last executing test programs: 15.077406529s ago: executing program 0 (id=119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) 15.06621223s ago: executing program 0 (id=120): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5406, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 15.01718859s ago: executing program 0 (id=121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 14.99018958s ago: executing program 0 (id=123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000107d1ece3100000000000109022400010000"], 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 13.464716868s ago: executing program 0 (id=137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000001380)="705358cf3799ae468e126f2b29d06a899b30d1f8225afbe71d0e3c00e165090290de47ceb3d4229efc4e94271779f55b6322e6f61ebd96ef53ca00749598cbdaaa7b5593d8001437b86496a16e30a9187b34adad238664a3a6d1d580c239eb37fd05e8c7220aee659a2bb1401a97b2d718036936feec57d0edd49d1498b24222", 0x80}, {&(0x7f0000001400)='7', 0x1}, {&(0x7f0000001480)="62dc", 0x2}], 0x3}}], 0x1, 0x4040841) 13.362230179s ago: executing program 0 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) 13.362088609s ago: executing program 32 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) 13.305418078s ago: executing program 5 (id=148): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000007c0)="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", 0x100}]) r1 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xc0386723, 0x20000000) 13.265900269s ago: executing program 33 (id=148): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000007c0)="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", 0x100}]) r1 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xc0386723, 0x20000000) 3.78345755s ago: executing program 1 (id=297): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x11000000}, 0x3, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x10000, 0x2000000b, 0x0, 0x5}, 0x1, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3.76300191s ago: executing program 1 (id=298): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3.672535001s ago: executing program 1 (id=301): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 3.069300554s ago: executing program 6 (id=316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 3.016100794s ago: executing program 6 (id=320): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) 2.958170114s ago: executing program 6 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) 2.808736035s ago: executing program 1 (id=326): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) syz_usb_ep_write(r0, 0x81, 0x77, &(0x7f0000000140)="b9424705397f0019c136bc844da60be22bf21472b1e7f49ad068c4e1c025f36784ffffce4cf730ddbf395346f7fd09f2e176b224e7ea1deb33c697884689fb4963beac4912c6972acd778cd3e758e38f71fb90c5343d4d8a9c0000000000000000000000000000000000000042038a3071ea6bbe779417") 2.782721315s ago: executing program 6 (id=328): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.753327585s ago: executing program 6 (id=329): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x2) getdents(r0, &(0x7f0000000100)=""/155, 0x9b) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.403438497s ago: executing program 6 (id=334): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000, 0x0, 0x4000, 0x0, 0xfffc, 0x0, 0x800, 0x0, 0x3d3, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.704634001s ago: executing program 3 (id=340): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 1.510524582s ago: executing program 2 (id=341): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.437553113s ago: executing program 2 (id=342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4801, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x100, 0x0, 0x0) 1.355631993s ago: executing program 3 (id=343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x55) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.311735553s ago: executing program 3 (id=344): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 1.273410033s ago: executing program 3 (id=345): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000580)=0x1c6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 1.259431593s ago: executing program 3 (id=346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e20, 0x40, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffe, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1, 0x2, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 1.239794494s ago: executing program 3 (id=347): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000a00)={0x2, 0x100}) 571.267287ms ago: executing program 4 (id=358): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x3) 567.485907ms ago: executing program 2 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) 410.825678ms ago: executing program 4 (id=360): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r0, &(0x7f00000001c0)=""/60, 0x61) r1 = open_tree(r0, &(0x7f0000000000)='\x00', 0x9801) fchdir(r1) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 384.261588ms ago: executing program 4 (id=361): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="39919e8b05b7", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@private=0xa010101, @in6=@local, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x401, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 369.519468ms ago: executing program 4 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'bond0\x00', 0xa000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 352.579388ms ago: executing program 2 (id=363): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 334.491768ms ago: executing program 2 (id=364): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 291.086098ms ago: executing program 4 (id=365): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12e1ecd734f01a7c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000001c0)={[{@dioread_lock}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@quota}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") 238.369359ms ago: executing program 1 (id=366): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r3, 0x81, 0x0) read$FUSE(r2, &(0x7f0000007400)={0x2020}, 0x2020) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 221.157349ms ago: executing program 1 (id=367): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) unlink(&(0x7f0000000180)='./file1\x00') 15.64188ms ago: executing program 2 (id=368): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 0s ago: executing program 4 (id=369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x401eb94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 21.208839][ T28] audit: type=1400 audit(1731625126.706:66): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.210403][ T279] cgroup: Unknown subsys name 'net' [ 21.232329][ T28] audit: type=1400 