last executing test programs: 14.274259073s ago: executing program 3 (id=906): syz_clone3(&(0x7f0000001ec0)={0x30008100, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[0x0], 0x1}, 0x58) 14.250234575s ago: executing program 3 (id=907): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x1018002, &(0x7f00000002c0)={[{@shortname_mixed}, {@uni_xlateno}, {@fat=@errors_remount}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@numtail}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@numtail}, {}, {@fat=@showexec}]}, 0x6, 0x2b8, &(0x7f0000000640)="$eJzs3U9rK1UYB+B30mQSdZEsXInggC5cXW7v1k2K3AtiV16yUBdabAvSBKGFgn8wduXWjQsXfgJB8IO48RsIbgV3ViiMzGSmSdqYJtJUvH2eTd+eOb+Zd6aHdrro6Ycvj472szg8++LX6HSSaPSjH+dJ9KIRta9iTv+bAAD+z87zPP7IJ9bJJRHR2VxbAMAGrfbzvzktf7qTtgCADXr67ntv7+zuPn4nyzrxZPT16aD4zb74ODm+cxgfxzAO4mF04yKifFFoRfm2UJRP8jwfN7NCL14bjU8HRXL0wc/V+Xd+jyjz29GNXjl0+bZR5t/afbydTczkx0Ufz1fX7xf5R9GNFy/Dc/lHC/IxSOP1V2f6fxDd+OWj+CSGsV82Mc1/uZ1lb+bf/vn5+0V7RT4Znw7a5bypfOuOvzQAAAAAAAAAAAAAAAAAAAAAADzDHlR757Sj3L+nGKr239m6KD5pRVbrze/PM8kn9Ylm9wfK83ycx/f1/joPsyzLq4nTfDNeas5uLAgAAAAAAAAAAAAAAAAAAAD318mnnx3tDYcHx7dS1LsBNCPir6cR//Y8/ZmRV2L55HZ1zb3hsFGV83OasyOxVc9JIpa2UdzELT2Wm4rnrvVcFT/8uO4JOzfPaS2+1m0W9eo62ksWP8N21COdapF8l0ZM56Sx4rXSfzqUxzrLL114qLv2vacvlMV4yZxIljX2xm+TJ1eNJFfvIi2f6sJ4qypm4lfWxkrrOTqT+PXvFYndOgAAAAAAAAAAAAAAAAAAYKOmf/274ODZ0mgjb2+sLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4U9P//79GMa7CK0xO4/jkP75FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7oG/AwAA//83x1yS") r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlink(&(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 14.166214002s ago: executing program 3 (id=909): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}, {@nfs_export_on}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 14.090813948s ago: executing program 3 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x0) 14.083760158s ago: executing program 3 (id=912): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x3efd) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) 13.55219939s ago: executing program 3 (id=916): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20}, 0x20}}, 0x0) pipe2(&(0x7f0000000000), 0x0) ptrace(0x10, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000580)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r0}, 0x10) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r2, 0x2, &(0x7f0000000000)) 4.14270685s ago: executing program 0 (id=987): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x147382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x100, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd0, 0x2, {{0x0, 0xf632}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1000}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x2, 0x4, 0x0, 0x1}}, @TCA_NETEM_RATE={0x14}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x3, 0x0, 0x8000}}, @NETEM_LOSS_GI={0x18, 0x1, {0x36e6, 0x6dd, 0x5, 0x9, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x10000, 0xfa24, 0x101}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x9c72, 0x0, 0x33b}}]}]}}}]}, 0x100}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r9}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001140)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f00)={0x1f0, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) mkdir(&(0x7f0000000340)='.\x00', 0x89) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x3, 0x3, 0x1, @loopback, @private2, 0x7800, 0x7800, 0x0, 0x5}}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={r10, @local, @broadcast}, 0xc) 2.775285389s ago: executing program 1 (id=999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xdf}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.673767667s ago: executing program 2 (id=1000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x3c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x8}}}}}, 0x0) 2.603724802s ago: executing program 1 (id=1001): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000640)=""/251, 0xfb}], 0x2}}], 0x40002db, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r3, 0x200, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000440)=0x808, 0x4) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002cbd7000fbdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00400000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0002000000080001007063690011000200303030303a30303a31302e300000000008000b00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ffffffff"], 0xd8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) recvmsg(r4, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113140000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef134f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a08890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.463211723s ago: executing program 2 (id=1002): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}}], 0x38}}], 0x2, 0x0) 2.313367505s ago: executing program 2 (id=1003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.232807351s ago: executing program 4 (id=1004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) 924.867456ms ago: executing program 4 (id=1005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 718.928752ms ago: executing program 2 (id=1006): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2400a801, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000018c0)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x81000000, @local}}]}]}, @IFLA_MTU={0x8}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@ipv6_getnetconf={0x5c, 0x52, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @NETCONFA_PROXY_NEIGH={0x8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xfffffffd}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xbf}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0xc015) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800e3001000e501000000000000000007000000", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="00bba30000000000"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x78, 0x40, 0x6, 0x42, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x40, 0x7f}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3f, 0x3, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x7800, 0x3, 0x10000}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000dc0)={0x204, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa8, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa8}}, 0x14) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 493.47785ms ago: executing program 1 (id=1007): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 374.53585ms ago: executing program 4 (id=1008): r0 = socket$netlink(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1}, @generic="b1"]}, 0x28}], 0x1}, 0x0) 326.913723ms ago: executing program 1 (id=1009): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 305.291955ms ago: executing program 2 (id=1010): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") rmdir(&(0x7f00000002c0)='./file0\x00') 172.012996ms ago: executing program 2 (id=1011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x3ff, 0x0, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0xffffffffffffffb9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0x10, 0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, &(0x7f0000004440)=0x2000000) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="0000040000000000ff020000000000000000000000000001fc01000000000000000000000000000020010000000000000000000000000002fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffe0000002fc000000004042000000000000000000fe800000000000000000000000000000ff020000000000000000000000000001fe8000000000000000000000000000bb"], 0x90) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000000280)=ANY=[], 0xd, 0x2ac, &(0x7f0000000340)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x208, r6, 0x20, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x1c8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7fff}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1a8, 0xe, 0x0, 0x1, [{0xf3, 0x0, "80a4e5da7c496b294a0ab3daaf57a64a66c3a59a4e11dcf2d9d611fc8e121c9a9389d995f848d051dfe2022ca4d06b39826c79049c0619adf31535a84543a6fe09cfe438fa849de7baea3b2226d886efd482818bcf7a3435e1e45e1b00bde79215df5f750219e6612a2a2bb769e47a4616be9cc8432d26b2a6b4c30671792cce991e830ab879c2503ce704dabfdf0d1b229caaffdc246a535ad1b3a3cd7dd7c14c59a6e5e355da9f733c0e1536dbdb389d8c3d176f52b82e1e3bd6cbaf59294004338b21463190d8545d60c7f0ccc0eb72469f6e8aa40d07958449e014d930337584af825383d298b74b29cdbb8e05"}, {0xaf, 0x0, "641eb900cda018bfdd05ff11b000f1b2282796d84d2e21dbb6dd9e71de419dd4159bc1f709fdb467dc8e7125b104eb020fae9f5ae9389fb166040d78422a515633c7efc7cdd21f3bf92f2b5bccc238f6b8c0b5862a8d293c8fee54105bc9f3ba07224137c95eb3053843ad105130c277c5be7e5e1d8f62246de2884c143995572ee8c662182bd78930a5e18655089198265e1864fb9d116bfec09383d8e3e9dcc18ea9f781ad3b51f6f1a3"}]}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc49c}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x6}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x44864) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 171.639256ms ago: executing program 4 (id=1012): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}}], 0x38}}], 0x2, 0x0) 153.014238ms ago: executing program 1 (id=1013): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 137.247359ms ago: executing program 4 (id=1014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x700, 0x12) 429.339µs ago: executing program 4 (id=1015): io_setup(0x6, &(0x7f0000000040)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x300, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="f0", 0x1}]) 0s ago: executing program 1 (id=1016): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) close(0x3) kernel console output (not intermixed with test programs): .126434][ T984] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.146679][ T972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.162745][ T323] hid (null): unknown global tag 0x14 [ 45.167993][ T323] hid (null): unknown global tag 0xe [ 45.182172][ T323] hid (null): report_id 513379493 is invalid [ 45.188078][ T323] hid (null): unknown global tag 0xc [ 45.198979][ T323] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 45.206081][ T996] netlink: 44 bytes leftover after parsing attributes in process `syz.2.246'. [ 45.206528][ T323] hid-generic 0003:0158:0100.0003: unexpected long global item [ 45.222562][ T323] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 45.325610][ T984] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.334690][ T984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.734187][ T1002] syz.0.247[1002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.734270][ T1002] syz.0.247[1002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.756006][ T39] usb 5-1: USB disconnect, device number 3 [ 45.826729][ T1004] loop0: detected capacity change from 0 to 256 [ 45.845244][ T1004] exfat: Deprecated parameter 'utf8' [ 45.862369][ T1004] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 46.149811][ T1010] serio: Serial port pts0 [ 46.170129][ T1014] loop2: detected capacity change from 0 to 2048 [ 46.185997][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.195417][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.207082][ T1006] device bridge_slave_0 entered promiscuous mode [ 46.216683][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.234908][ T1014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.262093][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.355994][ T1006] device bridge_slave_1 entered promiscuous mode [ 46.386636][ T1022] loop4: detected capacity change from 0 to 1024 [ 46.648585][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 46.648610][ T28] audit: type=1326 audit(1719983803.134:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b7775b99 code=0x7ffc0000 [ 46.704204][ T1022] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.719019][ T1022] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.756296][ T1022] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.253: Invalid inode table block 0 in block_group 0 [ 46.793851][ T28] audit: type=1326 audit(1719983803.134:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b7775b99 code=0x7ffc0000 [ 46.823293][ T1022] EXT4-fs (loop4): Remounting filesystem read-only [ 46.842606][ T1022] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 46.867098][ T1022] EXT4-fs error (device loop4): ext4_quota_write:7147: inode #3: comm syz.4.253: mark_inode_dirty error [ 46.886384][ T28] audit: type=1326 audit(1719983803.144:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f06b7775b99 code=0x7ffc0000 [ 46.912221][ T1022] Quota error (device loop4): write_blk: dquota write failed [ 46.918971][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.919530][ T1022] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 46.926403][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.926499][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.949980][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.959713][ T28] audit: type=1326 audit(1719983803.144:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b7775b99 code=0x7ffc0000 [ 46.973003][ T1022] EXT4-fs (loop4): 1 truncate cleaned up [ 47.002787][ T28] audit: type=1326 audit(1719983803.144:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b7775b99 code=0x7ffc0000 [ 47.042169][ T1022] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.055470][ T644] EXT4-fs (loop2): unmounting filesystem. [ 47.062830][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.073296][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.136422][ T28] audit: type=1326 audit(1719983803.144:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f06b7775b99 code=0x7ffc0000 [ 47.160205][ T28] audit: type=1326 audit(1719983803.144:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b7775b99 code=0x7ffc0000 [ 47.193241][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.201194][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.224884][ T28] audit: type=1326 audit(1719983803.144:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b7775b99 code=0x7ffc0000 [ 47.358882][ T438] EXT4-fs (loop4): unmounting filesystem. [ 47.507144][ T10] device bridge_slave_1 left promiscuous mode [ 47.513936][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.521516][ T10] device bridge_slave_0 left promiscuous mode [ 47.527649][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.535943][ T10] device veth1_macvtap left promiscuous mode [ 47.541901][ T10] device veth0_vlan left promiscuous mode [ 