last executing test programs: 9.271943401s ago: executing program 4 (id=3115): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.33491961s ago: executing program 4 (id=3120): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000000100)="$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") unlink(&(0x7f0000000140)='./file1\x00') 7.535948137s ago: executing program 4 (id=3127): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x18, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080), 0xffffffc3, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') r8 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) 5.412035336s ago: executing program 2 (id=3133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfc}, {}, {}, {}, {}, {}, {0xfd}]}}) 5.410927165s ago: executing program 4 (id=3136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "ce8869e61c037ea6", "c0f8070000001aeefece1c83a6f8a5e5", 'Ol<8', "9f00009ff5843cfd"}, 0x28) write$binfmt_script(r0, 0x0, 0x0) 5.410731666s ago: executing program 2 (id=3137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) select(0xff42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x77359400}) 5.410285886s ago: executing program 2 (id=3138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000040), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r5, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x0) read$FUSE(r6, &(0x7f00000008c0)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) unshare(0x40020000) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 5.392880707s ago: executing program 4 (id=3142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r7 = socket(0xa, 0x801, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x6, 0x18, 0x0, 0x20000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 4.374755082s ago: executing program 2 (id=3146): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='9p_client_res\x00'}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="02d12865e3cf890ad37dc6c1db039a5130a98c4cf74558b1dcc6c5a6cd057559f1bf3f917c580acbb7ff7741237d7fea1ff2abe3cbd52ee519008c8e7fb8acdad7edd934ea015e0134061f2ca962d438888fe9979f735d401e39f8e4b9df74c909f944b428c76b7f21060000007b25e4b0556e893f664f46072a17e08937ce132565b173dc14c424abcd8d3906266278e09620ece965c6b05beeb9ba67677071b0e47116640412d1e64373e2264e884904d6c54c30f1c4849773bf", 0xbb, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 4.320054497s ago: executing program 3 (id=3147): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x5) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1}]) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x3) 4.203846367s ago: executing program 0 (id=3148): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) 4.190027428s ago: executing program 3 (id=3149): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) 4.131963163s ago: executing program 1 (id=3150): socket$key(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x18, 0x409}, 0x1c}}, 0x0) 4.131448313s ago: executing program 0 (id=3151): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) 4.125447783s ago: executing program 0 (id=3152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) 4.038106731s ago: executing program 2 (id=3153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockname$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {0x0}], 0x3}}], 0x1, 0x2, 0x0) 4.037757071s ago: executing program 1 (id=3154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x40}, 0x1, 0x0, 0x0, 0x20040844}, 0x0) 4.037272671s ago: executing program 1 (id=3155): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4002, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="640100001a0001000000000000000000fe8000000000000000000000000000aa5372000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000006c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024000900000000000000000000000000000000000000000000000000000000000000000008001e000300"], 0x164}, 0x1, 0x0, 0x0, 0x4010}, 0x0) getdents(r5, 0x0, 0x58) 3.831999148s ago: executing program 0 (id=3156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0xfffffffe, 0x3}) lseek(r2, 0x21, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000022c0)=0x7, 0x4) 3.362224318s ago: executing program 3 (id=3157): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) 3.122264578s ago: executing program 1 (id=3158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}}) 3.043933244s ago: executing program 3 (id=3159): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x400) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001500197f09004b0101048c590288ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) io_setup(0x7, &(0x7f0000001040)=0x0) io_submit(r5, 0x1, &(0x7f0000002840)=[&(0x7f0000002800)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) keyctl$KEYCTL_PKEY_ENCRYPT(0x18, &(0x7f0000000400)={0x0, 0x0, 0x1000}, 0x0, &(0x7f0000000980), &(0x7f0000000c00)=""/4096) 3.007247018s ago: executing program 0 (id=3160): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r7, 0x80047453, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) 2.911004165s ago: executing program 1 (id=3161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f00000021c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000e40)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef056", 0xa5, 0xc000, 0x0, 0x0) recvmsg(r0, &(0x7f00000033c0)={0x0, 0x0, 0x0}, 0x20) 668.058454ms ago: executing program 0 (id=3162): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) close(r3) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) 650.183745ms ago: executing program 2 (id=3163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) 645.553265ms ago: executing program 3 (id=3164): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') read$FUSE(r0, &(0x7f000000acc0)={0x2020}, 0x2020) 587.7592ms ago: executing program 3 (id=3165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x1, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x598}}, 0x30) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) write$evdev(0xffffffffffffffff, 0x0, 0x0) 16.162099ms ago: executing program 1 (id=3166): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000540)={[{@data_writeback}, {@data_writeback}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@jqfmt_vfsv0}, {@usrjquota}, {@delalloc}, {@data_writeback}]}, 0xee, 0x46e, &(0x7f0000000c40)="$eJzs3M1vFOUfAPDvTCnwgx+0IqIgaBWNjS8tLagcuGg08aDGRA94rG0hSKGG1kQIkWIMHg2Jd+PRxL/Ak16MejLxZvRuSIgSE9DTmnmD7bZbWth1lP18ksk+z87MPs93n3l2nplndwPoWUMR0R8R/4+InyNiICL6WjcYKh6uXTk7+eeVs5NJNBqv/5ZEEhFXr5ydrDZNysfNZWY4jUg/TIqdW8ydPnN8YmZm+lSZH50/8c7o3OkzTx07MXF0+uj0yfGDBw/sH3v2mfGnOxJnFtfVXe/P7t750psXX5k8fPGt777I6rtjT7G+OY5OGcoC/72Ra133aKcLq9mWpnSyrsaKsCZZX8+aK837/0D0xY3GG4gXP6i1ckBXZeemDe1XLzSAO1gSddcAqEd1os+uf6ul3WCgv/PDj9pdfq64AMrivlYuxZp1+TVRdDnuoYg4vPDXp9kSXboPAQDQ7Kts/PPkcuO/NHY0bbe1nEMZjIi7ImJbRNwdEdsj4p6IfNt7I+K+VZXaaDTOFanWqaGl45/00u3EdzPZ+O9QObe1ePxXjf5isK/Mbcnj70+OHJuZ3le+J8PRvyHLj61Qxtcv/Phxu3XN479sycqvxoJlPS6ta7lBNzUxP9GpQenl80WjLo0/uT4TkETEzojYtbaX3loljj3++e52G908/hV0YJ6p8VnEY0X7L0RL/JVk5fnJ0Y0xM71vtDoqlvr+hwuvtSv/tuLvgKz9Ny0+/lu2GPgjaZ6vnVt7GRd++ajtNc2tHv/rkzfyOev15XPvTczPnxqLWJ+8nOcXPT9+Y98qX22fxT+8d/n+v63cJ4v//ojIDuI9EfFARDxY1v2hiHg4IvauEP+3zz/y9q3H311Z/FPLfv5dP/4HF7f/0sShVyParMoTfce/+bJd+atr/wN5arh8Jv/8u4kVqrMocTvvHQAAAPxXpPl3/5N05Ho6TUdGiu/wb49N6czs3PwTR2bfPTlV/EZgMPrT6k7XQNP90LFkoXzFIj9e3iuu1u8v7xt/0ve/PD8yOTszVXPs0Os2t+n/mV/76q4d0HV+rwW9q7X/pzXVA/jnOf9D79L/oXfp/9C7luv/51ry5gLgzuT8D71L/4fepf9D77qF/n8n/hcY9JpV/Uh+rYnznX7BtSd+2lhn6UUijYha34SuJiL9V1RDYjWJ6s881rBXzR9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfJ3AAAA//8kD+vW") 0s ago: executing program 4 (id=3143): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x42e, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3810744, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@errors_remount}, {@noinit_itable}, {@mblk_io_submit}, {@i_version}, {@acl}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x880, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x0, 0x453, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) fchdir(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) write$cgroup_int(r0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000140), 0xfcb8) kernel console output (not intermixed with test programs): oint 0x81 has invalid wMaxPacketSize 0 [ 578.977887][T10915] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 578.987366][ T6464] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 579.006206][ T6464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.006847][T10915] syz.4.2765[10915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.014090][T10915] syz.4.2765[10915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.015099][ T6464] usb 4-1: config 0 descriptor?? [ 579.520737][ T6464] isku 0003:1E7D:319C.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 579.714279][ T6464] isku 0003:1E7D:319C.0036: couldn't init struct isku_device [ 579.721598][ T6464] isku 0003:1E7D:319C.0036: couldn't install keyboard [ 579.728983][ T6464] isku: probe of 0003:1E7D:319C.0036 failed with error -5 [ 579.882400][ T6464] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 579.918431][ T394] usb 4-1: USB disconnect, device number 48 [ 580.282804][ T6464] usb 5-1: not running at top speed; connect to a high speed hub [ 580.357772][ T6464] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 580.368523][ T6464] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.381152][ T6464] usb 5-1: config 1 interface 0 has no altsetting 0 [ 580.396037][T10416] EXT4-fs (loop3): unmounting filesystem. [ 580.568901][ T6464] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 580.578006][ T6464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.260602][ T6464] usb 5-1: Product:  [ 581.265483][ T6464] usb 5-1: Manufacturer:  [ 581.271128][ T6464] usb 5-1: SerialNumber: 䍎๡濻⿃Ɖ莤톏家㏪茹の爾вႨ鯁෈૲헶䐚ᤂ䶱暋㻦䔱냼펞ꔹ﷎鎈䗎塰骃ﺊ믒葷툂¢ܞ껩鑻቎ᴊ楆糔趑厕ᱤ餣얎ㅝ躏ᇮ攪ᄠ漢꽫噎䚎ꆳ⧥鳸;ꅱ酨걃㜕꟮⪡兮鐓揘䈖㯕䣖褘⅃뭨촥謊鄆휡⦄텶茜疇祿颱藨 [ 581.317350][T10924] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 581.710983][T10924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.729012][T10924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.925671][ T28] audit: type=1400 audit(1729435223.245:36228): avc: denied { setopt } for pid=10923 comm="syz.4.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 581.926381][T10924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.953529][T10924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.045236][ T6464] usb 5-1: USB disconnect, device number 47 [ 582.248405][T10938] loop3: detected capacity change from 0 to 128 [ 582.697688][T10944] loop4: detected capacity change from 0 to 40427 [ 582.704637][T10944] F2FS-fs (loop4): fault_injection options not supported [ 582.711678][T10944] F2FS-fs (loop4): Image doesn't support compression [ 582.718285][T10944] F2FS-fs (loop4): Image doesn't support compression [ 582.724816][T10944] F2FS-fs (loop4): fault_type options not supported [ 582.732043][T10944] F2FS-fs (loop4): invalid crc value [ 582.738425][T10944] F2FS-fs (loop4): Found nat_bits in checkpoint [ 582.773212][T10944] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 582.957494][T10948] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 582.966218][T10948] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 583.265962][T10951] loop3: detected capacity change from 0 to 40427 [ 583.273934][T10951] F2FS-fs (loop3): invalid crc value [ 583.280564][T10951] F2FS-fs (loop3): Found nat_bits in checkpoint [ 583.315135][T10951] F2FS-fs (loop3): Start checkpoint disabled! [ 583.321999][T10951] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 583.410401][T10373] syz-executor: attempt to access beyond end of device [ 583.410401][T10373] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 583.521377][T10955] overlayfs: failed to resolve './file0': -2 [ 583.958013][T10959] loop4: detected capacity change from 0 to 128 [ 584.015586][T10957] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.023666][T10957] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.031294][T10957] device bridge_slave_0 entered promiscuous mode [ 584.055327][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.063061][T10957] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.071571][T10957] device bridge_slave_1 entered promiscuous mode [ 584.092782][ T43] kworker/u4:2: attempt to access beyond end of device [ 584.092782][ T43] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 584.425921][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.432821][T10957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.439941][T10957] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.446790][T10957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.479789][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 584.487879][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.495076][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.512104][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 584.520174][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.527040][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.535874][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 584.544174][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.551038][ T6464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.582973][T10957] device veth0_vlan entered promiscuous mode [ 584.597659][T10957] device veth1_macvtap entered promiscuous mode [ 584.631279][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 584.640384][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 584.651033][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 584.663107][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 584.671387][ T28] audit: type=1400 audit(1729435226.185:36229): avc: denied { map } for pid=10966 comm="syz.3.2775" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 584.671640][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 584.703235][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 584.710517][ T28] audit: type=1400 audit(1729435226.185:36230): avc: denied { execute } for pid=10966 comm="syz.3.2775" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 584.749346][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 584.757752][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 584.765864][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 584.930472][T10979] incfs: Backing dir is not set, filesystem can't be mounted. [ 584.937893][T10979] incfs: mount failed -2 [ 584.948870][ T406] device bridge_slave_1 left promiscuous mode [ 584.955057][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.962955][ T406] device bridge_slave_0 left promiscuous mode [ 584.968950][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.977113][ T406] device veth1_macvtap left promiscuous mode [ 584.983207][ T406] device veth0_vlan left promiscuous mode [ 