audit(1731625126.706:67): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.260506][ T28] audit: type=1400 audit(1731625126.746:68): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.260762][ T279] cgroup: Unknown subsys name 'devices' [ 21.407488][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.412921][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.543726][ T28] audit: type=1400 audit(1731625127.036:69): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.567419][ T28] audit: type=1400 audit(1731625127.036:70): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.581789][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.593761][ T28] audit: type=1400 audit(1731625127.036:71): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.622039][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.625059][ T28] audit: type=1400 audit(1731625127.106:72): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.668800][ T28] audit: type=1400 audit(1731625127.106:73): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.694551][ T28] audit: type=1400 audit(1731625127.106:74): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.720310][ T28] audit: type=1400 audit(1731625127.106:75): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.277453][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.284322][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.292210][ T290] device bridge_slave_0 entered promiscuous mode [ 22.300258][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.307236][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.314699][ T290] device bridge_slave_1 entered promiscuous mode [ 22.356179][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.363247][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.371098][ T291] device bridge_slave_0 entered promiscuous mode [ 22.393524][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.400582][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.408168][ T291] device bridge_slave_1 entered promiscuous mode [ 22.425632][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.432493][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.440033][ T288] device bridge_slave_0 entered promiscuous mode [ 22.447201][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.455538][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.463574][ T288] device bridge_slave_1 entered promiscuous mode [ 22.554501][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.561526][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.569434][ T292] device bridge_slave_0 entered promiscuous mode [ 22.592078][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.599193][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.606974][ T292] device bridge_slave_1 entered promiscuous mode [ 22.617254][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.624109][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.631618][ T293] device bridge_slave_0 entered promiscuous mode [ 22.638887][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.645819][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.653277][ T293] device bridge_slave_1 entered promiscuous mode [ 22.830265][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.837283][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.844396][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.851231][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.865779][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.872794][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.880072][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.887015][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.899926][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.906995][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.914168][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.921223][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.946843][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.954238][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.961517][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.968404][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.981538][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.988420][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.995734][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.002846][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.037222][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.044459][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.053374][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.060711][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.068348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.076996][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.084567][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.091939][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.099244][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.106730][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.114054][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.144458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.153439][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.161453][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.169282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.178219][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.185258][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.192828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.200571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.208526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.217296][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.224138][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.231933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.239973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.266448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.273909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.281755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.290372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.299176][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.306326][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.316744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.326189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.335773][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.343376][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.360303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.368552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.387764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.396479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.405100][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.412529][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.420181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.