47.679783][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.690248][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.702447][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.709332][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.752999][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.766180][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.778701][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.785589][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.800352][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.812629][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.832799][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.844284][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.865404][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.874914][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.905017][ T1006] device veth0_vlan entered promiscuous mode [ 47.917319][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.926327][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.957821][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.969664][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.985992][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.997260][ T1048] syz.3.261[1048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.997337][ T1048] syz.3.261[1048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.014183][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.063026][ T1006] device veth1_macvtap entered promiscuous mode [ 48.070908][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.089397][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.100039][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.161776][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.180274][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.338625][ T1044] loop4: detected capacity change from 0 to 40427 [ 48.357818][ T1044] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 48.378669][ T1044] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 48.402851][ T1044] F2FS-fs (loop4): invalid crc value [ 48.425897][ T1044] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.511782][ T1044] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 48.522111][ T1044] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 48.642117][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 48.912081][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 49.072475][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.163078][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.245767][ T310] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 49.258868][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.279316][ T310] usb 3-1: config 0 descriptor?? [ 49.315234][ T1084] syz.3.272[1084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.315316][ T1084] syz.3.272[1084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.286688][ T310] hid-led 0003:04D8:F372.0004: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 50.398389][ T310] hid-led 0003:04D8:F372.0004: Greynut Luxafor initialized [ 50.562766][ T310] usb 3-1: USB disconnect, device number 4 [ 50.571732][ T293] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 50.580906][ T293] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 50.606816][ T293] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 50.634286][ T39] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 50.655573][ T293] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 50.673154][ T293] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 50.681749][ T1117] syz.4.283[1117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.681835][ T1117] syz.4.283[1117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.683340][ T293] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 50.713764][ T293] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 50.723199][ T293] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 50.731905][ T293] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 50.741353][ T293] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 50.754720][ T293] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 50.782114][ T293] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 50.801166][ T293] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 50.819175][ T293] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 50.843138][ T293] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 50.863763][ T293] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 50.885581][ T293] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 50.922878][ T1124] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 50.983522][ T1124] kvm: pic: non byte read [ 50.987901][ T1124] kvm: pic: level sensitive irq not supported [ 50.987962][ T1124] kvm: pic: non byte read [ 50.999382][ T1113] loop0: detected capacity change from 0 to 40427 [ 51.010619][ T1113] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 51.032460][ T1113] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 51.046424][ T1113] F2FS-fs (loop0): invalid crc value [ 51.066745][ T1113] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.163588][ T1113] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 51.170554][ T1113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.274583][ T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 51.297646][ T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 51.322146][ T293] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 51.567964][ T1148] loop0: detected capacity change from 0 to 256 [ 51.593629][ T1142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 51.612283][ T1142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 51.682291][ T1155] syz.2.294[1155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.682367][ T1155] syz.2.294[1155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.732396][ T293] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 51.777797][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.810791][ T293] usb 4-1: config 0 descriptor?? [ 51.818393][ T1165] process 'syz.2.297' launched './file0' with NULL argv: empty string added [ 51.860121][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x3 [ 51.890042][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4 [ 51.913805][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x4 [ 51.935267][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x5 [ 51.967620][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x33 [ 51.990062][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x34 [ 52.023186][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x1 [ 52.044023][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x1 [ 52.066799][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x2 [ 52.096296][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 52.096312][ T28] audit: type=1400 audit(1719983808.604:283): avc: denied { execute } for pid=1123 comm="syz.3.286" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 52.107965][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x2, nop [ 52.161723][ T39] usb 4-1: USB disconnect, device number 2 [ 52.193284][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 52.241920][ T28] audit: type=1400 audit(1719983808.744:284): avc: denied { unmount } for pid=1006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 52.325256][ T1171] loop2: detected capacity change from 0 to 40427 [ 52.365342][ T1171] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 52.384062][ T1171] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 52.441211][ T1171] F2FS-fs (loop2): invalid crc value [ 52.491408][ T1171] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.613085][ T1171] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 52.619960][ T1171] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 52.658335][ T1188] syz.4.306[1188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.658433][ T1188] syz.4.306[1188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.689205][ T346] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 52.732445][ T346] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 52.737933][ T28] audit: type=1401 audit(1719983809.244:285): op=setxattr invalid_context="" [ 52.778888][ T1192] loop4: detected capacity change from 0 to 512 [ 52.812303][ T1192] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.821577][ T1192] EXT4-fs error (device loop4): ext4_quota_enable:6943: inode #31: comm syz.4.309: iget: special inode unallocated [ 52.871560][ T1185] loop0: detected capacity change from 0 to 40427 [ 52.878732][ T1185] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 52.887942][ T1185] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 52.896706][ T1192] EXT4-fs error (device loop4): ext4_quota_enable:6946: comm syz.4.309: Bad quota inode: 31, type: 2 [ 52.907649][ T1185] F2FS-fs (loop0): invalid crc value [ 52.917707][ T1192] EXT4-fs warning (device loop4): ext4_enable_quotas:6987: Failed to enable quota tracking (type=2, err=-117, ino=31). Please run e2fsck to fix. [ 52.934072][ T1192] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 52.940589][ T1192] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.951902][ T1192] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.309: deleted inode referenced: 12 [ 52.964164][ T1185] F2FS-fs (loop0): Found nat_bits in checkpoint [ 52.982723][ T1192] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.309: deleted inode referenced: 12 [ 53.003326][ T1192] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.309: deleted inode referenced: 12 [ 53.030762][ T1192] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.309: deleted inode referenced: 12 [ 53.052101][ T1185] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 53.062251][ T1192] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.068517][ T1192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.075006][ T1185] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 53.102246][ T1192] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 53.111837][ T1192] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 53.132130][ T1192] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 53.144845][ T1192] EXT4-fs error (device loop4): ext4_quota_enable:6943: inode #31: comm syz.4.309: iget: special inode unallocated [ 53.232127][ T1192] EXT4-fs error (device loop4): ext4_quota_enable:6946: comm syz.4.309: Bad quota inode: 31, type: 2 [ 53.252357][ T1192] EXT4-fs warning (device loop4): ext4_enable_quotas:6987: Failed to enable quota tracking (type=2, err=-117, ino=31). Please run e2fsck to fix. [ 53.644819][ T438] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 12 [ 53.696635][ T346] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 53.713206][ T346] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 53.732708][ T438] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 12 [ 53.736130][ T28] audit: type=1400 audit(1719983810.244:286): avc: denied { create } for pid=1218 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.825950][ T438] EXT4-fs (loop4): unmounting filesystem. [ 53.848521][ T28] audit: type=1400 audit(1719983810.274:287): avc: denied { write } for pid=1218 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.913764][ T438] syz-executor (438) used greatest stack depth: 20616 bytes left [ 54.003020][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.009980][ T1220] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.072650][ T1220] device bridge_slave_0 entered promiscuous mode [ 54.081667][ T1229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.321'. [ 54.175118][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.188764][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.202854][ T1220] device bridge_slave_1 entered promiscuous mode [ 54.220566][ T28] audit: type=1400 audit(1719983810.724:288): avc: denied { create } for pid=1238 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.324193][ T1239] loop3: detected capacity change from 0 to 1024 [ 54.595353][ T1239] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 54.635517][ T28] audit: type=1400 audit(1719983811.144:289): avc: denied { mount } for pid=1245 comm="syz.0.326" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 54.691355][ T1239] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2740: inode #12: comm syz.3.325: corrupted in-inode xattr [ 54.748117][ T28] audit: type=1400 audit(1719983811.174:290): avc: denied { watch } for pid=1245 comm="syz.0.326" path="/15/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.793769][ T28] audit: type=1400 audit(1719983811.224:291): avc: denied { unmount } for pid=1006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 54.822146][ T28] audit: type=1400 audit(1719983811.254:292): avc: denied { execute } for pid=1248 comm="syz.0.327" path="/16/bus" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.894190][ T346] device bridge_slave_1 left promiscuous mode [ 54.900145][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.932699][ T346] device bridge_slave_0 left promiscuous mode [ 54.953992][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.975893][ T346] device veth1_macvtap left promiscuous mode [ 55.007601][ T1251] kvm [1250]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x3 [ 55.017623][ T346] device veth0_vlan left promiscuous mode [ 55.042270][ T1251] kvm [1250]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4 [ 55.061068][ T1251] kvm [1250]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x4 [ 55.073802][ T1251] kvm [1250]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x33 [ 55.091935][ T1251] kvm [1250]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x34 [ 55.119670][ T1251] kvm [1250]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x2, nop [ 55.162180][ T1251] kvm [1250]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 55.205554][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.218811][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.242275][ T1233] device bridge_slave_0 entered promiscuous mode [ 55.308565][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.317699][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.355264][ T1233] device bridge_slave_1 entered promiscuous mode [ 55.388277][ T291] EXT4-fs (loop3): unmounting filesystem. [ 55.622482][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.629963][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.662547][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.670792][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.712372][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.719245][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.742171][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.770818][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.779161][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.786286][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.802351][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.821944][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.830197][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.876897][ T1220] device veth0_vlan entered promiscuous mode [ 55.887758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.896422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.906378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.913757][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.921077][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.929940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.942665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.950901][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.959010][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.965885][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.991628][ T1220] device veth1_macvtap entered promiscuous mode [ 56.002244][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.015421][ T1286] loop3: detected capacity change from 0 to 1024 [ 56.024042][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.032785][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.041031][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.050959][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.057960][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.072225][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.112178][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.120105][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.122613][ T1286] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.127958][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.145215][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.153510][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.161562][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.169785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.178071][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.196406][ T1233] device veth0_vlan entered promiscuous mode [ 56.219573][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.229193][ T1286] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2740: inode #12: comm syz.3.339: corrupted in-inode xattr [ 56.252480][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.303915][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.311657][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.366585][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.380370][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.404454][ T1233] device veth1_macvtap entered promiscuous mode [ 56.426255][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.438344][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.474071][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.499974][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.517872][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.579297][ T1299] loop2: detected capacity change from 0 to 512 [ 56.608520][ T1299] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.670790][ T1299] EXT4-fs (loop2): 1 truncate cleaned up [ 56.679322][ T1299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.081511][ T291] EXT4-fs (loop3): unmounting filesystem. [ 57.109261][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 57.109277][ T28] audit: type=1400 audit(1719983813.614:297): avc: denied { read } for pid=1323 comm="syz.3.349" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.139875][ T1324] Source file dentry negative [ 57.209673][ T28] audit: type=1400 audit(1719983813.644:298): avc: denied { open } for pid=1323 comm="syz.3.349" path="/85/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.312106][ T28] audit: type=1400 audit(1719983813.644:299): avc: denied { create } for pid=1319 comm="syz.0.347" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.363039][ T1321] loop0: detected capacity change from 0 to 512 [ 57.372185][ T28] audit: type=1400 audit(1719983813.644:300): avc: denied { ioctl } for pid=1323 comm="syz.3.349" path="/85/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.398744][ T1321] EXT4-fs: old and new quota format mixing [ 57.452103][ T28] audit: type=1400 audit(1719983813.644:301): avc: denied { write } for pid=1319 comm="syz.0.347" name="file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.511558][ T28] audit: type=1400 audit(1719983813.644:302): avc: denied { open } for pid=1319 comm="syz.0.347" path="/22/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.568723][ T28] audit: type=1400 audit(1719983813.904:303): avc: denied { mounton } for pid=1319 comm="syz.0.347" path="/22/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.778014][ T1353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.360'. [ 57.885461][ T28] audit: type=1400 audit(1719983814.394:304): avc: denied { read } for pid=1356 comm="syz.3.361" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.960161][ T28] audit: type=1400 audit(1719983814.394:305): avc: denied { open } for pid=1356 comm="syz.3.361" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.227428][ T28] audit: type=1400 audit(1719983814.394:306): avc: denied { ioctl } for pid=1356 comm="syz.3.361" path="/dev/ppp" dev="devtmpfs" ino=138 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.261255][ T1361] Source file dentry negative [ 58.343458][ T1367] loop3: detected capacity change from 0 to 2048 [ 58.373372][ T1367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.420938][ T1366] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.479925][ T1366] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 58.529668][ T1366] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.529668][ T1366] [ 58.552858][ T1366] EXT4-fs (loop3): Total free blocks count 0 [ 58.561969][ T1366] EXT4-fs (loop3): Free/Dirty block details [ 58.592175][ T1366] EXT4-fs (loop3): free_blocks=2415919104 [ 58.612401][ T1366] EXT4-fs (loop3): dirty_blocks=32 [ 58.617808][ T1366] EXT4-fs (loop3): Block reservation details [ 58.642081][ T1366] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 58.655829][ T346] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 58.733870][ T1374] loop4: detected capacity change from 0 to 512 [ 58.792145][ T1374] EXT4-fs: old and new quota format mixing [ 59.903656][ T1398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 60.553894][ T1419] netlink: 44 bytes leftover after parsing attributes in process `syz.0.381'. [ 60.643539][ T1417] loop3: detected capacity change from 0 to 2048 [ 60.687939][ T1417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.988064][ T1416] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.058714][ T1416] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 61.070899][ T1416] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.070899][ T1416] [ 61.092099][ T1416] EXT4-fs (loop3): Total free blocks count 0 [ 61.098092][ T1416] EXT4-fs (loop3): Free/Dirty block details [ 61.117953][ T1416] EXT4-fs (loop3): free_blocks=2415919104 [ 61.129012][ T1416] EXT4-fs (loop3): dirty_blocks=32 [ 61.134053][ T1416] EXT4-fs (loop3): Block reservation details [ 61.144978][ T1416] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 61.160139][ T1150] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 61.223290][ T1434] futex_wake_op: syz.3.385 tries to shift op by 36; fix this program [ 61.387866][ T1435] loop4: detected capacity change from 0 to 2048 [ 61.602788][ T1435] loop4: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 61.603676][ T1435] loop4: p3 start 4259840 is beyond EOD, truncated [ 62.122095][ T292] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 62.384852][ T1453] udevd[1453]: inotify_add_watch(7, /dev/loop4p13, 10) failed: No such file or directory [ 62.412088][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 62.453659][ T313] udevd[313]: inotify_add_watch(7, /dev/loop4p18, 10) failed: No such file or directory [ 62.464502][ T1452] udevd[1452]: inotify_add_watch(7, /dev/loop4p19, 10) failed: No such file or directory [ 62.475492][ T1453] udevd[1453]: inotify_add_watch(7, /dev/loop4p20, 10) failed: No such file or directory [ 62.475540][ T1454] udevd[1454]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory [ 62.486628][ T432] udevd[432]: inotify_add_watch(7, /dev/loop4p21, 10) failed: No such file or directory [ 62.496433][ T1448] udevd[1448]: inotify_add_watch(7, /dev/loop4p26, 10) failed: No such file or directory [ 62.505502][ T1449] udevd[1449]: inotify_add_watch(7, /dev/loop4p22, 10) failed: No such file or directory [ 62.515251][ T1451] udevd[1451]: inotify_add_watch(7, /dev/loop4p23, 10) failed: No such file or directory [ 62.523757][ T292] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 62.535707][ T1445] udevd[1445]: inotify_add_watch(7, /dev/loop4p25, 10) failed: No such file or directory [ 62.752058][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 62.752171][ T292] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 62.804284][ T292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.844837][ T292] usb 4-1: Product: syz [ 62.857665][ T292] usb 4-1: Manufacturer: syz [ 62.870794][ T292] usb 4-1: SerialNumber: syz [ 62.882197][ T310] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 62.887620][ T292] usb 4-1: config 0 descriptor?? [ 62.890185][ T310] usb 2-1: config 0 has no interface number 1 [ 62.890214][ T310] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 62.922159][ T1444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 63.152134][ T310] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0801, bcdDevice=3b.29 [ 63.163715][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.164939][ T292] usb 4-1: USB disconnect, device number 3 [ 63.183370][ T310] usb 2-1: Product: syz [ 63.193463][ T310] usb 2-1: Manufacturer: syz [ 63.222100][ T310] usb 2-1: SerialNumber: syz [ 63.240596][ T310] usb 2-1: config 0 descriptor?? [ 63.249347][ T1465] Zero length message leads to an empty skb [ 63.272275][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 63.272291][ T28] audit: type=1400 audit(1719983819.784:314): avc: denied { ioctl } for pid=1464 comm="syz.4.393" path="socket:[22150]" dev="sockfs" ino=22150 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.342077][ T28] audit: type=1400 audit(1719983819.814:315): avc: denied { create } for pid=1464 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.392128][ T28] audit: type=1400 audit(1719983819.814:316): avc: denied { bind } for pid=1464 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.412830][ T1438] loop0: detected capacity change from 0 to 131072 [ 63.425419][ T1438] F2FS-fs (loop0): Test dummy encryption mode enabled [ 63.433111][ T28] audit: type=1400 audit(1719983819.824:317): avc: denied { setopt } for pid=1464 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.444966][ T1438] F2FS-fs (loop0): invalid crc value [ 63.495825][ T28] audit: type=1400 audit(1719983819.824:318): avc: denied { write } for pid=1464 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.509954][ T1438] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.518030][ T310] usb 2-1: USB disconnect, device number 4 [ 63.547033][ T28] audit: type=1400 audit(1719983819.874:319): avc: denied { ioctl } for pid=1464 comm="syz.4.393" path="socket:[22159]" dev="sockfs" ino=22159 ioctlcmd=0x48e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.700268][ T1478] loop4: detected capacity change from 0 to 1024 [ 63.709278][ T1478] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 63.720047][ T1478] EXT4-fs (loop4): group descriptors corrupted! [ 63.820147][ T1438] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.092527][ T28] audit: type=1400 audit(1719983820.604:320): avc: denied { setattr } for pid=1437 comm="syz.0.386" path="/30/file0" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.115116][ T1438] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 64.138929][ T28] audit: type=1400 audit(1719983820.644:321): avc: denied { create } for pid=1437 comm="syz.0.386" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 64.208756][ T28] audit: type=1400 audit(1719983820.694:322): avc: denied { create } for pid=1481 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.313096][ T1485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 64.362824][ T1485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 65.261726][ T1502] netlink: 44 bytes leftover after parsing attributes in process `syz.4.405'. [ 65.543588][ T28] audit: type=1400 audit(1719983822.024:323): avc: denied { mount } for pid=1501 comm="syz.4.405" name="/" dev="overlay" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.062063][ T292] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 66.132131][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.207695][ T1527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 66.239281][ T1527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 66.312081][ T292] usb 2-1: Using ep0 maxpacket: 16 [ 66.392200][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 66.432224][ T292] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 66.440233][ T292] usb 2-1: config 0 has no interface number 1 [ 66.472109][ T292] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 66.522145][ T6] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 66.530708][ T6] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 66.562079][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.592347][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.602264][ T6] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 66.615743][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.623964][ T1532] loop4: detected capacity change from 0 to 40427 [ 66.644232][ T6] usb 1-1: config 0 descriptor?? [ 66.652220][ T292] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0801, bcdDevice=3b.29 [ 66.661092][ T292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.682376][ T1532] F2FS-fs (loop4): invalid crc value [ 66.688906][ T292] usb 2-1: Product: syz [ 66.702184][ T292] usb 2-1: Manufacturer: syz [ 66.707500][ T1532] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.713816][ T292] usb 2-1: SerialNumber: syz [ 66.722841][ T292] usb 2-1: config 0 descriptor?? [ 66.816473][ T1532] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.948943][ T1539] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.955874][ T1539] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.967390][ T292] usb 2-1: USB disconnect, device number 5 [ 67.343790][ T6] itetech 0003:048D:8595.0005: unexpected long global item [ 67.351396][ T1539] device bridge_slave_0 entered promiscuous mode [ 67.360911][ T1233] syz-executor: attempt to access beyond end of device [ 67.360911][ T1233] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.362265][ T6] itetech: probe of 0003:048D:8595.0005 failed with error -22 [ 67.389565][ T1539] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.415371][ T1539] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.431497][ T1539] device bridge_slave_1 