ T30] audit: type=1400 audit(1731942477.147:300): avc: denied { connect } for pid=1911 comm="syz.5.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.115688][ T30] audit: type=1400 audit(1731942477.147:301): avc: denied { write } for pid=1911 comm="syz.5.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.136361][ T60] usb 10-1: Using ep0 maxpacket: 16 [ 55.256440][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.267396][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.277184][ T60] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 55.288553][ T603] usb 8-1: USB disconnect, device number 2 [ 55.290055][ T60] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 55.304701][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.306539][ T299] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 55.316074][ T1916] capability: warning: `syz.7.622' uses 32-bit capabilities (legacy support in use) [ 55.320970][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.330259][ T60] usb 10-1: config 0 descriptor?? [ 55.343987][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.355370][ T299] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 55.365656][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.374160][ T299] usb 2-1: config 0 descriptor?? [ 55.776361][ T603] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 55.827176][ T60] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 55.835945][ T60] HID 045e:07da: Invalid code 65791 type 1 [ 55.841959][ T60] HID 045e:07da: Invalid code 768 type 1 [ 55.847438][ T60] HID 045e:07da: Invalid code 769 type 1 [ 55.852867][ T60] HID 045e:07da: Invalid code 770 type 1 [ 55.858387][ T60] HID 045e:07da: Invalid code 771 type 1 [ 55.863801][ T60] HID 045e:07da: Invalid code 772 type 1 [ 55.868496][ T299] logitech 0003:046D:C29C.000B: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 55.869300][ T60] HID 045e:07da: Invalid code 773 type 1 [ 55.885866][ T60] HID 045e:07da: Invalid code 774 type 1 [ 55.891352][ T60] HID 045e:07da: Invalid code 775 type 1 [ 55.896809][ T60] HID 045e:07da: Invalid code 776 type 1 [ 55.906888][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.000A/input/input14 [ 55.939828][ T30] audit: type=1400 audit(1731942478.037:302): avc: denied { execute } for pid=1925 comm="syz.5.626" path="/109/cgroup.events" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.987316][ T60] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 56.036376][ T603] usb 8-1: Using ep0 maxpacket: 16 [ 56.055118][ T60] usb 10-1: USB disconnect, device number 3 [ 56.086450][ T299] logitech 0003:046D:C29C.000B: no inputs found [ 56.095058][ T299] usb 2-1: USB disconnect, device number 6 [ 56.166407][ T603] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.177234][ T603] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.186831][ T603] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 56.195799][ T603] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.204272][ T603] usb 8-1: config 0 descriptor?? [ 56.611747][ T1934] netlink: 'syz.1.629': attribute type 2 has an invalid length. [ 56.633268][ T30] audit: type=1400 audit(1731942478.727:303): avc: denied { bind } for pid=1937 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.776409][ T30] audit: type=1400 audit(1731942478.867:304): avc: denied { read } for pid=1949 comm="syz.1.636" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.837362][ T60] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 56.952366][ T603] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 56.960049][ T603] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 56.967107][ T603] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 56.973956][ T603] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 56.980838][ T603] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 56.987951][ T603] appleir 0003:05AC:8241.000C: No inputs registered, leaving [ 56.999359][ T603] appleir 0003:05AC:8241.000C: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 57.012144][ T603] usb 8-1: USB disconnect, device number 3 [ 57.043513][ T30] audit: type=1400 audit(1731942479.137:305): avc: denied { write } for pid=1956 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.096540][ T39] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 57.196401][ T60] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.206414][ T60] usb 10-1: config 0 has no interfaces? [ 57.286430][ T60] usb 10-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 57.296886][ T60] usb 10-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 57.304932][ T60] usb 10-1: Manufacturer: syz [ 57.310035][ T60] usb 10-1: config 0 descriptor?? [ 57.456375][ T39] usb 6-1: config 9 has an invalid interface number: 96 but max is 0 [ 57.464302][ T39] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 57.474182][ T39] usb 6-1: config 9 has no interface number 0 [ 57.480089][ T39] usb 6-1: config 9 interface 96 altsetting 9 endpoint 0xE has invalid maxpacket 528, setting to 64 [ 57.490660][ T39] usb 6-1: config 9 interface 96 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.501417][ T39] usb 6-1: config 9 interface 96 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.511061][ T39] usb 6-1: config 9 interface 96 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 57.523859][ T39] usb 6-1: config 9 interface 96 has no altsetting 0 [ 57.676360][ T60] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 57.686416][ T39] usb 6-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 57.695253][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.703723][ T39] usb 6-1: Product: syz [ 57.707702][ T39] usb 6-1: Manufacturer: syz [ 57.712126][ T39] usb 6-1: SerialNumber: syz [ 57.739836][ T30] audit: type=1400 audit(1731942479.837:306): avc: denied { write } for pid=1963 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 57.899452][ T1972] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 58.076434][ T60] usb 8-1: unable to get BOS descriptor or descriptor too short [ 58.085016][ T39] usb 6-1: USB disconnect, device number 6 [ 58.126379][ T60] usb 8-1: not running at top speed; connect to a high speed hub [ 58.206392][ T60] usb 8-1: config 3 has an invalid interface number: 106 but max is 0 [ 58.214362][ T60] usb 8-1: config 3 has no interface number 0 [ 58.220703][ T1724] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 58.228187][ T60] usb 8-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 58.239034][ T60] usb 8-1: config 3 interface 106 has no altsetting 0 [ 58.396408][ T60] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 58.405257][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.413082][ T60] usb 8-1: Product: syz [ 58.417075][ T60] usb 8-1: Manufacturer: syz [ 58.421470][ T60] usb 8-1: SerialNumber: syz [ 58.446407][ T1962] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 58.483131][ T1984] device vlan2 entered promiscuous mode [ 58.504133][ T30] audit: type=1400 audit(1731942480.597:307): avc: denied { create } for pid=1987 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.511545][ T1988] Zero length message leads to an empty skb [ 58.666380][ T1724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.706532][ T1724] usb 2-1: not running at top speed; connect to a high speed hub [ 58.767264][ T60] usb 8-1: USB disconnect, device number 4 [ 58.816357][ T299] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 58.816447][ T1724] usb 2-1: config 9 has an invalid interface number: 27 but max is 0 [ 58.831631][ T1724] usb 2-1: config 9 has no interface number 0 [ 58.837461][ T1724] usb 2-1: config 9 interface 27 has no altsetting 0 [ 59.036377][ T1724] usb 2-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=bf.a0 [ 59.045250][ T1724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.053077][ T1724] usb 2-1: Product: syz [ 59.056366][ T299] usb 6-1: Using ep0 maxpacket: 16 [ 59.057069][ T1724] usb 2-1: Manufacturer: syz [ 59.066434][ T1724] usb 2-1: SerialNumber: syz [ 59.176432][ T299] usb 6-1: config 0 has no interfaces? [ 59.225472][ T30] audit: type=1400 audit(1731942481.317:308): avc: denied { write } for pid=2003 comm="syz.7.657" name="ptp0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.336392][ T299] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 59.345513][ T299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.353712][ T299] usb 6-1: Product: syz [ 59.358074][ T299] usb 6-1: Manufacturer: syz [ 59.362668][ T299] usb 6-1: SerialNumber: syz [ 59.372659][ T299] usb 6-1: config 0 descriptor?? [ 59.576595][ T1724] hub 2-1:9.27: bad descriptor, ignoring hub [ 59.582398][ T1724] hub: probe of 2-1:9.27 failed with error -5 [ 59.611424][ T299] usb 10-1: USB disconnect, device number 4 [ 59.621876][ T39] usb 6-1: USB disconnect, device number 7 [ 60.134216][ T2027] tipc: Started in network mode [ 60.139337][ T2027] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 60.148307][ T2027] tipc: Enabled bearer , priority 10 [ 60.399072][ T2033] netlink: 8 bytes leftover after parsing attributes in process `syz.7.668'. [ 60.426403][ T603] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 60.676354][ T299] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 60.787703][ T603] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.798150][ T603] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 60.807282][ T603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.818335][ T603] usb 6-1: config 0 descriptor?? [ 60.894898][ T2053] loop9: detected capacity change from 0 to 512 [ 60.986639][ T2053] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.995621][ T2053] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 61.004518][ T2053] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 61.013445][ T2053] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 61.021279][ T2053] System zones: 0-2, 18-18, 34-34 [ 61.026817][ T2053] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 61.041082][ T299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.041485][ T2053] EXT4-fs (loop9): 1 truncate cleaned up [ 61.051926][ T299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.057754][ T2053] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.068404][ T299] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 61.086106][ T299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.086818][ T39] usb 2-1: USB disconnect, device number 7 [ 61.094278][ T603] usb 6-1: USB disconnect, device number 8 [ 61.105839][ T299] usb 8-1: config 0 descriptor?? [ 61.146757][ T39] tipc: Node number set to 4269801642 [ 61.352779][ T2035] UDC core: couldn't find an available UDC or it's busy: -16 [ 61.360013][ T2035] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.597859][ T299] hid-generic 0003:04D8:00DD.000D: hidraw0: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 61.656354][ T603] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 61.683606][ T2069] usb usb8: usbfs: process 2069 (syz.1.679) did not claim interface 0 before use [ 61.873055][ T39] usb 8-1: USB disconnect, device number 5 [ 62.276399][ T603] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.286810][ T603] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 62.295635][ T603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.304058][ T603] usb 6-1: config 0 descriptor?? [ 62.452727][ T2088] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.459674][ T2088] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.466880][ T2088] device bridge_slave_0 entered promiscuous mode [ 62.473487][ T2088] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.480523][ T2088] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.487765][ T2088] device bridge_slave_1 entered promiscuous mode [ 62.529721][ T2088] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.536585][ T2088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.543757][ T2088] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.550556][ T2088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.574401][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.582334][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.595058][ T30] audit: type=1400 audit(1731942484.687:309): avc: denied { bind } for pid=2092 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.596699][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.615511][ T30] audit: type=1400 audit(1731942484.687:310): avc: denied { setopt } for pid=2092 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.652594][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.660632][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.667538][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.674682][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.682723][ T39] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 62.690293][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.697168][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.718426][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.726691][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.734494][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.748170][ T2088] device veth0_vlan entered promiscuous mode [ 62.754764][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.762877][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.770418][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.783632][ T2088] device veth1_macvtap entered promiscuous mode [ 62.792408][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.807092][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.815543][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.870694][ T2105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 62.879383][ T2105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 62.933272][ T2112] process 'syz.3.693' launched './file1' with NULL argv: empty string added [ 62.977596][ T833] device bridge_slave_1 left promiscuous mode [ 62.984698][ T833] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.999705][ T833] device bridge_slave_0 left promiscuous mode [ 63.012154][ T833] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.025595][ T833] device veth1_macvtap left promiscuous mode [ 63.031678][ T833] device veth0_vlan left promiscuous mode [ 63.132020][ T39] usb 8-1: config 0 has an invalid interface number: 107 but max is 0 [ 63.140302][ T39] usb 8-1: config 0 has no interface number 0 [ 63.146360][ T39] usb 8-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 63.157564][ T39] usb 8-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 63.226710][ T370] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 63.347591][ T39] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 63.372424][ T39] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 63.411269][ T39] usb 8-1: Product: syz [ 63.416292][ T39] usb 8-1: Manufacturer: syz [ 63.420984][ T39] usb 8-1: SerialNumber: syz [ 63.430476][ T39] usb 8-1: config 0 descriptor?? [ 63.561062][ T39] usb 6-1: USB disconnect, device number 9 [ 63.616413][ T370] usb 10-1: config 0 has an invalid interface number: 156 but max is 1 [ 63.624683][ T370] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.635253][ T370] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 63.644236][ T370] usb 10-1: config 0 has no interface number 0 [ 63.650468][ T370] usb 10-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 63.660539][ T370] usb 10-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 63.676238][ T370] usb 10-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.690346][ T1724] usb 8-1: USB disconnect, device number 6 [ 63.776507][ T370] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 63.787244][ T370] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 63.795224][ T370] usb 10-1: SerialNumber: syz [ 63.809908][ T370] usb 10-1: config 0 descriptor?? [ 63.848650][ T370] usb 10-1: MIDIStreaming interface descriptor not found [ 64.006376][ T39] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 64.051194][ T370] usb 10-1: USB disconnect, device number 5 [ 64.206338][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.406666][ T39] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 64.415788][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.492195][ T39] usb 6-1: config 0 descriptor?? [ 64.646386][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 64.776542][ T39] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 64.926390][ T6] usb 4-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=b5.b0 [ 64.935285][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.943438][ T6] usb 4-1: Product: syz [ 64.947596][ T6] usb 4-1: Manufacturer: syz [ 64.951999][ T6] usb 4-1: SerialNumber: syz [ 64.959583][ T6] usb 4-1: config 0 descriptor?? [ 64.996783][ T6] usb 4-1: Found UVC 0.00 device syz (1871:0306) [ 65.002960][ T6] usb 4-1: No valid video chain found. [ 65.016381][ T370] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 65.206487][ T39] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 65.206507][ T6] usb 