585.052727][T10975] syz.0.2776[10975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.052789][T10975] syz.0.2776[10975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.134695][T10980] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.152940][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.160918][T10980] device bridge_slave_0 entered promiscuous mode [ 585.175051][T10980] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.184776][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.197741][T10980] device bridge_slave_1 entered promiscuous mode [ 585.581672][T10980] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.588549][T10980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.595669][T10980] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.602429][T10980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.664887][T10993] netlink: 'syz.0.2780': attribute type 4 has an invalid length. [ 585.693361][T10993] netlink: 'syz.0.2780': attribute type 4 has an invalid length. [ 585.752171][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.760410][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.773080][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.788430][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 585.799627][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.806575][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.859023][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 585.879038][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.885951][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.911528][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.928714][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.995454][T10980] device veth0_vlan entered promiscuous mode [ 586.019833][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.032845][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.057689][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 586.080722][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.105743][T11000] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2781'. [ 586.134416][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.142132][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.153253][T10980] device veth1_macvtap entered promiscuous mode [ 586.160508][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 586.169980][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 586.179605][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 586.199530][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 586.208142][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 586.217153][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 586.226064][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 586.420871][T11004] fuse: blksize only supported for fuseblk [ 586.497983][T11007] loop4: detected capacity change from 0 to 2048 [ 586.544926][T11007] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 586.608217][T11005] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.617685][T11005] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.630808][T11005] device bridge_slave_0 entered promiscuous mode [ 586.939825][T11018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2784'. [ 586.940377][T11016] FAULT_INJECTION: forcing a failure. [ 586.940377][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 586.961176][T11016] CPU: 1 PID: 11016 Comm: syz.3.2785 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 586.970764][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 586.980651][T11016] Call Trace: [ 586.983771][T11016] [ 586.986559][T11016] dump_stack_lvl+0x151/0x1b7 [ 586.991064][T11016] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 586.996356][T11016] ? ida_alloc_range+0x9e9/0xa60 [ 587.001136][T11016] dump_stack+0x15/0x1b [ 587.005159][T11016] should_fail_ex+0x3d0/0x520 [ 587.009636][T11016] ? proc_net_ns_init+0x52/0x3a0 [ 587.014415][T11016] __should_failslab+0xaf/0xf0 [ 587.019011][T11016] should_failslab+0x9/0x20 [ 587.023350][T11016] kmem_cache_alloc+0x3b/0x2c0 [ 587.027956][T11016] proc_net_ns_init+0x52/0x3a0 [ 587.032555][T11016] ops_init+0x1cd/0x480 [ 587.036979][T11016] ? memset+0x35/0x40 [ 587.040796][T11016] setup_net+0x4ca/0xd60 [ 587.044875][T11016] ? copy_net_ns+0x5b0/0x5b0 [ 587.049304][T11016] ? __kasan_kmalloc+0x9c/0xb0 [ 587.053902][T11016] copy_net_ns+0x35f/0x5b0 [ 587.058155][T11016] create_new_namespaces+0x416/0x670 [ 587.063275][T11016] unshare_nsproxy_namespaces+0x126/0x180 [ 587.068831][T11016] ksys_unshare+0x542/0xa00 [ 587.073166][T11016] ? fput+0x15b/0x1b0 [ 587.076990][T11016] ? unshare_fd+0x240/0x240 [ 587.081328][T11016] ? debug_smp_processor_id+0x17/0x20 [ 587.086533][T11016] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 587.092447][T11016] __x64_sys_unshare+0x38/0x40 [ 587.097040][T11016] x64_sys_call+0x728/0x9a0 [ 587.101380][T11016] do_syscall_64+0x3b/0xb0 [ 587.105629][T11016] ? clear_bhb_loop+0x55/0xb0 [ 587.110148][T11016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.115871][T11016] RIP: 0033:0x7f603d37dff9 [ 587.120125][T11016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.139570][T11016] RSP: 002b:00007f603e0ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 587.147808][T11016] RAX: ffffffffffffffda RBX: 00007f603d535f80 RCX: 00007f603d37dff9 [ 587.155624][T11016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042040080 [ 587.163439][T11016] RBP: 00007f603e0ed090 R08: 0000000000000000 R09: 0000000000000000 [ 587.171352][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.179153][T11016] R13: 0000000000000000 R14: 00007f603d535f80 R15: 00007fffde8ee318 [ 587.186979][T11016] [ 588.059336][T11005] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.071616][T11005] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.079498][T11005] device bridge_slave_1 entered promiscuous mode [ 588.128923][T10373] EXT4-fs (loop4): unmounting filesystem. [ 588.189066][ T406] device bridge_slave_1 left promiscuous mode [ 588.205972][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.231642][ T406] device bridge_slave_0 left promiscuous mode [ 588.241911][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.252152][ T406] device veth1_macvtap left promiscuous mode [ 588.258109][ T406] device veth0_vlan left promiscuous mode [ 588.559678][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2788'. [ 588.658356][T11041] netlink: 'syz.4.2789': attribute type 4 has an invalid length. [ 588.691035][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 588.702503][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 588.728887][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 588.737269][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 588.745429][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.752329][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.760218][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 588.768933][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 588.777778][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.784766][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.807384][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 588.821697][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 588.830332][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 588.858343][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 588.871626][T11005] device veth0_vlan entered promiscuous mode [ 588.891885][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 588.909827][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 588.923245][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 588.955182][T11005] device veth1_macvtap entered promiscuous mode [ 588.970963][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 589.013312][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 589.035091][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.463227][T11058] loop2: detected capacity change from 0 to 512 [ 589.468507][ T3871] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 589.485233][T11058] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 589.499315][T11058] EXT4-fs (loop2): 1 truncate cleaned up [ 589.505053][T11058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 589.613995][T11005] EXT4-fs (loop2): unmounting filesystem. [ 590.824801][T11068] loop4: detected capacity change from 0 to 1024 [ 590.838940][T11068] EXT4-fs: Ignoring removed orlov option [ 590.937639][T11068] EXT4-fs (loop4): Test dummy encryption mode enabled [ 591.020381][ T3871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.091433][T11068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 591.127972][T11075] loop3: detected capacity change from 0 to 128 [ 591.134229][ T3871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.151088][ T406] device bridge_slave_1 left promiscuous mode [ 591.157176][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.165379][ T406] device bridge_slave_0 left promiscuous mode [ 591.166637][ T3871] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 591.171882][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.189686][ T3871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.197738][ T406] device veth1_macvtap left promiscuous mode [ 591.199299][ T3871] usb 1-1: config 0 descriptor?? [ 591.208745][ T406] device veth0_vlan left promiscuous mode [ 591.287878][T10373] EXT4-fs (loop4): unmounting filesystem. [ 591.321327][T11081] loop4: detected capacity change from 0 to 1024 [ 591.339594][T11081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 591.392095][T11083] fuse: blksize only supported for fuseblk [ 591.642157][T11084] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 48: comm syz.4.2798: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=11, size=1024 fake=0 [ 591.665440][T11084] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 48: comm syz.4.2798: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=11, size=1024 fake=0 [ 591.905286][ T3871] usbhid 1-1:0.0: can't add hid device: -71 [ 591.911221][ T3871] usbhid: probe of 1-1:0.0 failed with error -71 [ 591.925619][ T3871] usb 1-1: USB disconnect, device number 59 [ 592.017319][T11088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2800'. [ 592.057618][T11086] loop3: detected capacity change from 0 to 40427 [ 592.064833][T11086] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 592.071210][T11086] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 592.101900][T11086] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 592.120421][T10373] EXT4-fs (loop4): unmounting filesystem. [ 592.142982][T11086] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 592.150935][T11086] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 592.153475][T11096] loop4: detected capacity change from 0 to 2048 [ 592.186616][T11096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 592.552658][T11109] netlink: 'syz.0.2804': attribute type 4 has an invalid length. [ 592.562763][T11109] netlink: 'syz.0.2804': attribute type 4 has an invalid length. [ 592.770615][T10416] syz-executor: attempt to access beyond end of device [ 592.770615][T10416] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 592.955258][T11117] loop3: detected capacity change from 0 to 512 [ 592.986597][T11117] EXT4-fs (loop3): Test dummy encryption mode enabled [ 593.011902][T10373] EXT4-fs (loop4): unmounting filesystem. [ 593.020917][T11117] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.2806: invalid block [ 593.066554][T11117] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2806: couldn't read orphan inode 11 (err -117) [ 593.162048][T11117] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 593.162062][T11115] xt_hashlimit: size too large, truncated to 1048576 [ 593.975794][T10416] EXT4-fs (loop3): unmounting filesystem. [ 594.008332][T11134] loop3: detected capacity change from 0 to 2048 [ 594.109378][T11139] loop2: detected capacity change from 0 to 256 [ 594.136450][T11139] FAT-fs (loop2): Directory bread(block 64) failed [ 594.163007][T11139] FAT-fs (loop2): Directory bread(block 65) failed [ 594.171618][T11139] FAT-fs (loop2): Directory bread(block 66) failed [ 594.177668][T11134] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 594.186785][T11139] FAT-fs (loop2): Directory bread(block 67) failed [ 594.202043][T11139] FAT-fs (loop2): Directory bread(block 68) failed [ 594.208909][T11139] FAT-fs (loop2): Directory bread(block 69) failed [ 594.215578][T11139] FAT-fs (loop2): Directory bread(block 70) failed [ 594.222816][T11139] FAT-fs (loop2): Directory bread(block 71) failed [ 594.229529][T11139] FAT-fs (loop2): Directory bread(block 72) failed [ 594.236115][T11139] FAT-fs (loop2): Directory bread(block 73) failed [ 594.547782][T11146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11146 comm=syz.0.2812 [ 594.817822][T10416] EXT4-fs (loop3): unmounting filesystem. [ 594.839259][T11153] loop3: detected capacity change from 0 to 1024 [ 594.845960][T11153] EXT4-fs: Ignoring removed bh option [ 594.852160][T11153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 594.870894][T11153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 594.887856][ T28] audit: type=1326 audit(1729435237.150:36231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff37dff9 code=0x7fc00000 [ 594.945236][T11158] loop2: detected capacity change from 0 to 1024 [ 594.952052][T11158] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 594.962626][T11158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 595.195408][ T296] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 595.257486][T11163] fuse: blksize only supported for fuseblk [ 595.279258][ T327] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 595.531033][ T327] usb 3-1: device descriptor read/64, error -71 [ 595.568298][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.579267][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.589024][ T296] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 595.597913][ T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.606283][ T296] usb 4-1: config 0 descriptor?? [ 595.894453][ T327] usb 3-1: device descriptor read/64, error -71 [ 596.064204][ T296] isku 0003:1E7D:319C.