entered promiscuous mode [ 67.569727][ T292] usb 1-1: USB disconnect, device number 2 [ 67.694096][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.703843][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.749753][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.760307][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.782599][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.789460][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.812211][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.822590][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.840966][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.847871][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.862169][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.870175][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.922560][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.931140][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.949451][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.957444][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.042196][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.050867][ T1539] device veth0_vlan entered promiscuous mode [ 68.065958][ T1539] device veth1_macvtap entered promiscuous mode [ 68.073321][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.091626][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.107414][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.491061][ T1573] loop0: detected capacity change from 0 to 512 [ 68.512957][ T1573] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.525152][ T1575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 68.534939][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 68.534953][ T28] audit: type=1400 audit(1719983825.044:329): avc: denied { write } for pid=1571 comm="syz.2.416" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.565207][ T1575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.425'. [ 68.594924][ T1573] EXT4-fs (loop0): 1 truncate cleaned up [ 68.600494][ T1573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.647888][ T1582] netlink: 'syz.2.427': attribute type 5 has an invalid length. [ 68.703010][ T1582] netlink: 'syz.2.427': attribute type 4 has an invalid length. [ 68.746211][ T1582] netlink: 'syz.2.427': attribute type 5 has an invalid length. [ 68.754948][ T1582] netlink: 'syz.2.427': attribute type 2 has an invalid length. [ 68.778910][ T1582] netlink: 328 bytes leftover after parsing attributes in process `syz.2.427'. [ 68.915328][ T1592] netlink: 182 bytes leftover after parsing attributes in process `syz.2.431'. [ 68.994166][ T1598] loop3: detected capacity change from 0 to 2048 [ 69.052338][ T1598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.209874][ T28] audit: type=1400 audit(1719983825.714:330): avc: denied { mounton } for pid=1603 comm="syz.2.434" path="/4/file0/bus" dev="ramfs" ino=22363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 69.243038][ T1604] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.264850][ T1604] overlayfs: failed to set xattr on upper [ 69.631470][ T28] audit: type=1400 audit(1719983826.134:331): avc: denied { unmount } for pid=1539 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 69.863473][ T291] EXT4-fs (loop3): unmounting filesystem. [ 70.239132][ T1623] netlink: 'syz.3.440': attribute type 5 has an invalid length. [ 70.282108][ T1623] netlink: 'syz.3.440': attribute type 4 has an invalid length. [ 70.289585][ T1623] netlink: 'syz.3.440': attribute type 5 has an invalid length. [ 70.342131][ T1623] netlink: 'syz.3.440': attribute type 2 has an invalid length. [ 70.349671][ T1623] netlink: 328 bytes leftover after parsing attributes in process `syz.3.440'. [ 70.412326][ T1627] loop3: detected capacity change from 0 to 1024 [ 70.418844][ T1627] EXT4-fs: Ignoring removed oldalloc option [ 70.452868][ T1627] EXT4-fs: Ignoring removed orlov option [ 70.464838][ T1627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.613596][ T1632] netlink: 182 bytes leftover after parsing attributes in process `syz.1.444'. [ 70.614612][ T28] audit: type=1400 audit(1719983827.124:332): avc: denied { unlink } for pid=1626 comm="syz.3.442" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 70.687820][ T291] EXT4-fs (loop3): unmounting filesystem. [ 70.755717][ T1641] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.782146][ T1641] overlayfs: failed to set xattr on upper [ 70.917086][ T1650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 72.078006][ T1662] netlink: 'syz.2.453': attribute type 5 has an invalid length. [ 72.122787][ T1665] netlink: 182 bytes leftover after parsing attributes in process `syz.4.456'. [ 72.402496][ T1662] netlink: 'syz.2.453': attribute type 4 has an invalid length. [ 72.409981][ T1662] netlink: 328 bytes leftover after parsing attributes in process `syz.2.453'. [ 72.506628][ T1672] loop3: detected capacity change from 0 to 1024 [ 72.522530][ T1672] EXT4-fs: Ignoring removed oldalloc option [ 72.528293][ T1672] EXT4-fs: Ignoring removed orlov option [ 72.572162][ T1672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.657731][ T1680] loop4: detected capacity change from 0 to 1024 [ 72.669265][ T291] EXT4-fs (loop3): unmounting filesystem. [ 72.680260][ T1680] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 72.689895][ T1680] EXT4-fs (loop4): write access will be enabled during recovery [ 72.698257][ T1680] EXT4-fs (loop4): barriers disabled [ 72.703622][ T1680] JBD2: no valid journal superblock found [ 72.709511][ T1680] EXT4-fs (loop4): error loading journal [ 72.821697][ T1686] loop3: detected capacity change from 0 to 256 [ 72.847003][ T1686] exfat: Deprecated parameter 'namecase' [ 72.859697][ T1686] exfat: Deprecated parameter 'namecase' [ 72.873895][ T1686] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 72.905342][ T28] audit: type=1400 audit(1719983829.414:333): avc: denied { append } for pid=1685 comm="syz.3.463" path="/117/file0/cpu.stat" dev="loop3" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.993508][ T28] audit: type=1400 audit(1719983829.494:334): avc: denied { mounton } for pid=1685 comm="syz.3.463" path="/117/file0/file0" dev="loop3" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.251986][ T28] audit: type=1400 audit(1719983829.754:335): avc: denied { remove_name } for pid=291 comm="syz-executor" name="file0" dev="loop3" ino=1048632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.319016][ T28] audit: type=1400 audit(1719983829.764:336): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="loop3" ino=1048632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.415124][ T28] audit: type=1400 audit(1719983829.764:337): avc: denied { rmdir } for pid=291 comm="syz-executor" name="file0" dev="loop3" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.449728][ T28] audit: type=1326 audit(1719983829.804:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee175b99 code=0x7ffc0000 [ 74.353824][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 74.353841][ T28] audit: type=1326 audit(1719983830.864:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1710 comm="syz.3.469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21ee175b99 code=0x0 [ 74.558147][ T1712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 75.294234][ T28] audit: type=1400 audit(1719983831.804:344): avc: denied { connect } for pid=1725 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.344511][ T28] audit: type=1400 audit(1719983831.804:345): avc: denied { shutdown } for pid=1725 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.031786][ T1741] loop4: detected capacity change from 0 to 1024 [ 76.077840][ T1741] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 76.106502][ T1741] EXT4-fs (loop4): write access will be enabled during recovery [ 76.134720][ T1741] EXT4-fs (loop4): barriers disabled [ 76.172171][ T1741] JBD2: no valid journal superblock found [ 76.177816][ T1741] EXT4-fs (loop4): error loading journal [ 76.243916][ T28] audit: type=1400 audit(1719983832.754:346): avc: denied { accept } for pid=1746 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.409681][ T1765] loop4: detected capacity change from 0 to 40427 [ 77.416119][ T1779] validate_nla: 2 callbacks suppressed [ 77.416136][ T1779] netlink: 'syz.2.493': attribute type 28 has an invalid length. [ 77.447326][ T1765] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 77.462100][ T1765] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 77.482907][ T1779] netlink: 'syz.2.493': attribute type 28 has an invalid length. [ 77.502669][ T1765] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.512311][ T1781] netlink: 'syz.2.493': attribute type 28 has an invalid length. [ 77.519983][ T1781] netlink: 'syz.2.493': attribute type 28 has an invalid length. [ 77.594506][ T1765] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 77.628820][ T1765] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 77.635896][ T1781] netlink: 'syz.2.493': attribute type 28 has an invalid length. [ 77.637909][ T1765] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 77.738647][ T1781] netlink: 'syz.2.493': attribute type 28 has an invalid length. [ 77.813504][ T1781] netlink: 'syz.2.493': attribute type 28 has an invalid length. [ 77.858420][ T1777] loop3: detected capacity change from 0 to 40427 [ 77.913074][ T1787] syz.4.487: attempt to access beyond end of device [ 77.913074][ T1787] loop4: rw=2049, sector=45096, nr_sectors = 64 limit=40427 [ 77.940509][ T1787] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.948834][ T28] audit: type=1400 audit(1719983834.444:347): avc: denied { read } for pid=1764 comm="syz.4.487" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.015983][ T1777] F2FS-fs (loop3): invalid crc value [ 78.076572][ T1781] netlink: 'syz.2.493': attribute type 28 has an invalid length. [ 78.102250][ T28] audit: type=1400 audit(1719983834.444:348): avc: denied { open } for pid=1764 comm="syz.4.487" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.133721][ T1781] netlink: 'syz.2.493': attribute type 28 has an invalid length. [ 78.134876][ T1777] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.141505][ T1781] netlink: 'syz.2.493': attribute type 28 has an invalid length. [ 78.342137][ T1777] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.417316][ T1800] loop4: detected capacity change from 0 to 256 [ 78.523863][ T1800] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 78.691664][ T1800] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 78.742254][ T28] audit: type=1400 audit(1719983835.194:349): avc: denied { write } for pid=1799 comm="syz.4.494" name="file1" dev="loop4" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.861742][ T1800] exFAT-fs (loop4): Filesystem has been set read-only [ 78.894377][ T291] syz-executor: attempt to access beyond end of device [ 78.894377][ T291] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 79.013440][ T28] audit: type=1400 audit(1719983835.524:350): avc: denied { connect } for pid=1812 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.213019][ T1807] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.219937][ T1807] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.227425][ T1807] device bridge_slave_0 entered promiscuous mode [ 79.234424][ T1807] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.241308][ T1807] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.248782][ T1807] device bridge_slave_1 entered promiscuous mode [ 79.362574][ T28] audit: type=1400 audit(1719983835.874:351): avc: denied { ioctl } for pid=1820 comm="syz.2.505" path="socket:[23045]" dev="sockfs" ino=23045 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.475481][ T1807] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.482376][ T1807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.489619][ T1807] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.496416][ T1807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.898569][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.908788][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.921219][ T1815] loop4: detected capacity change from 0 to 40427 [ 79.932960][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.955448][ T1815] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 79.965540][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.983172][ T1815] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 80.005380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.014702][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.021592][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.037382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.054831][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.061739][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.083993][ T1815] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.111209][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.122473][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.152834][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.180799][ T1807] device veth0_vlan entered promiscuous mode [ 80.202644][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.210813][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.235988][ T1807] device veth1_macvtap entered promiscuous mode [ 80.282863][ T1840] loop3: detected capacity change from 0 to 512 [ 80.294368][ T1815] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 80.314565][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.317484][ T1840] EXT4-fs: Ignoring removed nobh option [ 80.323311][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.338291][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.346514][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.358172][ T1815] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 80.368175][ T1815] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.383382][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.411391][ T1840] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 80.420979][ T1840] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 80.473874][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.487101][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.511782][ T1840] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #13: comm syz.3.510: casefold flag without casefold feature [ 80.524939][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.614815][ T1840] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #13: comm syz.3.510: unexpected EA_INODE flag [ 80.622481][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.632309][ T1840] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.510: couldn't read orphan inode 13 (err -117) [ 80.779048][ T1851] syz.4.504: attempt to access beyond end of device [ 80.779048][ T1851] loop4: rw=2049, sector=45096, nr_sectors = 64 limit=40427 [ 80.815256][ T1851] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.825094][ T1840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.073408][ T291] EXT4-fs (loop3): unmounting filesystem. [ 81.602185][ T28] audit: type=1400 audit(1719983838.104:352): avc: denied { accept } for pid=1865 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 81.679141][ T1876] loop3: detected capacity change from 0 to 16 [ 81.705859][ T1876] erofs: (device loop3): mounted with root inode @ nid 36. [ 81.810883][ T28] audit: type=1400 audit(1719983838.314:353): avc: denied { link } for pid=1867 comm="syz.1.519" name="#23" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.878051][ T28] audit: type=1400 audit(1719983838.314:354): avc: denied { rename } for pid=1867 comm="syz.1.519" name="#24" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.532549][ T508] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.777087][ T508] usb 3-1: Using ep0 maxpacket: 32 [ 82.902142][ T508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.923890][ T508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.952305][ T508] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.990210][ T508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.028049][ T508] usb 3-1: config 0 descriptor?? [ 83.072860][ T508] hub 3-1:0.0: USB hub found [ 83.322157][ T508] hub 3-1:0.0: 1 port detected [ 83.413393][ T1941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1941 comm=syz.4.542 [ 83.565748][ T28] audit: type=1400 audit(1719983840.074:355): avc: denied { read } for pid=1942 comm="syz.3.544" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.735789][ T28] audit: type=1400 audit(1719983840.094:356): avc: denied { open } for pid=1942 comm="syz.3.544" path="/dev/rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.885868][ T28] audit: type=1400 audit(1719983840.114:357): avc: denied { ioctl } for pid=1942 comm="syz.3.544" path="/dev/rtc0" dev="devtmpfs" ino=171 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.332112][ T508] hub 3-1:0.0: activate --> -90 [ 84.371528][ T28] audit: type=1400 audit(1719983840.874:358): avc: denied { create } for pid=1958 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.401055][ T1959] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.443836][ T1959] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.780600][ T292] usb 3-1: USB disconnect, device number 5 [ 84.792359][ T508] usb 3-1-port1: cannot reset (err = -71) [ 84.798228][ T508] usb 3-1-port1: attempt power cycle [ 84.878348][ T1972] input: syz0 as /devices/virtual/input/input11 [ 84.965004][ T28] audit: type=1400 audit(1719983841.464:359): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=803 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.041599][ T28] audit: type=1400 audit(1719983841.494:360): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=803 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.102119][ T28] audit: type=1400 audit(1719983841.494:361): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=803 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.552565][ T28] audit: type=1400 audit(1719983842.044:362): avc: denied { setopt } for pid=1984 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.694058][ T1991] xt_hashlimit: overflow, try lower: 0/0 [ 85.704956][ T1990] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.994883][ T1989] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.110031][ T2002] loop4: detected capacity change from 0 to 2048 [ 86.153821][ T1978] loop3: detected capacity change from 0 to 40427 [ 86.207401][ T1978] F2FS-fs (loop3): invalid crc value [ 86.215564][ T2002] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.235440][ T28] audit: type=1400 audit(1719983842.744:363): avc: denied { rename } for pid=2001 comm="syz.4.565" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.237698][ T2002] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 86.264528][ T1978] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.279013][ T1233] EXT4-fs (loop4): unmounting filesystem. [ 86.347575][ T28] audit: type=1400 audit(1719983842.744:364): avc: denied { rmdir } for pid=2001 comm="syz.4.565" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.497176][ T28] audit: type=1400 audit(1719983842.744:365): avc: denied { rename } for pid=2001 comm="syz.4.565" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.538268][ T1978] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.682152][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.858788][ T28] audit: type=1400 audit(1719983842.744:366): avc: denied { unlink } for pid=2001 comm="syz.4.565" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.012512][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 87.202424][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.380845][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.391094][ T291] syz-executor: attempt to access beyond end of device [ 87.391094][ T291] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.413970][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.446278][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.476316][ T39] usb 5-1: config 0 descriptor?? [ 87.522667][ T39] hub 5-1:0.0: USB hub found [ 87.532165][ T508] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 87.742133][ T39] hub 5-1:0.0: 1 port detected [ 87.780605][ T2034] loop3: detected capacity change from 0 to 2048 [ 87.812045][ T508] usb 2-1: Using ep0 maxpacket: 8 [ 87.865253][ T2034] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.972251][ T508] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.012079][ T508] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 88.021736][ T508] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.363262][ T508] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 88.412100][ T39] hub 5-1:0.0: activate --> -90 [ 88.452097][ T508] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 88.460986][ T508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.502074][ T508] usb 2-1: SerialNumber: syz [ 88.522188][ T2023] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 88.542650][ T508] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 88.549256][ T508] usb-storage 2-1:1.0: USB Mass Storage device detected [ 88.592492][ T508] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 88.651071][ T508] scsi host1: usb-storage 2-1:1.0 [ 88.657165][ T291] EXT4-fs (loop3): unmounting filesystem. [ 88.664349][ T2046] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.760285][ T2051] loop3: detected capacity change from 0 to 2048 [ 88.785467][ T2049] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.793363][ T2051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.813461][ T2051] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 88.826325][ T310] usb 5-1: USB disconnect, device number 4 [ 88.832086][ T39] usb 5-1-port1: cannot reset (err = -71) [ 88.837758][ T39] usb 5-1-port1: attempt power cycle [ 88.844418][ T291] EXT4-fs (loop3): unmounting filesystem. [ 89.133097][ T2071] overlayfs: './file0' not a directory [ 89.982062][ T2044] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 90.042441][ T310] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 90.196651][ T2086] tipc: Failed to remove unknown binding: 66,1,1/0:1277182423/1277182425 [ 90.222978][ T2089] syz.3.591[2089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.223058][ T2089] syz.3.591[2089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.305110][ T2090] tipc: Failed to remove unknown binding: 66,1,1/0:1277182423/1277182425 [ 90.327750][ T2093] loop3: detected capacity change from 0 to 512 [ 90.373447][ T2093] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.592: bad orphan inode 1 [ 90.403782][ T2093] EXT4-fs (loop3): Remounting filesystem read-only [ 90.410130][ T2093] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.462821][ T291] EXT4-fs (loop3): unmounting filesystem. [ 90.534596][ T2101] loop3: detected capacity change from 0 to 512 [ 90.683455][ T2101] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.709999][ T2101] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038 (0x7fffffff) [ 90.775508][ T28] audit: type=1400 audit(1719983847.284:367): avc: denied { rename } for pid=2100 comm="syz.3.595" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 90.819761][ T2101] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 90.852151][ T2101] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 90.882940][ T291] EXT4-fs (loop3): unmounting filesystem. [ 90.909668][ T314] usb 2-1: USB disconnect, device number 6 [ 91.245270][ T2113] overlayfs: './file0' not a directory [ 91.322405][ T310] usb 5-1: string descriptor 0 read error: -22 [ 91.331001][ T310] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a9b, bcdDevice=30.9b [ 91.579216][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.638842][ T310] usb 5-1: config 0 descriptor?? [ 91.917292][ T2123] input: syz0 as /devices/virtual/input/input12 [ 92.083067][ T2126] overlayfs: missing 'lowerdir' [ 92.206736][ T310] usb 5-1: USB disconnect, device number 9 [ 93.152679][ T2138] tipc: Failed to remove unknown binding: 66,1,1/0:851790755/851790757 [ 93.365089][ T2148] tipc: Failed to remove unknown binding: 66,1,1/0:851790755/851790757 [ 93.943973][ T2151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.609'. [ 94.132015][ C0] sched: RT throttling activated [ 94.387151][ T2157] loop3: detected capacity change from 0 to 2048 [ 94.513109][ T2157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.660829][ T291] EXT4-fs (loop3): unmounting filesystem. [ 95.012136][ T412] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 95.420025][ T2190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.623'. [ 95.553870][ T28] audit: type=1400 audit(1719983852.064:368): avc: denied { sys_module } for pid=2198 comm="syz.4.626" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.805853][ T2210] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.630' resets device [ 95.822090][ T412] usb 4-1: string descriptor 0 read error: -22 [ 95.828122][ T412] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a9b, bcdDevice=30.9b [ 95.865750][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.882313][ T2212] loop4: detected capacity change from 0 to 1024 [ 95.898036][ T412] usb 4-1: config 0 descriptor?? [ 95.903161][ T2212] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 95.934300][ T2212] EXT4-fs (loop4): write access will be enabled during recovery [ 95.941780][ T2212] EXT4-fs (loop4): barriers disabled [ 95.972272][ T2212] JBD2: no valid journal superblock found [ 96.002051][ T2212] EXT4-fs (loop4): error loading journal [ 96.218504][ T2216] overlayfs: missing 'lowerdir' [ 96.340854][ T412] usb 4-1: USB disconnect, device number 4 [ 96.853132][ T2229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.637'. [ 97.831192][ T28] audit: type=1400 audit(1719983854.334:369): avc: denied { mount } for pid=2257 comm="syz.4.647" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 97.871394][ T2263] loop4: detected capacity change from 0 to 256 [ 97.912974][ T28] audit: type=1400 audit(1719983854.334:370): avc: denied { remount } for pid=2257 comm="syz.4.647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 97.938103][ T2263] exfat: Unknown parameter '000000000000000000000xffffffffffffffff' [ 97.949131][ T28] audit: type=1400 audit(1719983854.364:371): avc: denied { unmount } for pid=1233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 98.600455][ T28] audit: type=1400 audit(1719983855.104:372): avc: denied { watch watch_reads } for pid=2278 comm="syz.4.654" path="/74/bus" dev="overlay" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 99.106792][ T28] audit: type=1400 audit(1719983855.614:373): avc: denied { read } for pid=2287 comm="syz.1.658" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 99.171653][ T28] audit: type=1400 audit(1719983855.614:374): avc: denied { open } for pid=2287 comm="syz.1.658" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 99.279722][ T28] audit: type=1400 audit(1719983855.784:375): avc: denied { view } for pid=2287 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 99.357957][ T2301] loop4: detected capacity change from 0 to 256 [ 99.384318][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.412629][ T2289] tap0: tun_chr_ioctl cmd 1074025677 [ 99.421650][ T2289] tap0: linktype set to 1 [ 99.484296][ T2304] validate_nla: 44 callbacks suppressed [ 99.484318][ T2304] netlink: 'syz.4.664': attribute type 16 has an invalid length. [ 99.537010][ T2304] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.664'. [ 99.664573][ T28] audit: type=1400 audit(1719983856.174:376): avc: denied { write } for pid=2309 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.688330][ T2311] netlink: 256 bytes leftover after parsing attributes in process `syz.4.666'. [ 99.722112][ T28] audit: type=1400 audit(1719983856.194:377): avc: denied { nlmsg_write } for pid=2309 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.795852][ T2313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.862279][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.991031][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.111537][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 100.148327][ T2319] overlayfs: unrecognized mount option "r [ 100.148327][ T2319] conntrack [ 100.148327][ T2319] conntrack [ 100.148327][ T2319] conntrack [ 100.148327][ T2319] connlimit [ 100.148327][ T2319] connbytes [ 100.148327][ T2319] comment [ 100.148327][ T2319] bpf [ 100.148327][ T2319] bpf [ 100.148327][ T2319] connmark [ 100.148327][ T2319] mark [ 100.148327][ T2319] icmp [ 100.148327][ T2319] socket [ 100.148327][ T2319] socket [ 100.148327][ T2319] socket [ 100.148327][ T2319] socket [ 100.148327][ T2319] quota2 [ 100.148327][ T2319] policy [ 100.148327][ T2319] multiport [ 100.148327][ T2319] length [ 100.148327][ T2319] l2tp [ 100.148327][ T2319] iprange [ 100.148327][ T2319] ttl [ 100.148327][ T2319] hashlimit [ 100.148327][ T2319] hashlimit [ 100.148327][ T2319] hashlimit [ 100.148327][ T2319] esp [ 100.148327][ T2319] ecn [ 100.148327][ T2319] tos [ 100.148327][ T2319] dscp [ 100.148327][ T2319] udplite [ 100.148327][ T2319] udp [ 100.148327][ T2319] tcp [ 100.149646][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.406932][ T2315] netlink: 2 bytes leftover after parsing attributes in process `syz.4.667'. [ 100.415709][ T28] audit: type=1400 audit(1719983856.914:378): avc: denied { nlmsg_read } for pid=2314 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.443001][ T310] usb 1-1: config 0 descriptor?? [ 100.943397][ T310] lg-g15 0003:046D:C222.0006: unbalanced collection at end of report description [ 100.963940][ T310] lg-g15: probe of 0003:046D:C222.0006 failed with error -22 [ 101.053762][ T2334] loop3: detected capacity change from 0 to 40427 [ 101.093409][ T2334] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 101.101182][ T2334] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 101.198135][ T2334] F2FS-fs (loop3): invalid crc value [ 101.226577][ T508] usb 1-1: USB disconnect, device number 3 [ 101.319101][ T2334] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.576403][ T2334] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 101.595334][ T2334] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.923992][ T2354] overlayfs: unrecognized mount option "r [ 101.923992][ T2354] conntrack [ 101.923992][ T2354] conntrack [ 101.923992][ T2354] conntrack [ 101.923992][ T2354] connlimit [ 101.923992][ T2354] connbytes [ 101.923992][ T2354] comment [ 101.923992][ T2354] bpf [ 101.923992][ T2354] bpf [ 101.923992][ T2354] connmark [ 101.923992][ T2354] mark [ 101.923992][ T2354] icmp [ 101.923992][ T2354] socket [ 101.923992][ T2354] socket [ 101.923992][ T2354] socket [ 101.923992][ T2354] socket [ 101.923992][ T2354] quota2 [ 101.923992][ T2354] policy [ 101.923992][ T2354] multiport [ 101.923992][ T2354] length [ 101.923992][ T2354] l2tp [ 101.923992][ T2354] iprange [ 101.923992][ T2354] ttl [ 101.923992][ T2354] hashlimit [ 101.923992][ T2354] hashlimit [ 101.923992][ T2354] hashlimit [ 101.923992][ T2354] esp [ 101.923992][ T2354] ecn [ 101.923992][ T2354] tos [ 101.923992][ T2354] dscp [ 101.923992][ T2354] udplite [ 101.923992][ T2354] udp [ 101.923992][ T2354] tcp [ 102.085216][ T2356] netlink: 2 bytes leftover after parsing attributes in process `syz.4.682'. [ 102.176957][ T2364] netlink: 256 bytes leftover after parsing attributes in process `syz.1.685'. [ 102.319350][ T2370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.770066][ T2377] overlayfs: './file0' not a directory [ 103.213346][ T2384] loop4: detected capacity change from 0 to 512 [ 103.254735][ T2384] ext4: Unknown parameter 'nouser_xattr' [ 103.310524][ T2384] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.691' resets device [ 103.388815][ T2386] device syzkaller0 entered promiscuous mode [ 103.591896][ T2381] loop3: detected capacity change from 0 to 40427 [ 103.657669][ T2381] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 103.682300][ T2381] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.711266][ T2399] netlink: 2 bytes leftover after parsing attributes in process `syz.4.697'. [ 103.752292][ T2381] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.813826][ T2408] netlink: 256 bytes leftover after parsing attributes in process `syz.0.698'. [ 103.859664][ T2381] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 103.871707][ T2381] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.989401][ T291] syz-executor: attempt to access beyond end of device [ 103.989401][ T291] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.132300][ T2420] device syzkaller0 entered promiscuous mode [ 104.400550][ T2429] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.708' resets device [ 105.936925][ T2458] netlink: 256 bytes leftover after parsing attributes in process `syz.2.717'. [ 106.262040][ T508] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.322039][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 106.361867][ T2467] bridge: RTM_NEWNEIGH with invalid ether address [ 106.586998][ T2469] netlink: 'syz.1.722': attribute type 16 has an invalid length. [ 106.625140][ T2469] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.722'. [ 106.634419][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 106.652124][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 51, changing to 9 [ 106.673015][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 33540, setting to 1024 [ 106.702057][ T508] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 106.721196][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.729257][ T6] usb 3-1: config 0 has no interfaces? [ 106.734720][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.745463][ T508] usb 4-1: config 0 descriptor?? [ 106.752152][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.783913][ T508] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 106.792335][ T6] usb 3-1: config 0 descriptor?? [ 107.282617][ T508] usb 3-1: USB disconnect, device number 10 [ 107.393937][ T2461] device bridge_slave_1 left promiscuous mode [ 107.431877][ T2461] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.594145][ T6] usb 4-1: USB disconnect, device number 5 [ 107.952766][ T2504] syz.4.726[2504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.952856][ T2504] syz.4.726[2504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.960400][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 107.960418][ T28] audit: type=1400 audit(1719983864.464:383): avc: denied { create } for pid=2501 comm="syz.1.733" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 108.065442][ T2504] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 108.423433][ T2520] loop3: detected capacity change from 0 to 1024 [ 108.432659][ T2520] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 108.443408][ T2520] EXT4-fs (loop3): group descriptors corrupted! [ 109.549421][ T2537] loop4: detected capacity change from 0 to 40427 [ 109.593136][ T2537] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 109.601213][ T2537] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 109.632982][ T2537] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 109.652884][ T2537] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.682075][ T314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.752476][ T2537] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 109.759359][ T2537] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 110.004131][ T2547] netlink: 236 bytes leftover after parsing attributes in process `syz.0.750'. [ 110.082103][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.102058][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.131851][ T314] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 110.162255][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.182661][ T314] usb 4-1: config 0 descriptor?? [ 110.242077][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 110.342053][ T508] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.582040][ T508] usb 1-1: Using ep0 maxpacket: 16 [ 110.612151][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 110.632062][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 51, changing to 9 [ 110.662065][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 33540, setting to 1024 [ 110.682109][ T6] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 110.690975][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.722091][ T508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.742053][ T508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.751626][ T508] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 110.764381][ T6] usb 5-1: config 0 descriptor?? [ 110.782149][ T508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.802644][ T6] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 110.824713][ T508] usb 1-1: config 0 descriptor?? [ 111.072482][ T2546] device bridge_slave_1 left promiscuous mode [ 111.078462][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.175635][ T6] usb 5-1: USB disconnect, device number 10 [ 111.363062][ T508] kovaplus 0003:1E7D:2D50.0007: item fetching failed at offset 5/7 [ 111.378246][ T508] kovaplus 0003:1E7D:2D50.0007: parse failed [ 111.675940][ T508] kovaplus: probe of 0003:1E7D:2D50.0007 failed with error -22 [ 111.970554][ T2570] loop4: detected capacity change from 0 to 16 [ 111.994241][ T2570] erofs: (device loop4): mounted with root inode @ nid 36. [ 112.242095][ T314] usbhid 4-1:0.0: can't add hid device: -71 [ 112.247881][ T314] usbhid: probe of 4-1:0.0 failed with error -71 [ 112.594828][ T314] usb 4-1: USB disconnect, device number 6 [ 112.664037][ T6] usb 1-1: USB disconnect, device number 4 [ 112.688308][ T2590] netlink: 80 bytes leftover after parsing attributes in process `syz.0.763'. [ 112.712589][ T2590] netlink: 80 bytes leftover after parsing attributes in process `syz.0.763'. [ 112.792776][ T2589] netlink: 236 bytes leftover after parsing attributes in process `syz.4.761'. [ 112.867633][ T2596] tipc: Failed to remove unknown binding: 66,1,1/0:3673769645/3673769647 [ 112.907262][ T28] audit: type=1400 audit(1719983869.414:384): avc: denied { map } for pid=2599 comm="syz.0.766" path="/dev/ashmem" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.908358][ T2596] tipc: Failed to remove unknown binding: 66,1,1/0:3673769645/3673769647 [ 112.983813][ T2604] incfs: Options parsing error. -22 [ 113.181441][ T2604] incfs: mount failed -22 [ 113.186096][ T2571] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.346312][ T2585] loop3: detected capacity change from 0 to 40427 [ 113.390765][ T2585] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 113.400581][ T2585] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 113.421668][ T2585] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 113.448385][ T2585] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.456731][ T2611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 113.498067][ T28] audit: type=1326 audit(1719983870.004:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2614 comm="syz.2.771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2dcf75b99 code=0x0 [ 113.573589][ T28] audit: type=1400 audit(1719983870.084:386): avc: denied { read } for pid=2626 comm="syz.4.774" dev="nsfs" ino=4026532774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.602325][ T2585] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 113.612033][ T2585] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.614629][ T28] audit: type=1400 audit(1719983870.084:387): avc: denied { open } for pid=2626 comm="syz.4.774" path="net:[4026532774]" dev="nsfs" ino=4026532774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.653267][ T2571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 113.692088][ T2571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 51, changing to 9 [ 113.705436][ T2631] netlink: 236 bytes leftover after parsing attributes in process `syz.0.775'. [ 113.705968][ T2571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 33540, setting to 1024 [ 113.778514][ T2571] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 113.805316][ T2571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.838675][ T2571] usb 2-1: config 0 descriptor?? [ 113.892593][ T2571] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 113.910307][ T28] audit: type=1400 audit(1719983870.414:388): avc: denied { mounton } for pid=2644 comm="syz.4.780" path="/proc/306/task" dev="proc" ino=26582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 113.978115][ T2646] netlink: 80 bytes leftover after parsing attributes in process `syz.3.776'. [ 114.002886][ T2646] netlink: 80 bytes leftover after parsing attributes in process `syz.3.776'. [ 114.028281][ T2646] netlink: 80 bytes leftover after parsing attributes in process `syz.3.776'. [ 114.230864][ T2658] loop3: detected capacity change from 0 to 16 [ 114.300546][ T2658] erofs: (device loop3): mounted with root inode @ nid 36. [ 114.647727][ T2668] overlayfs: './file0' not a directory [ 115.183629][ T2598] device bridge_slave_1 left promiscuous mode [ 115.189713][ T2598] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.384749][ T2664] loop3: detected capacity change from 0 to 40427 [ 115.414349][ T2671] netlink: 236 bytes leftover after parsing attributes in process `syz.0.788'. [ 115.423635][ T2664] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 115.441870][ T2664] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 115.473223][ T2664] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 115.503082][ T2664] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.599724][ T508] usb 2-1: USB disconnect, device number 7 [ 115.619741][ T2664] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 115.626753][ T2664] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.863855][ T2690] netlink: 80 bytes leftover after parsing attributes in process `syz.3.793'. [ 115.952121][ T2571] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.066759][ T2697] input: syz0 as /devices/virtual/input/input13 [ 116.152420][ T28] audit: type=1400 audit(1719983872.664:389): avc: denied { write } for pid=2698 comm="syz.3.799" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.189448][ T2688] loop4: detected capacity change from 0 to 40427 [ 116.222801][ T2688] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 116.237331][ T2688] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.262933][ T2688] F2FS-fs (loop4): invalid crc value [ 116.300901][ T2688] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.342089][ T2571] usb 1-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 116.362067][ T2571] usb 1-1: config 1 interface 0 has no altsetting 0 [ 116.442339][ T2688] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 116.449260][ T2688] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.562121][ T2571] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.562168][ T2571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.562195][ T2571] usb 1-1: Product: Ч [ 116.562227][ T2571] usb 1-1: Manufacturer: Л [ 116.562248][ T2571] usb 1-1: SerialNumber: syz [ 116.580286][ T1233] syz-executor: attempt to access beyond end of device [ 116.580286][ T1233] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 117.813606][ T2720] loop4: detected capacity change from 0 to 40427 [ 117.832445][ T2720] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 117.860858][ T2720] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 117.881072][ T2720] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 117.952600][ T2720] F2FS-fs (loop4): Found nat_bits in checkpoint [ 117.962920][ T28] audit: type=1400 audit(1719983874.474:390): avc: denied { map } for pid=2727 comm="syz.2.807" path="socket:[27728]" dev="sockfs" ino=27728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.061772][ T2736] input: syz0 as /devices/virtual/input/input14 [ 118.116607][ T2720] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 118.126615][ T2720] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.776799][ T2754] loop4: detected capacity change from 0 to 512 [ 118.823586][ T2754] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.847495][ T2754] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.943115][ T2571] usb 1-1: USB disconnect, device number 5 [ 118.951624][ T2754] EXT4-fs (loop4): 1 truncate cleaned up [ 118.957149][ T2754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 118.968024][ T28] audit: type=1400 audit(1719983875.474:391): avc: denied { setattr } for pid=2753 