427719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.435375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.444007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.452286][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.460157][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.467632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.476126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.484645][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.491557][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.499846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.508035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.516130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.524149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.532240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.540926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.573625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.582196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.591655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.600306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.613031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.620661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.631110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.639997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.648895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.657809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.672182][ T291] device veth0_vlan entered promiscuous mode [ 23.692698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.701135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.709988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.718214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.727629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.736566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.744731][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.751746][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.759380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.768048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.776185][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.783358][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.791762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.800268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.808733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.816167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.823627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.831586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.840394][ T290] device veth0_vlan entered promiscuous mode [ 23.857611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.865792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.874293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.883420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.893001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.902574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.910114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.921419][ T291] device veth1_macvtap entered promiscuous mode [ 23.934759][ T293] device veth0_vlan entered promiscuous mode [ 23.941032][ T288] device veth0_vlan entered promiscuous mode [ 23.948396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.957078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.966692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.975807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.984470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.992784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.001325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.024472][ T288] device veth1_macvtap entered promiscuous mode [ 24.034566][ T293] device veth1_macvtap entered promiscuous mode [ 24.041791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.050547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.059475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.068323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.076643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.085092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.094921][ T290] device veth1_macvtap entered promiscuous mode [ 24.110260][ T292] device veth0_vlan entered promiscuous mode [ 24.119964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.129030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.137506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.147553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.156609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.165764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.175472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.184313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.226078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.237201][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.247202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.255873][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.265859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.276440][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.286092][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.295885][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.304459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.317733][ T292] device veth1_macvtap entered promiscuous mode [ 24.351706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.372229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.418796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.445610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.572431][ T339] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.598262][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.623855][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.654111][ T348] bridge0: port 3(syz_tun) entered blocking state [ 24.666937][ T348] bridge0: port 3(syz_tun) entered disabled state [ 24.680864][ T348] device syz_tun entered promiscuous mode [ 24.758004][ T363] input: syz1 as /devices/virtual/input/input4 [ 24.763433][ T364] loop1: detected capacity change from 0 to 512 [ 24.788109][ T364] EXT4-fs: Ignoring removed i_version option [ 24.793969][ T364] EXT4-fs: Ignoring removed nobh option [ 24.823361][ T364] EXT4-fs (loop1): Test dummy encryption mode enabled [ 24.831328][ T364] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 24.844745][ T364] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 24.866103][ T364] EXT4-fs (loop1): 1 truncate cleaned up [ 24.882118][ T364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 24.919818][ T360] syz.2.19[360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.919904][ T360] syz.2.19[360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.923225][ T364] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 24.965401][ T315] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.988218][ T291] EXT4-fs (loop1): unmounting filesystem. [ 25.030316][ T377] loop2: detected capacity change from 0 to 512 [ 25.056164][ T377] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 25.097746][ T377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 25.107166][ T377] ext4 filesystem being mounted at /5/bus supports timestamps until 2038 (0x7fffffff) [ 25.140080][ T373] loop4: detected capacity change from 0 to 40427 [ 25.148393][ T377] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.25: corrupted xattr block 32 [ 25.161488][ T373] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 25.170621][ T377] EXT4-fs (loop2): Remounting filesystem read-only [ 25.177605][ T373] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 25.186196][ T377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 25.195899][ T377] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.25: corrupted xattr block 32 [ 25.207852][ T377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 25.216950][ T377] EXT4-fs error (device loop2): ext4_xattr_block_list:719: inode #15: comm syz.2.25: corrupted xattr block 32 [ 25.218334][ T373] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.235813][ T315] usb 1-1: Using ep0 maxpacket: 16 [ 25.263241][ T293] EXT4-fs (loop2): unmounting filesystem. [ 25.292900][ T395] syz.1.30[395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.292982][ T395] syz.1.30[395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.339438][ T399] can0: slcan on ptm0. [ 25.375334][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.406662][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.416782][ T373] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 25.423812][ T373] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.439687][ T315] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 25.475249][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.507793][ T315] usb 1-1: config 0 descriptor?? [ 25.564622][ T292] syz-executor: attempt to access beyond end of device [ 25.564622][ T292] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 25.726430][ T429] loop1: detected capacity change from 0 to 16 [ 25.739930][ T429] erofs: (device loop1): mounted with root inode @ nid 36. [ 25.759269][ T429] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 25.788074][ T397] loop2: detected capacity change from 0 to 40427 [ 25.808136][ T397] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 25.819469][ T397] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 25.832121][ T397] F2FS-fs (loop2): invalid crc value [ 25.852234][ T397] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.886632][ T439] loop4: detected capacity change from 0 to 1024 [ 25.893609][ T439] EXT4-fs: Ignoring removed nobh option [ 25.901517][ T439] EXT4-fs: Ignoring removed mblk_io_submit option [ 25.918480][ T439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.949791][ T397] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 25.950484][ T292] EXT4-fs (loop4): unmounting filesystem. [ 25.957488][ T397] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.996658][ T315] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 26.006726][ T397] syz.2.28: attempt to access beyond end of device [ 26.006726][ T397] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.022216][ T315] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 26.029666][ T315] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 26.037829][ T315] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 26.051320][ T315] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 26.061104][ T315] appleir 0003:05AC:8241.0001: No inputs registered, leaving [ 26.077896][ T315] appleir 0003:05AC:8241.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 26.094945][ T445] loop1: detected capacity change from 0 to 256 [ 26.111630][ T445] ======================================================= [ 26.111630][ T445] WARNING: The mand mount option has been deprecated and [ 26.111630][ T445] and is ignored by this kernel. Remove the mand [ 26.111630][ T445] option from the mount to silence this warning. [ 26.111630][ T445] ======================================================= [ 26.163475][ T445] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.184367][ T445] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 26.217748][ T445] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf32de3a7, utbl_chksum : 0xe619d30d) [ 26.234748][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 26.234765][ T28] audit: type=1400 audit(1731625131.726:193): avc: denied { read } for pid=450 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=428 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.266071][ T393] can0 (unregistered): slcan off ptm0. [ 26.270356][ T28] audit: type=1400 audit(1731625131.766:194): avc: denied { open } for pid=450 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=428 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.309048][ T39] usb 1-1: USB disconnect, device number 2 [ 26.316473][ T28] audit: type=1400 audit(1731625131.796:195): avc: denied { mount } for pid=444 comm="syz.1.43" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.364727][ T455] loop3: detected capacity change from 0 to 512 [ 26.391242][ T455] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 26.405506][ T28] audit: type=1400 audit(1731625131.816:196): avc: denied { write } for pid=444 comm="syz.1.43" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.445343][ T28] audit: type=1400 audit(1731625131.816:197): avc: denied { add_name } for pid=444 comm="syz.1.43" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.473646][ T28] audit: type=1400 audit(1731625131.816:198): avc: denied { associate } for pid=444 comm="syz.1.43" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.500616][ T28] audit: type=1400 audit(1731625131.816:199): avc: denied { read write } for pid=444 comm="syz.1.43" name="file1" dev="loop1" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.565498][ T28] audit: type=1400 audit(1731625131.816:200): avc: denied { open } for pid=444 comm="syz.1.43" path="/18/file0/file1" dev="loop1" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.582855][ T472] loop1: detected capacity change from 0 to 1024 [ 26.595330][ T28] audit: type=1400 audit(1731625131.816:201): avc: denied { map } for pid=444 comm="syz.1.43" path="/18/file0/file1" dev="loop1" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.615583][ T472] EXT4-fs: Ignoring removed oldalloc option [ 26.634539][ T477] Illegal XDP return value 4294967274 on prog (id 22) dev N/A, expect packet loss! [ 26.640164][ T28] audit: type=1400 audit(1731625131.816:202): avc: denied { execute } for pid=444 