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 596.165440][ T327] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 596.286502][T11172] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 596.295154][T11172] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 596.500324][ T327] usb 3-1: device descriptor read/64, error -71 [ 596.522184][ T296] usb 4-1: USB disconnect, device number 49 [ 597.043499][T10416] EXT4-fs (loop3): unmounting filesystem. [ 597.124834][ T327] usb 3-1: device descriptor read/64, error -71 [ 597.381014][ T327] usb usb3-port1: attempt power cycle [ 597.405046][T11187] fuse: Bad value for 'user_id' [ 597.410048][T11187] capability: warning: `syz.1.2822' uses 32-bit capabilities (legacy support in use) [ 597.534835][ T6464] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 597.848173][ T327] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 597.870426][ T6464] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.881634][ T6464] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 597.892455][ T6464] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 597.904119][ T6464] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 598.056901][ T6464] usb 4-1: New USB device found, idVendor=0565, idProduct=a4a1, bcdDevice= 0.40 [ 598.066106][ T6464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.074098][ T6464] usb 4-1: Product: syz [ 598.078628][ T6464] usb 4-1: Manufacturer: syz [ 598.083158][ T6464] usb 4-1: SerialNumber: syz [ 598.112805][T11184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 598.387189][ T327] usb 3-1: device descriptor read/8, error -71 [ 598.417605][T11184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 598.424927][T11184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 598.765155][ T327] usb 3-1: device descriptor read/8, error -71 [ 599.027043][T11184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 599.034192][T11184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 599.041433][ T327] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 599.391679][ T327] usb 3-1: device descriptor read/8, error -71 [ 599.633621][T11219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.643195][T11219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.650856][ T6464] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 599.657293][ T6464] cdc_ncm 4-1:1.0: dwNtbInMaxSize=2 is too small. Using 2048 [ 599.664881][ T6464] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 599.669393][ T327] usb 3-1: device descriptor read/8, error -71 [ 599.792966][ T327] usb usb3-port1: unable to enumerate USB device [ 599.849903][T11223] netlink: 'syz.0.2829': attribute type 4 has an invalid length. [ 599.855748][ T6464] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 599.865672][T11223] netlink: 'syz.0.2829': attribute type 4 has an invalid length. [ 599.873280][ T6464] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 599.885936][ T6464] usb 4-1: USB disconnect, device number 50 [ 599.892820][ T6464] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 600.127307][ T28] audit: type=1400 audit(1729435242.783:36232): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 600.232092][T11225] syz.1.2830[11225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.232150][T11225] syz.1.2830[11225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.161157][ T6464] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 601.225604][T11245] loop3: detected capacity change from 0 to 256 [ 601.241847][T11245] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 601.402807][ T6464] usb 2-1: Using ep0 maxpacket: 16 [ 601.663902][ T6464] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 601.672890][ T6464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.680705][ T6464] usb 2-1: Product: syz [ 601.684694][ T6464] usb 2-1: Manufacturer: syz [ 601.689060][ T6464] usb 2-1: SerialNumber: syz [ 601.694455][ T6464] usb 2-1: config 0 descriptor?? [ 601.746530][ T6464] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 601.757632][ T6464] usb 2-1: Detected FT232H [ 601.924861][ T6464] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 602.240035][ T6464] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 602.247017][ T6464] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 602.410530][T11238] kvm: vcpu 0: requested 136 ns lapic timer period limited to 200000 ns [ 602.468470][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.475444][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.482706][T11257] device bridge_slave_0 entered promiscuous mode [ 602.494469][T11257] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.501378][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.508710][T11257] device bridge_slave_1 entered promiscuous mode [ 602.570320][T11257] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.577230][T11257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.584306][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.591111][T11257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.613778][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 602.621268][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.629194][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.640453][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 602.648556][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.655509][ T6464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.671606][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.679585][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.686467][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.694422][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 602.727566][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 602.744269][ T28] audit: type=1400 audit(1729435245.583:36233): avc: denied { transfer } for pid=11262 comm="syz.3.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 602.745210][T11263] binder: 11262:11263 ioctl c018620b 20000380 returned -14 [ 602.767489][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 602.784885][T11257] device veth0_vlan entered promiscuous mode [ 602.792336][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 602.799598][T11265] loop3: detected capacity change from 0 to 1024 [ 602.800646][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 602.807043][T11265] EXT4-fs: Ignoring removed bh option [ 602.814112][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 602.819400][T11265] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 602.835154][T11257] device veth1_macvtap entered promiscuous mode [ 602.846621][T11265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 602.855839][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 602.872611][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 602.881125][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.127826][ T377] device bridge_slave_1 left promiscuous mode [ 603.133864][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.141407][ T377] device bridge_slave_0 left promiscuous mode [ 603.147494][ T6464] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 603.148511][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.162890][ T377] device veth1_macvtap left promiscuous mode [ 603.168934][ T377] device veth0_vlan left promiscuous mode [ 603.481514][ T6464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.492295][ T6464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.502006][ T6464] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 603.510858][ T6464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.519342][ T6464] usb 4-1: config 0 descriptor?? [ 603.727404][T11274] loop4: detected capacity change from 0 to 16 [ 603.734158][T11274] erofs: (device loop4): mounted with root inode @ nid 36. [ 603.753167][ T3871] usb 2-1: USB disconnect, device number 41 [ 603.767223][ T3871] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 603.776594][ T3871] ftdi_sio 2-1:0.0: device disconnected [ 603.883702][T11279] netlink: 'syz.4.2842': attribute type 4 has an invalid length. [ 603.894157][T11279] netlink: 'syz.4.2842': attribute type 4 has an invalid length. [ 603.969178][ T6464] isku 0003:1E7D:319C.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 604.114794][T11281] syz.1.2843[11281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.115374][T11281] syz.1.2843[11281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.142130][T11281] FAULT_INJECTION: forcing a failure. [ 604.142130][T11281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.166184][T11281] CPU: 1 PID: 11281 Comm: syz.1.2843 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 604.175815][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 604.185714][T11281] Call Trace: [ 604.188833][T11281] [ 604.191611][T11281] dump_stack_lvl+0x151/0x1b7 [ 604.196127][T11281] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 604.201417][T11281] ? preempt_schedule_irq+0xe7/0x140 [ 604.206538][T11281] ? preempt_schedule_notrace+0x140/0x140 [ 604.212094][T11281] dump_stack+0x15/0x1b [ 604.216096][T11281] should_fail_ex+0x3d0/0x520 [ 604.220598][T11281] should_fail+0xb/0x10 [ 604.224593][T11281] should_fail_usercopy+0x1a/0x20 [ 604.229451][T11281] copy_to_user_nofault+0x7c/0x140 [ 604.234398][T11281] bpf_probe_write_user+0x96/0xf0 [ 604.239448][T11281] bpf_prog_6303d92f98284ad8+0x3b/0x3f [ 604.244832][T11281] bpf_trace_run4+0x18d/0x2f0 [ 604.249340][T11281] ? bpf_trace_run3+0x2e0/0x2e0 [ 604.254113][T11281] ? __this_cpu_preempt_check+0x13/0x20 [ 604.259494][T11281] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 604.266001][T11281] ? probe_sched_switch+0x60/0x80 [ 604.270862][T11281] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 604.277025][T11281] __bpf_trace_sched_switch+0xe/0x10 [ 604.282143][T11281] __traceiter_sched_switch+0x91/0xc0 [ 604.287357][T11281] __schedule+0x1313/0x1560 [ 604.291698][T11281] ? release_firmware_map_entry+0x191/0x191 [ 604.297418][T11281] ? __kasan_check_write+0x14/0x20 [ 604.302369][T11281] ? kstrtouint_from_user+0x124/0x180 [ 604.307575][T11281] preempt_schedule_irq+0xc7/0x140 [ 604.312522][T11281] ? preempt_schedule_notrace+0x140/0x140 [ 604.318081][T11281] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 604.323807][T11281] irqentry_exit+0x30/0x40 [ 604.328060][T11281] sysvec_reschedule_ipi+0x80/0x160 [ 604.333095][T11281] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 604.338386][T11281] RIP: 0010:vfs_write+0x67e/0xed0 [ 604.343249][T11281] Code: e8 03 42 80 3c 38 00 74 0f 48 8b 7c 24 18 e8 39 5b f7 ff 48 8b 5c 24 18 48 8b 1b e9 4b 03 00 00 e8 97 19 b0 ff e9 7a 01 00 00 <48> 8b 44 24 20 48 8d 58 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 [ 604.362718][T11281] RSP: 0018:ffffc90000767c60 EFLAGS: 00000246 [ 604.368589][T11281] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88811e555100 [ 604.376403][T11281] RDX: ffff88811e555100 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.384211][T11281] RBP: ffffc90000767df0 R08: ffffffff81c5879d R09: ffffed1023caaa26 [ 604.392026][T11281] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888125f396a0 [ 604.399834][T11281] R13: 0000000000000001 R14: 1ffff920000ecf9c R15: 00000000000f801b [ 604.407647][T11281] ? vfs_write+0x46d/0xed0 [ 604.411912][T11281] ? file_end_write+0x1c0/0x1c0 [ 604.416586][T11281] ? mutex_lock+0xb1/0x1e0 [ 604.420840][T11281] ? bit_wait_io_timeout+0x120/0x120 [ 604.425968][T11281] ? __fdget_pos+0x2e2/0x390 [ 604.430388][T11281] ? ksys_write+0x77/0x2c0 [ 604.434642][T11281] ksys_write+0x199/0x2c0 [ 604.438821][T11281] ? __ia32_sys_read+0x90/0x90 [ 604.443406][T11281] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 604.448875][T11281] __x64_sys_write+0x7b/0x90 [ 604.453303][T11281] x64_sys_call+0x2f/0x9a0 [ 604.457551][T11281] do_syscall_64+0x3b/0xb0 [ 604.461807][T11281] ? clear_bhb_loop+0x55/0xb0 [ 604.466320][T11281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.472045][T11281] RIP: 0033:0x7f6bd377cadf [ 604.476299][T11281] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 604.495738][T11281] RSP: 002b:00007f6bd4618030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 604.503984][T11281] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f6bd377cadf [ 604.511796][T11281] RDX: 0000000000000001 RSI: 00007f6bd4618090 RDI: 0000000000000009 [ 604.519607][T11281] RBP: 00007f6bd4618090 R08: 0000000000000000 R09: 00007f6bd4617df7 [ 604.527418][T11281] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 604.535229][T11281] R13: 0000000000000000 R14: 00007f6bd3936130 R15: 00007ffcd3101b58 [ 604.543135][T11281] [ 604.548838][T11280] fuse: Bad value for 'fd' [ 604.599066][T11005] EXT4-fs (loop2): unmounting filesystem. [ 604.750184][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.757069][T11288] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.764609][T11288] device bridge_slave_0 entered promiscuous mode [ 604.767913][ T327] usb 4-1: USB disconnect, device number 51 [ 604.772109][T11288] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.783750][T11288] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.791707][T11288] device bridge_slave_1 entered promiscuous mode [ 604.902018][T11288] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.908941][T11288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.916046][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.922948][T11288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.961768][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 604.969985][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.978177][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.002982][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.011599][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.018495][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.026740][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.035162][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.042048][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.058890][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 605.077277][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 605.108678][T11288] device veth0_vlan entered promiscuous mode [ 605.115417][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 605.124108][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 605.134300][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 605.141744][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 605.208103][T11295] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 605.217026][T11295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 605.347398][T10416] EXT4-fs (loop3): unmounting filesystem. [ 605.422344][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 605.431143][T11288] device veth1_macvtap entered promiscuous mode [ 605.444192][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 605.460372][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 605.550583][ T28] audit: type=1400 audit(1729435248.587:36234): avc: denied { write } for pid=11304 comm="syz.1.2849" path="socket:[60835]" dev="sockfs" ino=60835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 605.812061][T11306] fuse: Invalid rootmode [ 606.013653][ T377] device bridge_slave_1 left promiscuous mode [ 606.036394][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.459363][ T377] device bridge_slave_0 left promiscuous mode [ 606.466012][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.513999][ T377] device veth1_macvtap left promiscuous mode [ 606.543326][ T377] device veth0_vlan left promiscuous mode [ 606.622978][ T28] audit: type=1400 audit(1729435248.587:36235): avc: denied { nlmsg_read } for pid=11304 comm="syz.1.