comm="syz.4.812" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.069005][ T2747] syz.1.811 (2747) used greatest stack depth: 19448 bytes left [ 119.260347][ T1233] EXT4-fs (loop4): unmounting filesystem. [ 120.071099][ T2798] loop4: detected capacity change from 0 to 2048 [ 120.142692][ T2798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.155857][ T2798] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.249925][ T2798] EXT4-fs (loop4): Remounting filesystem read-only [ 120.306738][ T1233] EXT4-fs (loop4): unmounting filesystem. [ 121.351315][ T2831] loop4: detected capacity change from 0 to 2048 [ 121.439375][ T2831] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.452154][ T2831] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038 (0x7fffffff) [ 121.488095][ T2834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=2834 comm=syz.1.839 [ 121.779593][ T1233] EXT4-fs (loop4): unmounting filesystem. [ 121.811020][ T2841] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 121.860866][ T28] audit: type=1400 audit(1719983878.364:392): avc: denied { relabelto } for pid=2840 comm="syz.3.842" name="file0" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 121.911898][ T2844] loop4: detected capacity change from 0 to 2048 [ 121.944162][ T28] audit: type=1400 audit(1719983878.364:393): avc: denied { associate } for pid=2840 comm="syz.3.842" name="file0" dev="tmpfs" ino=1160 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 122.003843][ T2844] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.014687][ T28] audit: type=1400 audit(1719983878.454:394): avc: denied { rmdir } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 122.067220][ T2844] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.101932][ T28] audit: type=1400 audit(1719983878.604:395): avc: denied { relabelfrom } for pid=2852 comm="syz.3.845" name="" dev="pipefs" ino=27269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 122.183159][ T2844] EXT4-fs (loop4): Remounting filesystem read-only [ 122.224247][ T1233] EXT4-fs (loop4): unmounting filesystem. [ 122.310183][ T2862] loop4: detected capacity change from 0 to 512 [ 122.335791][ T2862] EXT4-fs (loop4): 1 truncate cleaned up [ 122.342362][ T2862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.380802][ T1233] EXT4-fs (loop4): unmounting filesystem. [ 122.738852][ T2879] overlayfs: upper fs does not support tmpfile. [ 122.757210][ T2881] __nla_validate_parse: 2 callbacks suppressed [ 122.757229][ T2881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.854'. [ 122.776154][ T2879] overlayfs: upper fs does not support tmpfile. [ 122.865918][ T2874] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.884819][ T2874] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.924846][ T2874] device bridge_slave_0 entered promiscuous mode [ 122.962698][ T2874] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.983823][ T2874] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.030188][ T2874] device bridge_slave_1 entered promiscuous mode [ 123.062272][ T2889] loop3: detected capacity change from 0 to 2048 [ 123.109370][ T2889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.185541][ T2889] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.263339][ T2889] EXT4-fs (loop3): Remounting filesystem read-only [ 123.307044][ T291] EXT4-fs (loop3): unmounting filesystem. [ 123.373484][ T346] device bridge_slave_0 left promiscuous mode [ 123.379450][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.403037][ T346] device veth1_macvtap left promiscuous mode [ 123.408896][ T346] device veth0_vlan left promiscuous mode [ 123.447151][ T2898] loop3: detected capacity change from 0 to 128 [ 123.497375][ T28] audit: type=1400 audit(1719983880.004:396): avc: denied { mounton } for pid=2897 comm="syz.3.861" path="/217/file1/bus" dev="loop3" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 123.546097][ T28] audit: type=1400 audit(1719983880.014:397): avc: denied { mounton } for pid=2897 comm="syz.3.861" path="/217/file1/file0" dev="loop3" ino=1048640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 123.634776][ T515] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 123.672124][ T515] FAT-fs (loop3): Filesystem has been set read-only [ 123.967723][ T28] audit: type=1400 audit(1719983880.264:398): avc: denied { write } for pid=2896 comm="syz.1.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.016733][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.030499][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.038052][ T28] audit: type=1400 audit(1719983880.264:399): avc: denied { nlmsg_read } for pid=2896 comm="syz.1.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.077566][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.088969][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.119840][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.126871][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.159668][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.180490][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.208357][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.215246][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.249688][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.263305][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.271480][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.279983][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.288163][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.292618][ T28] audit: type=1400 audit(1719983880.764:400): avc: denied { mounton } for pid=2907 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 124.353323][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.361636][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.414094][ T2874] device veth0_vlan entered promiscuous mode [ 124.436430][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.452618][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.477186][ T2874] device veth1_macvtap entered promiscuous mode [ 124.503587][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.510968][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.525246][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.537470][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.552356][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.582088][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.590161][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.612411][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.620564][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.692467][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.699336][ T2907] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.772885][ T28] audit: type=1400 audit(1719983881.284:401): avc: denied { write } for pid=2935 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 124.773696][ T2936] raw_sendmsg: syz.4.876 forgot to set AF_INET. Fix it! [ 124.802512][ T2907] device bridge_slave_0 entered promiscuous mode [ 124.816187][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.832049][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.858123][ T2907] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.892526][ T2907] device bridge_slave_1 entered promiscuous mode [ 125.111836][ T2943] loop4: detected capacity change from 0 to 256 [ 125.512118][ T6] usb 1-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 125.528653][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.531641][ T6] usb 1-1: config 1 interface 0 has no altsetting 0 [ 125.536934][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.580121][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.598904][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.612213][ T2571] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.619070][ T2571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.644108][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.669178][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.686475][ T2571] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.693363][ T2571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.717071][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.724769][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.734350][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.750394][ T346] device bridge_slave_0 left promiscuous mode [ 125.752054][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.758826][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.792189][ T6] usb 1-1: Product: Ч [ 125.796129][ T6] usb 1-1: Manufacturer: Л [ 125.800425][ T6] usb 1-1: SerialNumber: syz [ 125.959240][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.979134][ T2907] device veth0_vlan entered promiscuous mode [ 125.997342][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.014325][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.028987][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.042313][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.059281][ T2907] device veth1_macvtap entered promiscuous mode [ 126.073815][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.082535][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.090522][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.102103][ T2748] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 126.119466][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.134003][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.154497][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.171399][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.266349][ T2966] loop3: detected capacity change from 0 to 2048 [ 126.269096][ T2968] input: syz0 as /devices/virtual/input/input16 [ 126.307237][ T2966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.336125][ T2966] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 126.371866][ T2966] fs-verity: sha512 using implementation "sha512-avx2" [ 126.412742][ T2907] EXT4-fs (loop3): unmounting filesystem. [ 126.522163][ T2748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.543093][ T2748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.573350][ T2748] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.598357][ T2748] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 126.616403][ T2748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.636261][ T2748] usb 3-1: config 0 descriptor?? [ 126.752042][ T19] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.112103][ T19] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 127.123272][ T2748] acrux 0003:1A34:0802.0008: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 127.133185][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.144538][ T2748] acrux 0003:1A34:0802.0008: no inputs found [ 127.164714][ T2748] acrux 0003:1A34:0802.0008: Failed to enable force feedback support, error: -19 [ 127.168790][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.213114][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 127.244596][ T19] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 127.572089][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.583179][ T6] usb 1-1: USB disconnect, device number 6 [ 127.634300][ T19] usb 4-1: config 0 descriptor?? [ 127.950117][ T2748] usb 3-1: USB disconnect, device number 11 [ 128.113072][ T19] thrustmaster 0003:044F:B653.0009: unbalanced delimiter at end of report description [ 128.134461][ T19] thrustmaster 0003:044F:B653.0009: parse failed [ 128.140652][ T19] thrustmaster: probe of 0003:044F:B653.0009 failed with error -22 [ 128.321935][ T19] usb 4-1: USB disconnect, device number 7 [ 128.562496][ T2990] loop4: detected capacity change from 0 to 40427 [ 128.582733][ T2990] F2FS-fs (loop4): invalid crc value [ 128.643276][ T2990] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.762189][ T2990] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 128.795859][ T28] audit: type=1400 audit(1719983885.304:402): avc: denied { getopt } for pid=2989 comm="syz.4.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.815408][ T2874] syz-executor: attempt to access beyond end of device [ 128.815408][ T2874] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.115625][ T3022] loop3: detected capacity change from 0 to 256 [ 129.201641][ T28] audit: type=1400 audit(1719983885.704:403): avc: denied { lock } for pid=3023 comm="syz.0.908" path="socket:[28370]" dev="sockfs" ino=28370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 129.512070][ T293] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 129.529573][ T3035] loop3: detected capacity change from 0 to 40427 [ 129.573528][ T3035] F2FS-fs (loop3): invalid crc value [ 129.625797][ T3035] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.732862][ T3035] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 129.805339][ T2907] syz-executor: attempt to access beyond end of device [ 129.805339][ T2907] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.852141][ T19] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 129.922149][ T293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.941817][ T293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.961090][ T293] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.992046][ T293] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 130.008668][ T293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.045263][ T293] usb 5-1: config 0 descriptor?? [ 130.232102][ T19] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 130.272066][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.292045][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.301614][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 130.342059][ T19] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 130.361105][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.372737][ T19] usb 3-1: config 0 descriptor?? [ 130.565302][ T293] acrux 0003:1A34:0802.000A: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 130.596407][ T293] acrux 0003:1A34:0802.000A: no inputs found [ 130.607773][ T293] acrux 0003:1A34:0802.000A: Failed to enable force feedback support, error: -19 [ 132.153153][ T19] thrustmaster 0003:044F:B653.000B: unbalanced delimiter at end of report description [ 132.182232][ T19] thrustmaster 0003:044F:B653.000B: parse failed [ 132.188443][ T19] thrustmaster: probe of 0003:044F:B653.000B failed with error -22 [ 132.262038][ T293] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 132.367140][ T2748] usb 3-1: USB disconnect, device number 12 [ 133.182899][ T2571] usb 5-1: USB disconnect, device number 11 [ 133.499781][ T28] audit: type=1400 audit(1719983890.004:404): avc: denied { read } for pid=3092 comm="syz.0.