4-1: USB disconnect, device number 3 [ 65.231443][ T39] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 65.316351][ T370] usb 10-1: Using ep0 maxpacket: 16 [ 65.446413][ T39] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 65.456229][ T39] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 65.476348][ T370] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 65.484243][ T370] usb 10-1: config 0 has no interface number 0 [ 65.506427][ T603] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 65.533411][ T2181] kvm: MONITOR instruction emulated as NOP! [ 65.627540][ T39] asix 6-1:0.0 eth1: register 'asix' at usb-dummy_hcd.5-1, ASIX AX88178 USB 2.0 Ethernet, 86:26:1b:8c:cc:81 [ 65.632534][ T30] audit: type=1400 audit(1731942487.727:311): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.639946][ T39] usb 6-1: USB disconnect, device number 10 [ 65.665762][ T39] asix 6-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.5-1, ASIX AX88178 USB 2.0 Ethernet [ 65.675474][ T370] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 65.684895][ T370] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.693526][ T370] usb 10-1: Product: syz [ 65.725459][ T370] usb 10-1: Manufacturer: syz [ 65.731784][ T370] usb 10-1: SerialNumber: syz [ 65.745052][ T370] usb 10-1: config 0 descriptor?? [ 65.769053][ T1724] ================================================================== [ 65.776945][ T1724] BUG: KASAN: use-after-free in worker_thread+0xaaa/0x12a0 [ 65.783974][ T1724] Read of size 8 at addr ffff8881154a0c60 by task kworker/1:7/1724 [ 65.791707][ T1724] [ 65.793868][ T1724] CPU: 1 PID: 1724 Comm: kworker/1:7 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 65.803675][ T1724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 65.813570][ T1724] Workqueue: 0x0 (rcu_gp) [ 65.817822][ T1724] Call Trace: [ 65.820953][ T1724] [ 65.823724][ T1724] dump_stack_lvl+0x151/0x1c0 [ 65.828239][ T1724] ? io_uring_drop_tctx_refs+0x190/0x190 [ 65.833705][ T1724] ? panic+0x760/0x760 [ 65.837610][ T1724] ? __schedule+0xcd4/0x1590 [ 65.842038][ T1724] print_address_description+0x87/0x3b0 [ 65.847421][ T1724] kasan_report+0x179/0x1c0 [ 65.851759][ T1724] ? _raw_spin_lock_irqsave+0x210/0x210 [ 65.857138][ T1724] ? worker_thread+0xaaa/0x12a0 [ 65.861825][ T1724] ? worker_thread+0xaaa/0x12a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.866516][ T1724] __asan_report_load8_noabort+0x14/0x20 [ 65.866518][ T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.866547][ T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.871978][ T1724] worker_thread+0xaaa/0x12a0 [ 65.871999][ T1724] ? _raw_spin_lock+0x1b0/0x1b0 [ 65.872021][ T1724] kthread+0x421/0x510 [ 65.872037][ T1724] ? worker_clr_flags+0x180/0x180 [ 65.872051][ T1724] ? kthread_blkcg+0xd0/0xd0 [ 65.872066][ T1724] ret_from_fork+0x1f/0x30 [ 65.872082][ T1724] [ 65.872089][ T1724] [ 65.913822][ T603] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 65.914594][ T1724] Allocated by task 39: [ 65.923956][ T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.932733][ T1724] ____kasan_kmalloc+0xdb/0x110 [ 65.932756][ T1724] __kasan_kmalloc+0x9/0x10 [ 65.932770][ T1724] __kmalloc+0x13a/0x270 [ 65.957649][ T1724] kvmalloc_node+0x1f0/0x4d0 [ 65.962071][ T1724] alloc_netdev_mqs+0x8c/0xc90 [ 65.966673][ T1724] alloc_etherdev_mqs+0x33/0x40 [ 65.971360][ T1724] usbnet_probe+0x1fc/0x2840 [ 65.975785][ T1724] usb_probe_interface+0x5b6/0xa90 [ 65.980731][ T1724] really_probe+0x28d/0x970 [ 65.985070][ T1724] __driver_probe_device+0x1a0/0x310 [ 65.990194][ T1724] driver_probe_device+0x54/0x3d0 [ 65.995052][ T1724] __device_attach_driver+0x2c5/0x470 [ 65.998562][ T603] usb 2-1: config 0 descriptor?? [ 66.000259][ T1724] bus_for_each_drv+0x183/0x200 [ 66.009717][ T1724] __device_attach+0x312/0x510 [ 66.014317][ T1724] device_initial_probe+0x1a/0x20 [ 66.019177][ T1724] bus_probe_device+0xbe/0x1e0 [ 66.023777][ T1724] device_add+0xb60/0xf10 [ 66.027945][ T1724] usb_set_configuration+0x190f/0x1e80 [ 66.033236][ T1724] usb_generic_driver_probe+0x8b/0x150 [ 66.038535][ T1724] usb_probe_device+0x144/0x260 [ 66.043218][ T1724] really_probe+0x28d/0x970 [ 66.047557][ T1724] __driver_probe_device+0x1a0/0x310 [ 66.052678][ T1724] driver_probe_device+0x54/0x3d0 [ 66.057540][ T1724] __device_attach_driver+0x2c5/0x470 [ 66.062748][ T1724] bus_for_each_drv+0x183/0x200 [ 66.067434][ T1724] __device_attach+0x312/0x510 [ 66.072034][ T1724] device_initial_probe+0x1a/0x20 [ 66.076895][ T1724] bus_probe_device+0xbe/0x1e0 [ 66.081494][ T1724] device_add+0xb60/0xf10 [ 66.085661][ T1724] usb_new_device+0x1038/0x1c00 [ 66.090347][ T1724] hub_event+0x2def/0x4770 [ 66.094600][ T1724] process_one_work+0x6bb/0xc10 [ 66.099292][ T1724] worker_thread+0xad5/0x12a0 [ 66.103802][ T1724] kthread+0x421/0x510 [ 66.107706][ T1724] ret_from_fork+0x1f/0x30 [ 66.111959][ T1724] [ 66.114132][ T1724] Freed by task 39: [ 66.117775][ T1724] kasan_set_track+0x4b/0x70 [ 66.122201][ T1724] kasan_set_free_info+0x23/0x40 [ 66.126977][ T1724] ____kasan_slab_free+0x126/0x160 [ 66.131921][ T1724] __kasan_slab_free+0x11/0x20 [ 66.136524][ T1724] slab_free_freelist_hook+0xbd/0x190 [ 66.141729][ T1724] kfree+0xc8/0x220 [ 66.145374][ T1724] kvfree+0x35/0x40 [ 66.149019][ T1724] netdev_freemem+0x3f/0x60 [ 66.153359][ T1724] netdev_release+0x7f/0xb0 [ 66.157700][ T1724] device_release+0x95/0x1c0 [ 66.162126][ T1724] kobject_put+0x178/0x260 [ 66.166379][ T1724] put_device+0x1f/0x30 [ 66.170371][ T1724] free_netdev+0x34f/0x440 [ 66.174623][ T1724] usbnet_disconnect+0x25f/0x3b0 [ 66.179399][ T1724] usb_unbind_interface+0x1fa/0x8c0 [ 66.184431][ T1724] device_release_driver_internal+0x50b/0x7d0 [ 66.190335][ T1724] device_release_driver+0x19/0x20 [ 66.195286][ T1724] bus_remove_device+0x2f8/0x360 [ 66.200054][ T1724] device_del+0x663/0xe90 [ 66.204221][ T1724] usb_disable_device+0x380/0x720 [ 66.209082][ T1724] usb_disconnect+0x32a/0x890 [ 66.213594][ T1724] hub_event+0x1d42/0x4770 [ 66.217848][ T1724] process_one_work+0x6bb/0xc10 [ 66.222536][ T1724] worker_thread+0xe02/0x12a0 [ 66.227048][ T1724] kthread+0x421/0x510 [ 66.230954][ T1724] ret_from_fork+0x1f/0x30 [ 66.235206][ T1724] [ 66.237376][ T1724] Last potentially related work creation: [ 66.242931][ T1724] kasan_save_stack+0x3b/0x60 [ 66.247442][ T1724] __kasan_record_aux_stack+0xd3/0xf0 [ 66.252651][ T1724] kasan_record_aux_stack_noalloc+0xb/0x10 [ 66.258295][ T1724] insert_work+0x56/0x320 [ 66.262466][ T1724] __queue_work+0x92a/0xcd0 [ 66.266801][ T1724] queue_work_on+0x105/0x170 [ 66.271224][ T1724] usbnet_link_change+0x182/0x1a0 [ 66.276085][ T1724] usbnet_probe+0x1dcb/0x2840 [ 66.280598][ T1724] usb_probe_interface+0x5b6/0xa90 [ 66.285546][ T1724] really_probe+0x28d/0x970 [ 66.289887][ T1724] __driver_probe_device+0x1a0/0x310 [ 66.295006][ T1724] driver_probe_device+0x54/0x3d0 [ 66.299869][ T1724] __device_attach_driver+0x2c5/0x470 [ 66.305075][ T1724] bus_for_each_drv+0x183/0x200 [ 66.309762][ T1724] __device_attach+0x312/0x510 [ 66.314361][ T1724] device_initial_probe+0x1a/0x20 [ 66.319225][ T1724] bus_probe_device+0xbe/0x1e0 [ 66.323823][ T1724] device_add+0xb60/0xf10 [ 66.327988][ T1724] usb_set_configuration+0x190f/0x1e80 [ 66.333285][ T1724] usb_generic_driver_probe+0x8b/0x150 [ 66.338577][ T1724] usb_probe_device+0x144/0x260 [ 66.343265][ T1724] really_probe+0x28d/0x970 [ 66.347605][ T1724] __driver_probe_device+0x1a0/0x310 [ 66.352810][ T1724] driver_probe_device+0x54/0x3d0 [ 66.357671][ T1724] __device_attach_driver+0x2c5/0x470 [ 66.362882][ T1724] bus_for_each_drv+0x183/0x200 [ 66.367566][ T1724] __device_attach+0x312/0x510 [ 66.372166][ T1724] device_initial_probe+0x1a/0x20 [ 66.377028][ T1724] bus_probe_device+0xbe/0x1e0 [ 66.381625][ T1724] device_add+0xb60/0xf10 [ 66.385792][ T1724] usb_new_device+0x1038/0x1c00 [ 66.390480][ T1724] hub_event+0x2def/0x4770 [ 66.394732][ T1724] process_one_work+0x6bb/0xc10 [ 66.399420][ T1724] worker_thread+0xad5/0x12a0 [ 66.403934][ T1724] kthread+0x421/0x510 [ 66.407837][ T1724] ret_from_fork+0x1f/0x30 [ 66.412091][ T1724] [ 66.414266][ T1724] The buggy address belongs to the object at ffff8881154a0000 [ 66.414266][ T1724] which belongs to the cache kmalloc-4k of size 4096 [ 66.428150][ T1724] The buggy address is located 3168 bytes inside of [ 66.428150][ T1724] 4096-byte region [ffff8881154a0000, ffff8881154a1000) [ 66.441430][ T1724] The buggy address belongs to the page: [ 66.446910][ T1724] page:ffffea0004552800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1154a0 [ 66.456969][ T1724] head:ffffea0004552800 order:3 compound_mapcount:0 compound_pincount:0 [ 66.465123][ T1724] flags: 0x4000000000010200(slab|head|zone=1) [ 66.471030][ T1724] raw: 4000000000010200 0000000000000000 0000000300000001 ffff888100043380 [ 66.479448][ T1724] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 66.487864][ T1724] page dumped because: kasan: bad access detected [ 66.494117][ T1724] page_owner tracks the page as allocated [ 66.499666][ T1724] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 115, ts 4371229884, free_ts 0 [ 66.517549][ T1724] post_alloc_hook+0x1a3/0x1b0 [ 66.522157][ T1724] prep_new_page+0x1b/0x110 [ 66.526484][ T1724] get_page_from_freelist+0x3550/0x35d0 [ 66.531868][ T1724] __alloc_pages+0x27e/0x8f0 [ 66.536292][ T1724] new_slab+0x9a/0x4e0 [ 66.540198][ T1724] ___slab_alloc+0x39e/0x830 [ 66.544625][ T1724] __slab_alloc+0x4a/0x90 [ 66.548793][ T1724] kmem_cache_alloc_trace+0x142/0x210 [ 66.553998][ T1724] uevent_show+0x160/0x310 [ 66.558251][ T1724] dev_attr_show+0x56/0xd0 [ 66.562508][ T1724] sysfs_kf_seq_show+0x265/0x3e0 [ 66.567283][ T1724] kernfs_seq_show+0x119/0x160 [ 66.571879][ T1724] seq_read_iter+0x430/0xd00 [ 66.576317][ T1724] kernfs_fop_read_iter+0x145/0x470 [ 66.581338][ T1724] vfs_read+0xa81/0xd40 [ 66.585332][ T1724] ksys_read+0x199/0x2c0 [ 66.589409][ T1724] page_owner free stack trace missing [ 66.594618][ T1724] [ 66.596787][ T1724] Memory state around the buggy address: [ 66.602260][ T1724] ffff8881154a0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.610157][ T1724] ffff8881154a0b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.618058][ T1724] >ffff8881154a0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.625951][ T1724] ^ [ 66.632984][ T1724] ffff8881154a0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.640881][ T1724] ffff8881154a0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.648779][ T1724] ================================================================== [ 66.656678][ T1724] Disabling lock debugging due to kernel taint [ 66.669393][ T370] usb 10-1: can't set config #0, error -71 [ 66.679522][ T370] usb 10-1: USB disconnect, device number 6 [ 66.796508][ T603] usb 2-1: can't set config #0, error -71 [ 66.811925][ T603] usb 2-1: USB disconnect, device number 8 [ 67.576900][ T310] device bridge_slave_1 left promiscuous mode [ 67.582814][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.590118][ T310] device bridge_slave_0 left promiscuous mode [ 67.596024][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.603673][ T310] device veth1_macvtap left promiscuous mode [ 67.609485][ T310] device veth0_vlan left promiscuous mode [ 68.177933][ T310] tipc: Disabling bearer [ 68.183090][ T310] tipc: Left network mode [ 69.177254][ T310] device bridge_slave_1 left promiscuous mode [ 69.183169][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.190448][ T310] device bridge_slave_0 left promiscuous mode [ 69.196435][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.203942][ T310] device bridge_slave_1 left promiscuous mode [ 69.209902][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.217041][ T310] device bridge_slave_0 left promiscuous mode [ 69.222930][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.230591][ T310] device bridge_slave_1 left promiscuous mode [ 69.236528][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.243604][ T310] device bridge_slave_0 left promiscuous mode [ 69.249645][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.257199][ T310] device bridge_slave_1 left promiscuous mode [ 69.263092][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.270351][ T310] device bridge_slave_0 left promiscuous mode [ 69.276240][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.284183][ T310] device veth1_macvtap left promiscuous mode [ 69.289993][ T310] device veth0_vlan left promiscuous mode [ 69.295610][ T310] device veth1_macvtap left promiscuous mode [ 69.301376][ T310] device veth0_vlan left promiscuous mode [ 69.306997][ T310] device veth1_macvtap left promiscuous mode [ 69.312712][ T310] device veth0_vlan left promiscuous mode [ 69.318673][ T310] device veth1_macvtap left promiscuous mode [ 69.324465][ T310] device veth0_vlan left promiscuous mode