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 606.895570][T11314] loop4: detected capacity change from 0 to 16 [ 606.920689][T11314] erofs: (device loop4): mounted with root inode @ nid 36. [ 607.004667][ T6] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 607.212053][T11317] overlayfs: upper fs is r/o, try multi-lower layers mount [ 607.414168][T11319] loop3: detected capacity change from 0 to 1024 [ 607.503793][T11319] EXT4-fs: Ignoring removed bh option [ 607.581522][T11319] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 607.915659][T11319] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 608.039439][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 608.374650][ T327] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 608.449823][ T6] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 608.457254][ T6] usb 3-1: can't read configurations, error -71 [ 608.766877][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.824341][T11336] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 608.833190][T11336] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 608.885953][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.941378][ T327] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 608.985926][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.045955][ T327] usb 4-1: config 0 descriptor?? [ 609.159426][T11338] loop4: detected capacity change from 0 to 40427 [ 609.175296][T11338] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 609.183251][T11338] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 609.250174][T11338] F2FS-fs (loop4): Found nat_bits in checkpoint [ 609.309732][T11338] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 609.316779][T11338] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 609.654675][ T327] isku 0003:1E7D:319C.0039: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 609.714295][ T327] isku 0003:1E7D:319C.0039: couldn't init struct isku_device [ 609.721741][ T327] isku 0003:1E7D:319C.0039: couldn't install keyboard [ 609.729530][ T327] isku: probe of 0003:1E7D:319C.0039 failed with error -5 [ 609.764431][ T7650] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 609.896491][ T327] usb 4-1: USB disconnect, device number 52 [ 609.965723][T11359] loop4: detected capacity change from 0 to 40427 [ 609.972811][T11359] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 609.979187][T11359] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 609.989629][T11359] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 610.025282][T11359] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 610.032336][T11359] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 610.108885][ T7650] usb 2-1: config 0 has no interfaces? [ 610.114219][ T7650] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 610.133492][ T7650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.152059][ T7650] usb 2-1: config 0 descriptor?? [ 610.242006][T11365] loop2: detected capacity change from 0 to 40427 [ 610.254042][T11365] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 610.260405][T11365] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 610.272760][T11365] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 610.317547][T11365] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 610.324698][T11365] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 610.337272][T11365] syz.2.2861[11365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.337357][T11365] syz.2.2861[11365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.426438][T10416] EXT4-fs (loop3): unmounting filesystem. [ 610.801031][T11257] syz-executor: attempt to access beyond end of device [ 610.801031][T11257] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 610.955736][T11375] loop3: detected capacity change from 0 to 40427 [ 610.994619][ T9644] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 611.119152][T11375] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 611.127780][T11375] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 611.182128][T11381] loop2: detected capacity change from 0 to 40427 [ 611.189971][T11381] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 611.196273][T11381] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 611.198728][ T7650] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 611.242233][T11381] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 611.308343][T11381] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 611.315492][T11381] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 611.345308][T11381] syz.2.2864[11381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.345394][T11381] syz.2.2864[11381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.393178][T11391] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.412183][T11391] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.419861][T11391] device bridge_slave_0 entered promiscuous mode [ 611.433602][T11391] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.440656][T11391] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.448160][T11391] device bridge_slave_1 entered promiscuous mode [ 611.745355][T11391] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.752348][T11391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.759491][T11391] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.766351][T11391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.795153][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 611.804401][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.811865][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.812367][ T7650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.829756][ T7650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.840623][ T7650] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 611.849693][ T7650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.865029][ T7650] usb 5-1: config 0 descriptor?? [ 611.875472][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.884558][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.891469][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.899140][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 611.908424][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.915318][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.938631][ T28] audit: type=1400 audit(1729435255.443:36236): avc: denied { setopt } for pid=11398 comm="syz.2.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 611.957294][T11391] device veth0_vlan entered promiscuous mode [ 611.965774][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.974488][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 611.983417][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 611.991217][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 611.998663][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 612.006892][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 612.025159][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 612.034944][T11391] device veth1_macvtap entered promiscuous mode [ 612.048393][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 612.061957][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 612.077627][ T394] usb 2-1: USB disconnect, device number 42 [ 612.273954][T11408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2865'. [ 612.327193][ T10] device bridge_slave_1 left promiscuous mode [ 612.333398][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.341285][ T10] device bridge_slave_0 left promiscuous mode [ 612.347599][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.370681][ T10] device veth1_macvtap left promiscuous mode [ 612.509445][T11379] loop4: detected capacity change from 0 to 40427 [ 612.530874][T11379] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 612.538723][T11379] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 612.552695][T11379] F2FS-fs (loop4): Found nat_bits in checkpoint [ 612.611598][T11379] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 612.618755][T11379] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 613.145615][T11428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2872'. [ 613.209391][T11428] loop2: detected capacity change from 0 to 512 [ 613.216727][T11428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 613.265819][T11428] EXT4-fs (loop2): 1 truncate cleaned up [ 613.271488][T11428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 613.772801][T11431] syz.1.2874[11431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.772863][T11431] syz.1.2874[11431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 614.233249][T11288] EXT4-fs (loop2): unmounting filesystem. [ 614.248354][ T7650] usbhid 5-1:0.0: can't add hid device: -71 [ 614.262110][ T7650] usbhid: probe of 5-1:0.0 failed with error -71 [ 614.270406][ T7650] usb 5-1: USB disconnect, device number 48 [ 614.279785][T11448] loop3: detected capacity change from 0 to 1024 [ 614.313478][T11448] EXT4-fs: Ignoring removed orlov option [ 614.326493][T11448] EXT4-fs (loop3): Test dummy encryption mode enabled [ 614.348571][T11448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 614.554557][T11450] loop2: detected capacity change from 0 to 40427 [ 614.570489][T11450] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 614.587681][T11450] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 614.605678][T11450] F2FS-fs (loop2): invalid crc value [ 614.628731][T11450] F2FS-fs (loop2): Found nat_bits in checkpoint [ 614.684696][ T394] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 614.759590][T11454] loop4: detected capacity change from 0 to 40427 [ 614.763450][T11450] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 614.772994][T11450] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 614.785082][T11444] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 614.786267][T11454] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 614.793670][T11444] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 614.808358][T11454] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 614.821391][T11454] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 614.858234][T11454] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 614.865558][T11454] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 614.888297][T11454] syz.4.2876[11454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 614.888386][T11454] syz.4.2876[11454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 615.393386][ T394] usb 4-1: device descriptor read/all, error -61 [ 615.514308][ T28] audit: type=1400 audit(1729435259.273:36237): avc: denied { create } for pid=11465 comm="syz.0.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 615.570221][ T394] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 615.878023][ T394] usb 4-1: device descriptor read/64, error -71 [ 616.288349][ T6] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 616.316363][ T394] usb 4-1: device descriptor read/64, error -71 [ 616.376936][T11491] loop4: detected capacity change from 0 to 512 [ 616.407339][T11491] ext4: Unknown parameter '"' [ 616.428296][ T394] usb usb4-port1: attempt power cycle [ 616.642563][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 616.800523][ T6] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 616.809698][ T394] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 616.817355][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.825265][ T6] usb 1-1: Product: syz [ 616.832187][ T6] usb 1-1: Manufacturer: syz [ 616.839661][ T6] usb 1-1: SerialNumber: syz [ 616.854108][ T6] usb 1-1: config 0 descriptor?? [ 616.986994][ T394] usb 4-1: device descriptor read/8, error -71 [ 617.067931][T10416] EXT4-fs (loop3): unmounting filesystem. [ 617.282240][ T394] usb 4-1: device descriptor read/8, error -71 [ 617.296413][T11479] syz.0.2884 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 618.223688][ T7650] usb 1-1: USB disconnect, device number 60 [ 618.367203][T11501] syz.1.2888[11501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.367284][T11501] syz.1.2888[11501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.382180][T11519] loop3: detected capacity change from 0 to 512 [ 618.444069][T11519] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.2893: casefold flag without casefold feature [ 618.457022][T11519] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.2893: missing EA_INODE flag [ 618.469306][T11519] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2893: error while reading EA inode 2 err=-117 [ 618.496439][T11524] loop2: detected capacity change from 0 to 1024 [ 618.497554][T11519] EXT4-fs (loop3): 1 orphan inode deleted [ 618.508781][T11519] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 619.166274][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'. [ 619.303614][T11524] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 619.476484][T10416] EXT4-fs (loop3): unmounting filesystem. [ 619.571811][T11538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2895'. [ 619.653755][T11524] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 48: comm syz.2.2894: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=11, size=1024 fake=0 [ 619.657680][T11543] loop3: detected capacity change from 0 to 128 [ 619.682062][T11515] loop4: detected capacity change from 0 to 40427 [ 619.689003][T11524] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 48: comm syz.2.2894: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=11, size=1024 fake=0 [ 619.697522][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 619.758257][ T9933] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 619.769874][T11288] EXT4-fs (loop2): unmounting filesystem. [ 619.777883][T11543] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 619.983508][T11550] syz.3.2897: attempt to access beyond end of device [ 619.983508][T11550] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 620.015348][T11550] syz.3.2897: attempt to access beyond end of device [ 620.015348][T11550] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 620.051853][T11552] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 620.060513][T11552] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 620.129455][T11547] loop2: detected capacity change from 0 to 40427 [ 620.136914][T11547] F2FS-fs (loop2): fault_injection options not supported [ 620.144210][T11547] F2FS-fs (loop2): Image doesn't support compression [ 620.150836][T11547] F2FS-fs (loop2): Image doesn't support compression [ 620.157415][T11547] F2FS-fs (loop2): fault_type options not supported [ 620.193572][T11547] F2FS-fs (loop2): invalid crc value [ 620.217531][T11547] F2FS-fs (loop2): Found nat_bits in checkpoint [ 620.229331][T11555] loop4: detected capacity change from 0 to 1024 [ 620.242094][T11555] EXT4-fs: Ignoring removed orlov option [ 620.257891][T11555] EXT4-fs (loop4): Test dummy encryption mode enabled [ 620.290137][T11547] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 620.349678][T11555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 620.389079][T11558] incfs: Backing dir is not set, filesystem can't be mounted. [ 620.396479][T11558] incfs: mount failed -2 [ 620.608495][T11568] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 