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.529108][ T3080] loop4: detected capacity change from 0 to 40427 [ 133.554240][ T3080] F2FS-fs (loop4): invalid crc value [ 133.584808][ T3080] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.595923][ T28] audit: type=1400 audit(1719983890.104:405): avc: denied { mount } for pid=3081 comm="syz.1.927" name="/" dev="pstore" ino=13363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 133.658089][ T28] audit: type=1326 audit(1719983890.164:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3098 comm="syz.0.931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6c4d75b99 code=0x0 [ 133.710872][ T3080] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 133.769840][ T2874] syz-executor: attempt to access beyond end of device [ 133.769840][ T2874] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.532102][ T293] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 134.798396][ T3119] input: syz0 as /devices/virtual/input/input17 [ 134.855037][ T3122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.938'. [ 134.907537][ T28] audit: type=1400 audit(1719983891.414:407): avc: denied { mount } for pid=3124 comm="syz.2.941" name="/" dev="configfs" ino=12204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 134.972528][ T28] audit: type=1400 audit(1719983891.444:408): avc: denied { read } for pid=3124 comm="syz.2.941" name="/" dev="configfs" ino=12204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.982106][ T293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.042081][ T293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.059346][ T28] audit: type=1400 audit(1719983891.444:409): avc: denied { open } for pid=3124 comm="syz.2.941" path="/89/file0" dev="configfs" ino=12204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.081942][ T293] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 135.110461][ T293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.145475][ T28] audit: type=1400 audit(1719983891.454:410): avc: denied { unmount } for pid=1539 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 135.146709][ T293] usb 5-1: config 0 descriptor?? [ 135.371421][ T3134] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.057564][ T3151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 136.198060][ T3160] input: syz0 as /devices/virtual/input/input18 [ 136.269907][ T28] audit: type=1400 audit(1719983892.774:411): avc: denied { setattr } for pid=3164 comm="syz.2.958" name="/" dev="configfs" ino=12204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.385577][ T28] audit: type=1400 audit(1719983892.894:412): avc: denied { setopt } for pid=3167 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.842027][ T39] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 137.092072][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 137.192140][ T293] usbhid 5-1:0.0: can't add hid device: -71 [ 137.198017][ T293] usbhid: probe of 5-1:0.0 failed with error -71 [ 137.242117][ T39] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.269397][ T293] usb 5-1: USB disconnect, device number 12 [ 137.293052][ T3187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 137.312744][ T28] audit: type=1400 audit(1719983893.824:413): avc: denied { ioctl } for pid=3189 comm="syz.0.968" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 137.474947][ T28] audit: type=1400 audit(1719983893.984:414): avc: denied { rename } for pid=3194 comm="syz.4.971" name="file0" dev="incremental-fs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.522537][ T39] usb 3-1: New USB device found, idVendor=0424, idProduct=9909, bcdDevice= 1.89 [ 137.531585][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.583582][ T39] usb 3-1: Product: syz [ 137.614031][ T39] usb 3-1: Manufacturer: syz [ 137.718171][ T39] usb 3-1: SerialNumber: syz [ 137.825551][ T39] usb 3-1: config 0 descriptor?? [ 137.883625][ T3201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 138.524541][ T6] usb 3-1: USB disconnect, device number 13 [ 138.984560][ T28] audit: type=1400 audit(1719983895.494:415): avc: denied { setopt } for pid=3233 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.042051][ T28] audit: type=1400 audit(1719983895.524:416): avc: denied { read } for pid=3233 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.872141][ T3254] fuse: Bad value for 'fd' [ 140.237379][ T6] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.482063][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 140.582530][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.602096][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.658391][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.665546][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.692521][ T3267] device bridge_slave_0 entered promiscuous mode [ 140.714008][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.735349][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.772015][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.779307][ T3267] device bridge_slave_1 entered promiscuous mode [ 140.785760][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.802044][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.802071][ T412] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 140.818619][ T6] usb 5-1: config 0 descriptor?? [ 141.202094][ T412] usb 1-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 141.243492][ T412] usb 1-1: config 1 interface 0 has no altsetting 0 [ 141.357002][ T322] device bridge_slave_1 left promiscuous mode [ 141.369103][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.446148][ T322] device bridge_slave_0 left promiscuous mode [ 141.516040][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.562233][ T412] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.608314][ T412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.651347][ T322] device veth1_macvtap left promiscuous mode [ 141.692061][ T28] audit: type=1400 audit(1719983898.124:417): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.732319][ T412] usb 1-1: Product: Ч [ 141.743555][ T322] device veth0_vlan left promiscuous mode [ 141.783415][ T412] usb 1-1: Manufacturer: Л [ 141.839654][ T412] usb 1-1: SerialNumber: syz [ 142.124704][ T6] microsoft 0003:045E:07DA.000C: unknown main item tag 0x6 [ 142.131778][ T6] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 142.142965][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000C/input/input19 [ 142.536749][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.543664][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.550741][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.557533][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.584430][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.612109][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.649424][ T3303] netlink: 'syz.2.1006': attribute type 4 has an invalid length. [ 142.705297][ T3304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.747174][ T6] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 142.783402][ T6] usb 5-1: USB disconnect, device number 13 [ 142.873110][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.933539][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.940936][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.961164][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.983294][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.991384][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.998279][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.032342][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.060816][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.075914][ T3310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 143.082284][ T2748] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.091546][ T2748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.132163][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.150374][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.175746][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.210719][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.315289][ T3267] device veth0_vlan entered promiscuous mode [ 143.334971][ T3267] device veth1_macvtap entered promiscuous mode [ 143.342564][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.350781][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.359467][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.367922][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.376425][ T1584] general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN [ 143.387969][ T1584] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 143.396207][ T1584] CPU: 1 PID: 1584 Comm: syz.0.426 Not tainted 6.1.84-syzkaller-00131-g81e9f0610c73 #0 [ 143.405670][ T1584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 143.415565][ T1584] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 143.422244][ T1584] Code: 89 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6e 17 d0 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 51 17 d0 ff 4c 8b 23 4d 85 e4 4c [ 143.441787][ T1584] RSP: 0018:ffffc90001a6eec0 EFLAGS: 00010202 [ 143.447684][ T1584] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000040000 [ 143.455496][ T1584] RDX: ffffc90009ea4000 RSI: 000000000003ffff RDI: 0000000000040000 [ 143.463315][ T1584] RBP: ffffc90001a6ef90 R08: ffff88813a326540 R09: 0000000000000001 [ 143.471114][ T1584] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110255f403e [ 143.478931][ T1584] R13: dffffc0000000000 R14: ffff88813a326540 R15: 0000000000000001 [ 143.486741][ T1584] FS: 00007f1af90816c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 143.495591][ T1584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.502013][ T1584] CR2: 00007fe2dddddfa8 CR3: 0000000136f8f000 CR4: 00000000003506a0 [ 143.509828][ T1584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.517640][ T1584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.525450][ T1584] Call Trace: [ 143.528572][ T1584] [ 143.531452][ T1584] ? __die_body+0x62/0xb0 [ 143.535602][ T1584] ? die_addr+0x9f/0xd0 [ 143.539597][ T1584] ? exc_general_protection+0x317/0x4c0 [ 143.545004][ T1584] ? asm_exc_general_protection+0x27/0x30 [ 143.550543][ T1584] ? __ext4_journal_get_write_access+0xb0/0x690 [ 143.556612][ T1584] ? __ext4_journal_stop+0x36/0x1c0 [ 143.561831][ T1584] ? __ext4_journal_ensure_credits+0x470/0x470 [ 143.567815][ T1584] ? __ext4_expand_extra_isize+0x420/0x420 [ 143.573471][ T1584] ext4_xattr_block_set+0x1dcc/0x3760 [ 143.578676][ T1584] ? ext4_xattr_block_find+0x320/0x320 [ 143.583969][ T1584] ? ext4_reserve_inode_write+0x2b3/0x360 [ 143.589642][ T1584] ? ext4_mark_iloc_dirty+0x1970/0x1970 [ 143.595025][ T1584] ? ext4_xattr_ibody_find+0x102/0x530 [ 143.600318][ T1584] ext4_xattr_set_handle+0xdac/0x1560 [ 143.605527][ T1584] ? ext4_xattr_set_entry+0x3ef0/0x3ef0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 143.610910][ T1584] ? selinux_inode_free_security+0x210/0x210 [ 143.616721][ T1584] ext4_initxattrs+0xa7/0x120 [ 143.621233][ T1584] security_inode_init_security+0x252/0x390 [ 143.626958][ T1584] ? ext4_init_security+0x40/0x40 [ 143.631822][ T1584] ? security_dentry_create_files_as+0xc0/0xc0 [ 143.637812][ T1584] ? __ext4_set_acl+0x5e0/0x5e0 [ 143.642492][ T1584] ? _raw_spin_unlock+0x4c/0x70 [ 143.647186][ T1584] ext4_init_security+0x34/0x40 [ 143.651869][ T1584] __ext4_new_inode+0x31ef/0x40a0 [ 143.656827][ T1584] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 143.662368][ T1584] ? dquot_initialize+0x20/0x20 [ 143.667147][ T1584] ext4_create+0x275/0x550 [ 143.671401][ T1584] ? ext4_lookup+0x740/0x740 [ 143.675826][ T1584] ? selinux_inode_create+0x22/0x30 [ 143.680855][ T1584] ? security_inode_create+0xbc/0x100 [ 143.686062][ T1584] ? ext4_lookup+0x740/0x740 [ 143.690491][ T1584] path_openat+0x12ee/0x2d60 [ 143.694927][ T1584] ? do_filp_open+0x480/0x480 [ 143.699433][ T1584] do_filp_open+0x230/0x480 [ 143.703771][ T1584] ? vfs_tmpfile+0x480/0x480 [ 143.708204][ T1584] ? alloc_fd+0x4fa/0x5a0 [ 143.712367][ T1584] do_sys_openat2+0x13f/0x850 [ 143.716889][ T1584] ? do_sys_open+0x220/0x220 [ 143.721302][ T1584] ? __this_cpu_preempt_check+0x13/0x20 [ 143.726678][ T1584] ? xfd_validate_state+0x6f/0x170 [ 143.731631][ T1584] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 143.737363][ T1584] __x64_sys_openat+0x243/0x290 [ 143.742143][ T1584] ? __ia32_sys_open+0x270/0x270 [ 143.746905][ T1584] ? switch_fpu_return+0xe/0x10 [ 143.751617][ T1584] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 143.757064][ T1584] do_syscall_64+0x3d/0xb0 [ 143.761312][ T1584] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.767043][ T1584] RIP: 0033:0x7f1af8375b99 [ 143.771291][ T1584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.790734][ T1584] RSP: 002b:00007f1af9081048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.799065][ T1584] RAX: ffffffffffffffda RBX: 00007f1af8504038 RCX: 00007f1af8375b99 [ 143.807171][ T1584] RDX: 00000000000026e1 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 143.814982][ T1584] RBP: 00007f1af83e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 143.822793][ T1584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.830690][ T1584] R13: 000000000000006e R14: 00007f1af8504038 R15: 00007ffeefee90a8 [ 143.838509][ T1584] [ 143.841368][ T1584] Modules linked in: [ 143.863265][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.871820][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.881772][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.933846][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.941270][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.992075][ T1584] ---[ end trace 0000000000000000 ]--- [ 143.997380][ T1584] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 144.073124][ T1584] Code: 89 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6e 17 d0 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 51 17 d0 ff 4c 8b 23 4d 85 e4 4c [ 144.122243][ T1584] RSP: 0018:ffffc90001a6eec0 EFLAGS: 00010202 [ 144.135836][ T1584] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000040000 [ 144.172036][ T1584] RDX: ffffc90009ea4000 RSI: 000000000003ffff RDI: 0000000000040000 [ 144.179866][ T1584] RBP: ffffc90001a6ef90 R08: ffff88813a326540 R09: 0000000000000001 [ 144.254799][ T1584] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110255f403e [ 144.302140][ T1584] R13: dffffc0000000000 R14: ffff88813a326540 R15: 0000000000000001 [ 144.309962][ T1584] FS: 00007f1af90816c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 144.352036][ T1584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.358465][ T1584] CR2: 00007fe2dddddfa8 CR3: 0000000136f8f000 CR4: 00000000003506a0 [ 144.412284][ T1584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.420102][ T1584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.432135][ T412] usb 1-1: USB disconnect, device number 7 [ 144.472021][ T1584] Kernel panic - not syncing: Fatal exception [ 144.478274][ T1584] Kernel Offset: disabled [ 144.482414][ T1584] Rebooting in 86400 seconds..