620.617290][T11568] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 621.319311][T11288] syz-executor: attempt to access beyond end of device [ 621.319311][T11288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 621.460679][ T6464] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 621.635756][T11583] x_tables: duplicate underflow at hook 2 [ 621.691786][T11586] loop2: detected capacity change from 0 to 512 [ 621.710836][T11586] ext4: Unknown parameter '"' [ 621.814872][ T6464] usb 5-1: config 0 has no interfaces? [ 621.820709][ T6464] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 621.854679][ T6464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.880501][ T6464] usb 5-1: config 0 descriptor?? [ 622.097625][T11593] loop3: detected capacity change from 0 to 1024 [ 622.161871][T11593] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 622.191578][T11593] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 48: comm syz.3.2909: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=11, size=1024 fake=0 [ 622.215318][T11593] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 48: comm syz.3.2909: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=11, size=1024 fake=0 [ 622.242621][T10416] EXT4-fs (loop3): unmounting filesystem. [ 622.282352][T11596] loop3: detected capacity change from 0 to 128 [ 622.336062][T11598] loop3: detected capacity change from 0 to 512 [ 622.354437][T11598] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 622.370606][T11598] EXT4-fs (loop3): 1 orphan inode deleted [ 622.376829][T11598] EXT4-fs (loop3): 1 truncate cleaned up [ 622.382798][T11598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 624.379256][T11615] loop2: detected capacity change from 0 to 16 [ 624.732561][T11615] erofs: (device loop2): mounted with root inode @ nid 36. [ 624.887202][T10416] EXT4-fs (loop3): unmounting filesystem. [ 624.927400][T11257] EXT4-fs (loop4): unmounting filesystem. [ 624.938722][ T6464] usb 5-1: USB disconnect, device number 49 [ 626.106499][T11641] loop3: detected capacity change from 0 to 1024 [ 626.216341][T11648] loop2: detected capacity change from 0 to 128 [ 626.223649][T11641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 626.494549][T11651] fuse: blksize only supported for fuseblk [ 626.552025][T11641] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 48: comm syz.3.2921: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=11, size=1024 fake=0 [ 626.576372][T11641] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 48: comm syz.3.2921: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=11, size=1024 fake=0 [ 626.604594][T10416] EXT4-fs (loop3): unmounting filesystem. [ 626.642204][T11656] loop3: detected capacity change from 0 to 128 [ 626.830082][T11662] loop2: detected capacity change from 0 to 16 [ 626.905533][T11662] erofs: (device loop2): mounted with root inode @ nid 36. [ 627.081761][T11665] loop4: detected capacity change from 0 to 512 [ 627.108718][T11665] EXT4-fs (loop4): Test dummy encryption mode enabled [ 627.121688][T11665] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.2927: invalid block [ 627.133442][T11665] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2927: couldn't read orphan inode 11 (err -117) [ 627.145770][T11665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 628.648642][ T8846] kworker/u4:7: attempt to access beyond end of device [ 628.648642][ T8846] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 628.664320][T11680] loop2: detected capacity change from 0 to 2048 [ 628.675106][T11257] EXT4-fs (loop4): unmounting filesystem. [ 628.911396][T11680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 630.007629][ T6830] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 630.050434][T11702] loop4: detected capacity change from 0 to 40427 [ 630.058137][T11288] EXT4-fs (loop2): unmounting filesystem. [ 630.069464][T11702] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 630.081186][T11702] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 630.157704][T11702] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 630.203146][T11702] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 630.210384][T11702] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 630.247864][T11711] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 630.256621][T11711] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.340151][T11707] loop2: detected capacity change from 0 to 40427 [ 630.347142][T11707] F2FS-fs (loop2): fault_injection options not supported [ 630.354374][T11707] F2FS-fs (loop2): Image doesn't support compression [ 630.361719][ T6830] usb 4-1: Using ep0 maxpacket: 16 [ 630.362334][T11707] F2FS-fs (loop2): Image doesn't support compression [ 630.373654][T11707] F2FS-fs (loop2): fault_type options not supported [ 630.385555][T11707] F2FS-fs (loop2): invalid crc value [ 630.470423][T11707] F2FS-fs (loop2): Found nat_bits in checkpoint [ 630.511202][ T6830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.661411][ T6830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.697600][ T6830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 630.717709][ T6830] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 630.726196][T11707] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 630.727051][ T6830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.793647][T11723] loop4: detected capacity change from 0 to 512 [ 630.807824][T11723] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 630.829264][T11723] EXT4-fs (loop4): 1 orphan inode deleted [ 630.834974][T11723] EXT4-fs (loop4): 1 truncate cleaned up [ 630.840775][T11723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 630.925249][T11707] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 630.933871][T11707] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.955588][ T6830] usb 4-1: config 0 descriptor?? [ 631.896803][T11288] syz-executor: attempt to access beyond end of device [ 631.896803][T11288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 631.929047][T11257] EXT4-fs (loop4): unmounting filesystem. [ 632.411593][T11750] loop2: detected capacity change from 0 to 512 [ 632.423551][T11750] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 632.448364][T11750] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 632.464046][T11750] EXT4-fs (loop2): 1 truncate cleaned up [ 632.465082][ T6830] microsoft 0003:045E:07DA.003A: unbalanced collection at end of report description [ 632.480006][ T6830] microsoft 0003:045E:07DA.003A: parse failed [ 632.486228][ T6830] microsoft: probe of 0003:045E:07DA.003A failed with error -22 [ 632.486633][T11750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 632.907319][T11756] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.2943: corrupted xattr block 19 [ 632.932992][T11756] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 635.043758][ T2230] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 635.083370][ T512] usb 4-1: USB disconnect, device number 57 [ 635.097465][T11288] EXT4-fs (loop2): unmounting filesystem. [ 635.599280][ T2230] usb 2-1: device descriptor read/64, error -71 [ 635.888796][ T512] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 635.967603][ T2230] usb 2-1: device descriptor read/64, error -71 [ 636.224405][ T2230] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 636.298942][ T512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.309869][ T512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.319619][ T512] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 636.328529][ T512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.337462][ T512] usb 5-1: config 0 descriptor?? [ 636.476072][ T2230] usb 2-1: device descriptor read/64, error -71 [ 636.521548][T11787] loop3: detected capacity change from 0 to 40427 [ 636.528712][T11787] F2FS-fs (loop3): fault_injection options not supported [ 636.536221][T11787] F2FS-fs (loop3): Image doesn't support compression [ 636.542963][T11787] F2FS-fs (loop3): Image doesn't support compression [ 636.549558][T11787] F2FS-fs (loop3): fault_type options not supported [ 636.556958][T11787] F2FS-fs (loop3): invalid crc value [ 636.563469][T11787] F2FS-fs (loop3): Found nat_bits in checkpoint [ 636.620766][T11787] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 636.727695][ T512] usbhid 5-1:0.0: can't add hid device: -71 [ 636.733674][ T512] usbhid: probe of 5-1:0.0 failed with error -71 [ 636.741434][ T512] usb 5-1: USB disconnect, device number 50 [ 636.760562][T11792] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 636.769199][T11792] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 636.835548][T11790] loop4: detected capacity change from 0 to 40427 [ 636.842691][T11790] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 636.850056][T11790] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 636.859688][T11790] F2FS-fs (loop4): invalid crc value [ 636.870357][ T2230] usb 2-1: device descriptor read/64, error -71 [ 636.881414][T11790] F2FS-fs (loop4): Found nat_bits in checkpoint [ 636.918190][T11790] F2FS-fs (loop4): Start checkpoint disabled! [ 636.925267][T11790] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 636.932299][T11790] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 636.977753][T11800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2956'. [ 636.987913][ T2230] usb usb2-port1: attempt power cycle [ 637.334866][T10416] syz-executor: attempt to access beyond end of device [ 637.334866][T10416] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 637.426770][ T2230] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 637.709891][ T2230] usb 2-1: device descriptor read/8, error -71 [ 637.976699][ T2230] usb 2-1: device descriptor read/8, error -71 [ 638.176959][T11804] loop2: detected capacity change from 0 to 40427 [ 638.192896][T11804] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 638.227043][T11804] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 638.243457][T11804] F2FS-fs (loop2): Found nat_bits in checkpoint [ 638.293643][ T2230] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 638.346779][T11804] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 638.354329][T11804] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 638.535972][ T2230] usb 2-1: device descriptor read/8, error -71 [ 638.889501][ T28] audit: type=1400 audit(1729435284.357:36238): avc: denied { mounton } for pid=11803 comm="syz.2.2959" path="/proc/86/task" dev="proc" ino=62696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 638.895318][T11827] loop3: detected capacity change from 0 to 512 [ 639.793863][T11838] netlink: 'syz.0.2963': attribute type 4 has an invalid length. [ 639.809276][T11838] netlink: 'syz.0.2963': attribute type 4 has an invalid length. [ 639.865333][T11827] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 640.098651][T11827] ext4 filesystem being mounted at /75/bus supports timestamps until 2038 (0x7fffffff) [ 640.182480][T11846] loop2: detected capacity change from 0 to 512 [ 640.193036][T11846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 640.224470][T11846] EXT4-fs (loop2): 1 truncate cleaned up [ 640.229952][T11846] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 640.288165][T11846] loop2: detected capacity change from 512 to 511 [ 640.297237][T11846] EXT4-fs error (device loop2): ext4_xattr_ibody_get:603: inode #15: comm syz.2.2965: corrupted in-inode xattr [ 640.321061][T11846] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.2965: corrupted in-inode xattr [ 640.332903][ T2230] usb 2-1: device descriptor read/8, error -71 [ 640.447246][ T2230] usb usb2-port1: unable to enumerate USB device [ 640.462793][T11288] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 640.496447][ T28] audit: type=1400 audit(1729435286.085:36239): avc: denied { write } for pid=11825 comm="syz.3.2962" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 640.496467][T11851] random: crng reseeded on system resumption [ 640.531785][T11288] EXT4-fs (loop2): unmounting filesystem. [ 640.656602][T10416] EXT4-fs (loop3): unmounting filesystem. [ 640.745050][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 640.756554][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 641.858097][T11874] loop4: detected capacity change from 0 to 1024 [ 641.892182][T11874] EXT4-fs: Ignoring removed bh option [ 641.892748][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.907441][T11874] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 641.921796][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.940223][T11862] device bridge_slave_0 entered promiscuous mode [ 641.950670][T11876] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.957725][T11876] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.970432][T11874] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 641.983970][T11862] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.993342][T11862] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.013785][T11862] device bridge_slave_1 entered promiscuous mode [ 642.038509][T11876] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 642.062877][T11882] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 642.085864][ T8846] device bridge_slave_1 left promiscuous mode [ 642.092074][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.099396][ T8846] device bridge_slave_0 left promiscuous mode [ 642.105343][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.113262][ T8846] device veth1_macvtap left promiscuous mode [ 642.299912][T11886] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.306828][T11886] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.313691][ T2230] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 642.321794][T11886] device bridge_slave_0 entered promiscuous mode [ 642.336549][T11886] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.343767][T11886] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.352587][T11886] device bridge_slave_1 entered promiscuous mode [ 642.360943][T11862] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.367820][T11862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.375001][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.381784][T11862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.457851][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.465801][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.473459][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 642.480868][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 642.509626][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 642.517909][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.524782][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.533353][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 642.541527][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.548392][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.576401][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 642.584544][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 642.612325][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 642.620573][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 642.638628][T11862] device veth0_vlan entered promiscuous mode [ 642.644631][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 642.652705][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 642.660289][ T2230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.671579][ T2230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.683224][ T2230] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 642.692131][ T2230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.701137][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 642.708565][ T2230] usb 5-1: config 0 descriptor?? [ 642.713726][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 642.728635][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 642.736832][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 642.747819][T11862] device veth1_macvtap entered promiscuous mode [ 642.761351][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 642.769794][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 642.778168][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 642.793704][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 642.801915][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 642.820944][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 642.832423][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 642.845579][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 642.855961][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 642.877024][T11898] loop2: detected capacity change from 0 to 512 [ 642.895541][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.902515][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.902847][T11898] ext4: Unknown parameter '"' [ 642.925528][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 642.953829][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 642.965300][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 642.982949][ T3871] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.989825][ T3871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.004487][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 643.012728][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 643.020857][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 643.029022][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.056942][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 643.065164][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 643.078975][T11886] device veth0_vlan entered promiscuous mode [ 643.085552][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 643.093994][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 643.101791][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 643.116188][T11886] device veth1_macvtap entered promiscuous mode [ 643.132510][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 643.148141][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 643.157907][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 643.168533][ T2230] isku 0003:1E7D:319C.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 643.179844][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 643.188269][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 643.198818][ T8846] device bridge_slave_1 left promiscuous mode [ 643.204937][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.213300][ T8846] device bridge_slave_0 left promiscuous mode [ 643.219667][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.228084][ T8846] device veth1_macvtap left promiscuous mode [ 643.655891][ T2230] isku 0003:1E7D:319C.003B: couldn't init struct isku_device [ 643.671942][ T2230] isku 0003:1E7D:319C.003B: couldn't install keyboard [ 643.867296][T11909] fuse: blksize only supported for fuseblk [ 644.281331][ T28] audit: type=1400 audit(1729435290.151:36240): avc: denied { mount } for pid=11911 comm="syz.0.2981" name="/" dev="ramfs" ino=63630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 644.282513][T11912] overlayfs: failed to resolve './file2': -2 [ 644.293953][ T2230] isku: probe of 0003:1E7D:319C.003B failed with error -5 [ 644.319671][ T2230] usb 5-1: USB disconnect, device number 51 [ 644.391829][T11919] loop2: detected capacity change from 0 to 1024 [ 644.414666][T11919] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 644.429646][T11919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 644.515329][ T28] audit: type=1400 audit(1729435290.398:36241): avc: denied { unmount } for pid=11391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 644.687010][T11257] EXT4-fs (loop4): unmounting filesystem. [ 644.817924][ T6] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 645.487810][T11934] incfs: Backing dir is not set, filesystem can't be mounted. [ 645.495230][T11934] incfs: mount failed -2 [ 645.657891][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 646.183548][ T512] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 646.215929][ T6] usb 3-1: device descriptor read/64, error -71 [ 647.674187][ T28] audit: type=1400 audit(1729435293.767:36242): avc: denied { setopt } for pid=11947 comm="syz.0.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 647.716465][ T28] audit: type=1400 audit(1729435293.788:36243): avc: denied { bind } for pid=11947 comm="syz.0.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 647.736683][ T28] audit: type=1400 audit(1729435293.788:36244): avc: denied { node_bind } for pid=11947 comm="syz.0.2991" saddr=fe88::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 647.968856][ T6] usb 3-1: device descriptor read/64, error -71 [ 647.977567][ T512] usb 5-1: device descriptor read/64, error -71 [ 648.104449][T11960] loop3: detected capacity change from 0 to 40427 [ 648.111609][T11960] F2FS-fs (loop3): fault_injection options not supported [ 648.119538][T11960] F2FS-fs (loop3): invalid crc value [ 648.128556][T11960] F2FS-fs (loop3): Found nat_bits in checkpoint [ 648.179864][T11960] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 648.197619][T11960] syz.3.2992: attempt to access beyond end of device [ 648.197619][T11960] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 648.220259][ T6] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 648.322752][ T6830] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 648.471777][ T512] usb 5-1: device descriptor read/64, error -71 [ 648.510279][T11972] loop4: detected capacity change from 0 to 1024 [ 648.516896][T11972] EXT4-fs: Ignoring removed orlov option [ 648.523129][T11972] EXT4-fs (loop4): Test dummy encryption mode enabled [ 648.531979][T11972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 648.639412][ T2037] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 648.713871][ T6830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.724752][ T6830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.734436][ T6830] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 648.741801][ T6] usb 3-1: device descriptor read/64, error -71 [ 648.743720][ T6830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.757877][ T6830] usb 2-1: config 0 descriptor?? [ 648.909575][ T2037] usb 4-1: device descriptor read/64, error -71 [ 648.937529][ T512] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 648.965560][ T327] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 649.105365][ T6] usb 3-1: device descriptor read/64, error -71 [ 649.217289][ T6] usb usb3-port1: attempt power cycle [ 649.219459][ T6830] isku 0003:1E7D:319C.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 649.310473][ T512] usb 5-1: config 0 has no interfaces? [ 649.315813][ T2037] usb 4-1: device descriptor read/64, error -71 [ 649.321945][ T512] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 649.330894][ T512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.339556][ T512] usb 5-1: config 0 descriptor?? [ 649.357071][ T327] usb 1-1: config 0 has no interfaces? [ 649.362837][ T327] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 649.371871][ T327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.381028][ T327] usb 1-1: config 0 descriptor?? [ 649.422420][ T6830] isku 0003:1E7D:319C.003C: couldn't init struct isku_device [ 649.430211][ T6830] isku 0003:1E7D:319C.003C: couldn't install keyboard [ 649.437421][ T6830] isku: probe of 0003:1E7D:319C.003C failed with error -5 [ 649.599307][ T6] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 649.599348][ T2037] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 649.617384][ T6830] usb 2-1: USB disconnect, device number 47 [ 649.767104][ T6] usb 3-1: device descriptor read/8, error -71 [ 649.869704][ T2037] usb 4-1: device descriptor read/64, error -71 [ 650.018743][ T6] usb 3-1: device descriptor read/8, error -71 [ 650.270389][ T2037] usb 4-1: device descriptor read/64, error -71 [ 650.270387][ T6] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 650.344985][ T592] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 650.400908][ T2037] usb usb4-port1: attempt power cycle [ 650.428859][ T6] usb 3-1: device descriptor read/8, error -71 [ 650.643243][ T6] usb 3-1: device descriptor read/8, error -71 [ 650.680731][ T592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.692130][ T592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.702124][ T592] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice=20.00 [ 650.711376][ T592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.711614][T10416] syz-executor: attempt to access beyond end of device [ 650.711614][T10416] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 650.721182][ T592] usb 2-1: config 0 descriptor?? [ 650.755135][ T6] usb usb3-port1: unable to enumerate USB device [ 651.314386][ T6830] usb 5-1: USB disconnect, device number 53 [ 651.320767][T11257] EXT4-fs (loop4): unmounting filesystem. [ 651.460274][ T327] usb 1-1: USB disconnect, device number 61 [ 651.648615][T12002] loop3: detected capacity change from 0 to 128 [ 651.655344][T12002] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 651.746191][T12004] incfs: Backing dir is not set, filesystem can't be mounted. [ 651.753653][T12004] incfs: mount failed -2 [ 651.785128][T12005] syz.3.3002: attempt to access beyond end of device [ 651.785128][T12005] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 651.798268][T12005] syz.3.3002: attempt to access beyond end of device [ 651.798268][T12005] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 652.581306][T12013] loop3: detected capacity change from 0 to 512 [ 652.603180][T12013] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 652.621426][T12013] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 652.636038][T12013] EXT4-fs (loop3): 1 truncate cleaned up [ 652.641754][T12013] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 652.871303][ T28] audit: type=1400 audit(1729435299.346:36245): avc: denied { read append } for pid=12012 comm="syz.3.3004" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 653.392582][T10416] EXT4-fs (loop3): unmounting filesystem. [ 653.560128][T12026] loop3: detected capacity change from 0 to 40427 [ 653.567008][T12026] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 653.573205][T12026] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 653.584102][T12026] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 653.611532][T12026] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 653.618437][T12026] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 653.896687][ T592] usbhid 2-1:0.0: can't add hid device: -71 [ 653.902462][ T592] usbhid: probe of 2-1:0.0 failed with error -71 [ 653.916233][ T592] usb 2-1: USB disconnect, device number 48 [ 654.219245][T11862] EXT4-fs (loop2): unmounting filesystem. [ 654.297836][T10416] syz-executor: attempt to access beyond end of device [ 654.297836][T10416] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 654.741468][T12039] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.748472][T12039] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.756114][T12039] device bridge_slave_0 entered promiscuous mode [ 654.763172][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.770060][T12039] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.777414][T12039] device bridge_slave_1 entered promiscuous mode [ 654.832879][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.839759][T12039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.846836][T12039] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.853668][T12039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.878950][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.887167][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.894332][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.904014][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.912273][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.919122][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.929611][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.937776][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.944634][ T6464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.973445][T12039] device veth0_vlan entered promiscuous mode [ 654.979346][ T296] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 655.005178][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 655.014104][T12049] loop4: detected capacity change from 0 to 512 [ 655.020965][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 655.029113][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 655.045129][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 655.053622][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.055316][T12049] EXT4-fs (loop4): 1 orphan inode deleted [ 655.061474][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.067140][T12049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 655.083344][T12049] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038 (0x7fffffff) [ 655.100692][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 655.110436][T12039] device veth1_macvtap entered promiscuous mode [ 655.124583][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 655.143404][ T2037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.174331][ T395] device bridge_slave_1 left promiscuous mode [ 655.183227][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.193184][ T395] device bridge_slave_0 left promiscuous mode [ 655.199193][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.207603][ T395] device veth1_macvtap left promiscuous mode [ 655.213659][ T395] device veth0_vlan left promiscuous mode [ 655.220290][ T296] usb 4-1: Using ep0 maxpacket: 16 [ 655.626547][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 99, changing to 10 [ 655.639742][T11257] EXT4-fs (loop4): unmounting filesystem. [ 655.651241][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24724, setting to 1024 [ 655.662266][ T296] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 655.671116][ T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.682789][ T296] usb 4-1: config 0 descriptor?? [ 655.699166][T12064] loop4: detected capacity change from 0 to 512 [ 655.716131][T12064] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 655.724988][T12064] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff) [ 656.131004][ T28] audit: type=1400 audit(1729435302.854:36246): avc: denied { bind } for pid=12045 comm="syz.3.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 656.658508][T12077] xt_TCPMSS: Only works on TCP SYN packets [ 656.669335][T11257] EXT4-fs (loop4): unmounting filesystem. [ 656.692740][T12081] loop4: detected capacity change from 0 to 512 [ 656.699108][T12081] ext4: Unknown parameter '"' [ 656.738547][T12076] loop2: detected capacity change from 0 to 40427 [ 656.745602][T12076] F2FS-fs (loop2): fault_injection options not supported [ 656.752609][T12076] F2FS-fs (loop2): Image doesn't support compression [ 656.759619][T12076] F2FS-fs (loop2): Image doesn't support compression [ 656.766262][T12076] F2FS-fs (loop2): fault_type options not supported [ 656.773622][T12076] F2FS-fs (loop2): invalid crc value [ 656.779864][T12076] F2FS-fs (loop2): Found nat_bits in checkpoint [ 656.816363][T12076] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 656.978827][T12087] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 656.987483][T12087] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 657.463256][T12039] syz-executor: attempt to access beyond end of device [ 657.463256][T12039] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 657.520572][T12090] loop4: detected capacity change from 0 to 2048 [ 657.553414][T12090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 657.736364][ T296] usbhid 4-1:0.0: can't add hid device: -71 [ 657.742422][ T296] usbhid: probe of 4-1:0.0 failed with error -71 [ 657.768143][ T296] usb 4-1: USB disconnect, device number 61 [ 657.789445][T12096] loop2: detected capacity change from 0 to 4096 [ 657.796257][T12096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 657.807011][T12096] EXT4-fs (loop2): Test dummy encryption mode enabled [ 657.819361][T12096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 657.897629][T12102] netlink: 'syz.3.3021': attribute type 4 has an invalid length. [ 657.939442][T12102] netlink: 'syz.3.3021': attribute type 4 has an invalid length. [ 658.339889][T11257] EXT4-fs (loop4): unmounting filesystem. [ 658.367156][T12104] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 658.375990][T12104] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 658.453886][ T6830] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 658.830205][T12115] loop4: detected capacity change from 0 to 16 [ 658.839661][T12115] erofs: (device loop4): mounted with root inode @ nid 36. [ 658.957694][ T6830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.018886][ T6830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.073213][ T6830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.114499][ T6830] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 659.119841][T12107] loop3: detected capacity change from 0 to 40427 [ 659.124061][ T6830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.142026][T12107] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 659.152255][ T6830] usb 3-1: config 0 descriptor?? [ 659.157659][T12107] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 659.177371][T12107] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 659.280949][T12107] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 659.287885][T12107] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 659.300653][T12107] syz.3.3023[12107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.300729][T12107] syz.3.3023[12107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.639890][ T6830] acrux 0003:1A34:0802.003D: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 659.831820][ T6830] acrux 0003:1A34:0802.003D: no inputs found [ 659.837750][ T6830] acrux 0003:1A34:0802.003D: Failed to enable force feedback support, error: -19 [ 659.933080][ T2230] usb 3-1: USB disconnect, device number 67 [ 660.040780][T12135] loop4: detected capacity change from 0 to 1024 [ 660.329857][T12133] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.337169][T12133] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.344534][T12133] device bridge_slave_0 entered promiscuous mode [ 660.364067][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.372284][T12133] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.383588][T12133] device bridge_slave_1 entered promiscuous mode [ 660.625634][T12143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3027'. [ 660.634923][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3027'. [ 660.648806][T12143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12143 comm=syz.3.3027 [ 660.713068][T12146] loop4: detected capacity change from 0 to 512 [ 660.760405][T12146] ext4: Unknown parameter '"' [ 660.789220][T12039] EXT4-fs (loop2): unmounting filesystem. [ 660.855119][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.862017][T12133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.869121][T12133] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.875871][T12133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.941587][T12133] device veth0_vlan entered promiscuous mode [ 660.962214][T12133] device veth1_macvtap entered promiscuous mode [ 660.969981][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 660.977368][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 661.053402][T12155] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 661.062059][T12155] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 661.440242][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 661.449867][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 661.457872][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 661.465887][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 661.474241][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 661.482172][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 661.489727][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 661.497159][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 661.513940][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 661.522304][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 661.535868][T12163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.549730][T12163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.551019][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 661.575304][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 661.584642][ T8846] device bridge_slave_1 left promiscuous mode [ 661.593412][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.601880][ T8846] device bridge_slave_0 left promiscuous mode [ 661.602116][T12166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3025'. [ 661.607980][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.635496][ T8846] device veth1_macvtap left promiscuous mode [ 661.642060][ T8846] device veth0_vlan left promiscuous mode [ 662.105575][ T2230] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 662.431533][T12177] loop3: detected capacity change from 0 to 16 [ 662.442834][T12177] erofs: (device loop3): mounted with root inode @ nid 36. [ 662.593217][T12187] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 662.601941][T12187] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 662.831786][ T2230] usb 5-1: config 1 interface 0 has no altsetting 0 [ 663.218957][T12198] fuse: blksize only supported for fuseblk [ 664.470213][T12212] loop3: detected capacity change from 0 to 1024 [ 664.507752][T12212] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 664.614696][ T2230] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.40 [ 664.623788][ T2230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.631965][ T2230] usb 5-1: Product: с [ 664.635966][ T2230] usb 5-1: Manufacturer: 龥齜밄紆笠᳕挒㍀౳곡⸮듰짇ൖ輌䈷ṯ웆鍷팧僀ᡐ徹䩼簶䡤٠図릒⣐浱縈ਘ凙턻྇ᯌ䩞ᘽ礏㗷蚖嚋룢㊖喙멩ꇹ햍䩉糍㴗ꏼ忮᫯ [ 664.670799][ T2230] usb 5-1: can't set config #1, error -71 [ 664.683697][ T2230] usb 5-1: USB disconnect, device number 54 [ 664.686671][T12224] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 48: comm syz.3.3047: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=11, size=1024 fake=0 [ 664.714295][T12224] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 48: comm syz.3.3047: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=11, size=1024 fake=0 [ 665.381255][T10416] EXT4-fs (loop3): unmounting filesystem. [ 665.928871][ T2230] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 666.320400][ T2230] usb 2-1: config 0 has no interfaces? [ 666.325961][ T2230] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 666.341344][ T2230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.358263][ T2230] usb 2-1: config 0 descriptor?? [ 667.288155][T12257] netlink: 'syz.3.3055': attribute type 4 has an invalid length. [ 667.316664][T12257] netlink: 'syz.3.3055': attribute type 4 has an invalid length. [ 668.116094][ T717] usb 2-1: USB disconnect, device number 49 [ 670.001328][ T28] audit: type=1400 audit(1729435317.456:36247): avc: denied { write } for pid=12267 comm="syz.3.3061" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 670.720635][T12284] xt_hashlimit: size too large, truncated to 1048576 [ 672.153247][ T28] audit: type=1400 audit(1729435320.053:36248): avc: denied { create } for pid=12294 comm="syz.1.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 672.583665][T12296] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.590680][T12296] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.598276][T12296] device bridge_slave_0 entered promiscuous mode [ 672.605673][T12296] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.612745][T12296] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.623231][T12296] device bridge_slave_1 entered promiscuous mode [ 672.670045][T12310] loop3: detected capacity change from 0 to 256 [ 672.690655][T12310] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 672.737370][T12296] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.744263][T12296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.751346][T12296] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.758181][T12296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.891560][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 672.933447][T12286] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.941590][T12286] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.086764][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 673.101845][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.108753][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.116294][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 673.124807][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.131770][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.156346][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 673.214715][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 673.237675][T12296] device veth0_vlan entered promiscuous mode [ 673.251751][T12296] device veth1_macvtap entered promiscuous mode [ 673.621555][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 673.739217][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 673.748973][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 673.758497][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.767789][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.776090][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.798531][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 673.843965][T12330] tmpfs: Bad value for 'size' [ 675.346264][ T43] device bridge_slave_1 left promiscuous mode [ 675.392336][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.427104][ T43] device bridge_slave_0 left promiscuous mode [ 675.447425][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.483089][ T43] device veth1_macvtap left promiscuous mode [ 676.115604][T12355] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.156876][T12373] loop4: detected capacity change from 0 to 512 [ 676.166556][T12355] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.183024][T12373] EXT4-fs: Ignoring removed oldalloc option [ 676.202654][T12355] device bridge_slave_0 entered promiscuous mode [ 676.202931][T12373] EXT4-fs: Ignoring removed i_version option [ 676.214916][T12373] EXT4-fs: Ignoring removed bh option [ 676.253095][T12354] loop3: detected capacity change from 0 to 40427 [ 676.274503][T12355] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.287247][T12354] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 676.305203][T12355] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.315591][T12354] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 676.316527][T12373] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz.4.3089: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 676.378063][T12373] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.3089: couldn't read orphan inode 16 (err -117) [ 676.392543][T12354] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 676.422206][T12355] device bridge_slave_1 entered promiscuous mode [ 676.508458][T12373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 676.568723][T12354] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 676.582517][T12354] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 676.601155][T12373] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 676.758584][T12355] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.765477][T12355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.772612][T12355] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.779486][T12355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.817192][T12387] fuse: Bad value for 'fd' [ 677.258190][T12390] binder: 12384:12390 ioctl c0306201 20000680 returned -14 [ 677.285600][T12296] EXT4-fs (loop4): unmounting filesystem. [ 677.381462][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 677.389306][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.397595][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 677.407592][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 677.417296][T10416] syz-executor: attempt to access beyond end of device [ 677.417296][T10416] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 677.432677][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 677.450810][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 677.459538][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 677.472543][T12355] device veth0_vlan entered promiscuous mode [ 677.480353][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 677.490453][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 677.517671][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 677.526365][ T28] audit: type=1400 audit(1729435325.814:36249): avc: denied { ioctl } for pid=12395 comm="syz.4.3094" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 677.568383][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 677.612671][T12355] device veth1_macvtap entered promiscuous mode [ 677.637019][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 677.653132][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 677.681080][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 677.749416][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 677.758692][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 677.768358][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 677.777799][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 679.296718][T12419] loop3: detected capacity change from 0 to 1024 [ 680.190386][T12419] EXT4-fs: quotafile must be on filesystem root [ 681.268202][ T43] device bridge_slave_1 left promiscuous mode [ 681.319215][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.370969][ T43] device bridge_slave_0 left promiscuous mode [ 681.376998][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.385036][ T43] device veth1_macvtap left promiscuous mode [ 681.921777][ T28] audit: type=1400 audit(1729435330.524:36250): avc: denied { create } for pid=12439 comm="syz.0.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 683.162035][T12464] loop3: detected capacity change from 0 to 512 [ 683.187590][T12464] EXT4-fs: Ignoring removed oldalloc option [ 683.338727][T12464] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.3112: Parent and EA inode have the same ino 15 [ 683.359300][T12464] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.3112: Parent and EA inode have the same ino 15 [ 683.378888][T12464] EXT4-fs (loop3): 1 orphan inode deleted [ 683.384896][T12464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 683.802219][T10416] EXT4-fs (loop3): unmounting filesystem. [ 683.948179][T12482] loop3: detected capacity change from 0 to 256 [ 684.537487][T12493] loop4: detected capacity change from 0 to 512 [ 684.680213][T12493] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.3120: corrupted inode contents [ 684.776430][T12493] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #16: comm syz.4.3120: mark_inode_dirty error [ 684.793306][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3121'. [ 684.794856][T12493] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.3120: corrupted inode contents [ 684.813946][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3121'. [ 684.876884][T12493] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.3120: mark_inode_dirty error [ 684.902637][T12493] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.3120: corrupted inode contents [ 684.915269][T12493] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 684.924024][T12493] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.3120: corrupted inode contents [ 684.936054][T12493] EXT4-fs error (device loop4): ext4_truncate:4302: inode #16: comm syz.4.3120: mark_inode_dirty error [ 684.947487][T12493] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 684.961968][T12502] xt_socket: unknown flags 0xc [ 684.969350][T12493] EXT4-fs (loop4): 1 truncate cleaned up [ 684.974971][T12493] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 684.986720][T12493] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 684.996982][ T377] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 685.006850][ T377] EXT4-fs error (device loop4): ext4_release_dquot:6787: comm kworker/u4:4: Failed to release dquot type 1 [ 685.027634][T12493] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 685.038740][T12493] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 685.049613][ T28] audit: type=1400 audit(1729435333.883:36251): avc: denied { read } for pid=12503 comm="syz.0.3123" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 685.074957][T12493] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.3120: Failed to acquire dquot type 1 [ 685.086382][ T28] audit: type=1400 audit(1729435333.883:36252): avc: denied { open } for pid=12503 comm="syz.0.3123" path="/4/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 685.138955][T12296] EXT4-fs (loop4): unmounting filesystem. [ 685.148019][ T395] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 685.160266][ T395] EXT4-fs error (device loop4): ext4_release_dquot:6787: comm kworker/u4:5: Failed to release dquot type 1 [ 685.427613][T12523] xt_hashlimit: invalid interval [ 685.475773][T12521] loop4: detected capacity change from 0 to 40427 [ 685.497232][T12521] F2FS-fs (loop4): Found nat_bits in checkpoint [ 685.540866][T12521] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 685.647718][ T28] audit: type=1400 audit(1729435334.526:36253): avc: denied { connect } for pid=12531 comm="syz.3.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 686.002606][ T28] audit: type=1400 audit(1729435334.676:36254): avc: denied { setattr } for pid=12520 comm="syz.4.3127" name="#25" dev="loop4" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 686.026354][ T28] audit: type=1400 audit(1729435334.676:36255): avc: denied { link } for pid=12520 comm="syz.4.3127" name="#25" dev="loop4" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 686.354284][T12296] F2FS-fs (loop4): access invalid blkaddr:2048 [ 686.361349][T12296] CPU: 0 PID: 12296 Comm: syz-executor Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 686.371166][T12296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 686.381067][T12296] Call Trace: [ 686.384185][T12296] [ 686.386960][T12296] dump_stack_lvl+0x151/0x1b7 [ 686.391470][T12296] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 686.396772][T12296] ? f2fs_get_next_page_offset+0x770/0x770 [ 686.402408][T12296] dump_stack+0x15/0x1b [ 686.406421][T12296] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 686.411782][T12296] f2fs_is_valid_blkaddr+0x25/0x30 [ 686.416726][T12296] f2fs_map_blocks+0xd22/0x4340 [ 686.421419][T12296] ? mempool_alloc_slab+0x1d/0x30 [ 686.426303][T12296] ? f2fs_map_lock+0x260/0x260 [ 686.430877][T12296] ? xa_load+0x1a1/0x210 [ 686.434954][T12296] ? xas_find_conflict+0x8c0/0x8c0 [ 686.439915][T12296] ? folio_unlock+0x5c/0x70 [ 686.444241][T12296] f2fs_mpage_readpages+0xc65/0x20f0 [ 686.449372][T12296] ? get_page_from_freelist+0x27ea/0x2870 [ 686.454975][T12296] ? xas_load+0x39d/0x3b0 [ 686.459086][T12296] ? dquot_release_reservation_block+0xa0/0xa0 [ 686.465079][T12296] ? __this_cpu_preempt_check+0x13/0x20 [ 686.470451][T12296] ? memcg_rstat_updated+0x4f/0x110 [ 686.475501][T12296] f2fs_readahead+0xfd/0x250 [ 686.479911][T12296] ? blk_start_plug+0x9c/0x130 [ 686.484520][T12296] read_pages+0x1be/0xd40 [ 686.488686][T12296] ? workingset_activation+0x430/0x430 [ 686.493976][T12296] ? folio_add_lru+0x280/0x3f0 [ 686.498582][T12296] ? page_cache_ra_unbounded+0x690/0x690 [ 686.504040][T12296] ? filemap_add_folio+0x18f/0x200 [ 686.508988][T12296] ? __filemap_add_folio+0xd10/0xd10 [ 686.514112][T12296] page_cache_ra_unbounded+0x4c1/0x690 [ 686.519405][T12296] ? readahead_gfp_mask+0x190/0x190 [ 686.524434][T12296] ? __kernel_text_address+0xd/0x40 [ 686.529484][T12296] ? unwind_get_return_address+0x4d/0x90 [ 686.534940][T12296] page_cache_ra_order+0x987/0xc40 [ 686.539906][T12296] ? do_page_cache_ra+0x110/0x110 [ 686.544748][T12296] ? __stack_depot_save+0x36/0x480 [ 686.549782][T12296] ? putname+0xfa/0x150 [ 686.553773][T12296] ondemand_readahead+0x91a/0xee0 [ 686.558638][T12296] ? kasan_set_track+0x4b/0x70 [ 686.563232][T12296] ? kasan_save_free_info+0x2b/0x40 [ 686.568362][T12296] ? ____kasan_slab_free+0x131/0x180 [ 686.573476][T12296] ? do_syscall_64+0x3b/0xb0 [ 686.577902][T12296] ? page_cache_sync_ra+0x450/0x450 [ 686.582938][T12296] ? blk_cgroup_congested+0x132/0x150 [ 686.588150][T12296] page_cache_sync_ra+0x3d6/0x450 [ 686.593090][T12296] f2fs_readdir+0x599/0xc10 [ 686.597444][T12296] ? f2fs_fill_dentries+0xd00/0xd00 [ 686.602474][T12296] ? __this_cpu_preempt_check+0x13/0x20 [ 686.607859][T12296] ? memcg_rstat_updated+0x4f/0x110 [ 686.612896][T12296] ? security_file_permission+0x86/0xb0 [ 686.618271][T12296] iterate_dir+0x265/0x600 [ 686.622519][T12296] ? f2fs_fill_dentries+0xd00/0xd00 [ 686.627560][T12296] __se_sys_getdents64+0x1c1/0x460 [ 686.632503][T12296] ? __x64_sys_getdents64+0x90/0x90 [ 686.637535][T12296] ? filldir+0x670/0x670 [ 686.641616][T12296] ? debug_smp_processor_id+0x17/0x20 [ 686.646837][T12296] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 686.652730][T12296] ? exit_to_user_mode_prepare+0x39/0xa0 [ 686.658195][T12296] __x64_sys_getdents64+0x7b/0x90 [ 686.663063][T12296] x64_sys_call+0x5ae/0x9a0 [ 686.667391][T12296] do_syscall_64+0x3b/0xb0 [ 686.671651][T12296] ? clear_bhb_loop+0x55/0xb0 [ 686.676246][T12296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.681976][T12296] RIP: 0033:0x7fee363b0193 [ 686.686229][T12296] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 686.705793][T12296] RSP: 002b:00007ffff5e93db8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 686.714038][T12296] RAX: ffffffffffffffda RBX: 0000555556ac74e0 RCX: 00007fee363b0193 [ 686.721845][T12296] RDX: 0000000000008000 RSI: 0000555556ac74e0 RDI: 0000000000000005 [ 686.729660][T12296] RBP: 0000555556ac74b4 R08: 0000000000000000 R09: 0000000000000000 [ 686.737470][T12296] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 686.745284][T12296] R13: 0000000000000010 R14: 0000555556ac74b0 R15: 00007ffff5e96060 [ 686.753099][T12296] [ 686.758277][T12296] syz-executor: attempt to access beyond end of device [ 686.758277][T12296] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 686.772567][T12296] syz-executor: attempt to access beyond end of device [ 686.772567][T12296] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 686.813286][ T395] kworker/u4:5: attempt to access beyond end of device [ 686.813286][ T395] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 688.255657][T12570] tty tty27: ldisc open failed (-12), clearing slot 26 [ 688.471090][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.484330][T12584] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.493555][T12584] device bridge_slave_0 entered promiscuous mode [ 688.510743][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.517682][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.525289][T12584] device bridge_slave_1 entered promiscuous mode [ 688.708093][ T377] device bridge_slave_1 left promiscuous mode [ 688.714671][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.722773][ T377] device bridge_slave_0 left promiscuous mode [ 688.728893][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.737577][ T377] device veth1_macvtap left promiscuous mode [ 688.745111][ T377] device veth0_vlan left promiscuous mode [ 688.801939][T12611] overlayfs: missing 'lowerdir' [ 689.349827][ T28] audit: type=1400 audit(1729435338.496:36256): avc: denied { bind } for pid=12618 comm="syz.3.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 689.508309][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 689.516140][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.533126][ T2230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 689.541538][ T2230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 689.551233][ T2230] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.557516][T12622] EXT4-fs (sda1): shut down requested (2) [ 689.558241][ T2230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.563853][T12622] Aborting journal on device sda1-8. [ 689.576819][ T2230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 689.585754][ T2230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 689.594670][ T2230] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.601553][ T2230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.641225][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 689.648961][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.657391][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.679110][ T2230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 689.687772][ T2230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 689.695836][ T2230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 689.703568][ T2230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 689.711630][T12584] device veth0_vlan entered promiscuous mode [ 689.766798][ T28] audit: type=1400 audit(1729435338.947:36257): avc: denied { nlmsg_write } for pid=12623 comm="syz.3.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 689.769983][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 691.873538][ T28] audit: type=1400 audit(1729435340.417:36258): avc: denied { ioctl } for pid=12627 comm="syz.0.3160" path="socket:[66259]" dev="sockfs" ino=66259 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 691.909910][T12584] device veth1_macvtap entered promiscuous mode [ 691.922285][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 691.939222][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 692.029468][ T2230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 692.040151][ T2230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 692.781372][ T28] audit: type=1400 audit(1729435342.176:36259): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14627]" dev="pipefs" ino=14627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 693.782873][ T377] device bridge_slave_1 left promiscuous mode [ 693.789228][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.796517][ T377] device bridge_slave_0 left promiscuous mode [ 693.802784][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.810973][ T377] device bridge_slave_1 left promiscuous mode [ 693.817036][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.824309][ T377] device bridge_slave_0 left promiscuous mode [ 693.830390][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.838615][ T377] device bridge_slave_1 left promiscuous mode [ 693.844680][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.851953][ T377] device bridge_slave_0 left promiscuous mode [ 693.858059][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.865762][ T377] device bridge_slave_1 left promiscuous mode [ 693.871749][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.879030][ T377] device bridge_slave_0 left promiscuous mode [ 693.884992][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.892661][ T377] device bridge_slave_1 left promiscuous mode [ 693.898615][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.906077][ T377] device bridge_slave_0 left promiscuous mode [ 693.912169][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.920783][ T377] device veth1_macvtap left promiscuous mode [ 693.926775][ T377] device veth1_macvtap left promiscuous mode [ 693.932793][ T377] device veth0_vlan left promiscuous mode [ 693.938574][ T377] device veth1_macvtap left promiscuous mode [ 693.944382][ T377] device veth0_vlan left promiscuous mode [ 693.950537][ T377] device veth1_macvtap left promiscuous mode [ 693.956688][ T377] device veth1_macvtap left promiscuous mode [ 693.962512][ T377] device veth0_vlan left promiscuous mode