comm="syz.1.43" path="/18/file0/file1" dev="loop1" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.706508][ T472] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.774861][ T291] EXT4-fs (loop1): unmounting filesystem. [ 26.836065][ T495] loop3: detected capacity change from 0 to 1024 [ 26.840785][ T491] loop1: detected capacity change from 0 to 128 [ 26.861659][ T497] syz.0.59[497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.861739][ T497] syz.0.59[497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.880245][ T495] EXT4-fs: Ignoring removed orlov option [ 26.886509][ T491] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.913533][ T495] EXT4-fs (loop3): Test dummy encryption mode enabled [ 26.923478][ T491] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 27.012943][ T495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.074406][ T291] EXT4-fs (loop1): unmounting filesystem. [ 27.085732][ T290] EXT4-fs (loop3): unmounting filesystem. [ 27.169869][ T515] loop1: detected capacity change from 0 to 512 [ 27.186477][ T518] xt_hashlimit: size too large, truncated to 1048576 [ 27.235299][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.243841][ T515] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 27.273984][ T515] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.67: invalid indirect mapped block 8 (level 2) [ 27.309958][ T515] EXT4-fs (loop1): Remounting filesystem read-only [ 27.330811][ T515] EXT4-fs (loop1): 1 truncate cleaned up [ 27.344036][ T526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 27.353230][ T515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 27.403806][ T515] EXT4-fs error (device loop1): __ext4_remount:6435: comm syz.1.67: Abort forced by user [ 27.442189][ T515] EXT4-fs (loop1): Remounting filesystem read-only [ 27.456852][ T515] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 27.493455][ T291] EXT4-fs (loop1): unmounting filesystem. [ 27.535405][ T24] usb 3-1: device descriptor read/64, error -71 [ 27.564111][ T536] loop1: detected capacity change from 0 to 256 [ 27.601675][ T538] loop0: detected capacity change from 0 to 1024 [ 27.624347][ T536] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.625691][ T538] EXT4-fs: Ignoring removed orlov option [ 27.665338][ T538] EXT4-fs (loop0): Test dummy encryption mode enabled [ 27.670230][ T536] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 27.687104][ T538] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 27.698788][ T536] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 27.735565][ T288] EXT4-fs (loop0): unmounting filesystem. [ 27.893594][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 27.938854][ T561] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 27.955451][ T24] usb 3-1: device descriptor read/64, error -71 [ 28.107972][ T443] loop4: detected capacity change from 0 to 262144 [ 28.116974][ T443] F2FS-fs (loop4): invalid crc value [ 28.124139][ T443] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.162659][ T443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 28.205367][ T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.225303][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.337785][ T578] loop3: detected capacity change from 0 to 256 [ 28.349818][ T578] FAT-fs (loop3): bogus number of FAT sectors [ 28.357541][ T578] FAT-fs (loop3): Can't find a valid FAT filesystem [ 28.525282][ T24] usb 3-1: device descriptor read/64, error -71 [ 28.565304][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.581510][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.592900][ T19] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 28.603445][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.629910][ T19] usb 1-1: config 0 descriptor?? [ 28.668602][ T585] xt_hashlimit: size too large, truncated to 1048576 [ 28.771757][ T590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 28.930829][ T601] syz.3.111[601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.930920][ T601] syz.3.111[601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.945322][ T24] usb 3-1: device descriptor read/64, error -71 [ 29.105358][ T24] usb usb3-port1: attempt power cycle [ 29.306098][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.535218][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.495295][ T24] usb 3-1: device descriptor read/8, error -71 [ 32.497165][ T19] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 32.516193][ T19] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 32.522978][ T19] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 32.530392][ T19] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 32.537205][ T19] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 32.560305][ T19] wacom 0003:056A:5000.0002: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.0-1/input0 [ 32.584030][ T627] af_packet: tpacket_rcv: packet too big, clamped from 417 to 4294967272. macoff=96 [ 32.708811][ T315] usb 1-1: USB disconnect, device number 3 [ 32.715393][ T24] usb 3-1: device descriptor read/8, error -71 [ 32.735311][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 32.735327][ T28] audit: type=1400 audit(1731625138.226:255): avc: denied { execmem } for pid=634 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.785238][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.798595][ T28] audit: type=1400 audit(1731625138.296:256): avc: denied { execute } for pid=634 comm="syz.1.124" path="/36/bus" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.944042][ T654] loop0: detected capacity change from 0 to 128 [ 32.955523][ T654] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.964318][ T654] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 32.986870][ T288] EXT4-fs (loop0): unmounting filesystem. [ 33.048194][ T28] audit: type=1326 audit(1731625138.546:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=668 comm="syz.4.126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29def7e719 code=0x0 [ 33.116807][ T28] audit: type=1400 audit(1731625138.616:258): avc: denied { read } for pid=678 comm="syz.1.131" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.139333][ T28] audit: type=1400 audit(1731625138.616:259): avc: denied { open } for pid=678 comm="syz.1.131" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.162593][ T28] audit: type=1400 audit(1731625138.616:260): avc: denied { ioctl } for pid=678 comm="syz.1.131" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.212588][ T28] audit: type=1400 audit(1731625138.706:261): avc: denied { mount } for pid=684 comm="syz.2.133" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.234269][ T28] audit: type=1400 audit(1731625138.706:262): avc: denied { unmount } for pid=684 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.255358][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.272208][ T28] audit: type=1400 audit(1731625138.766:263): avc: denied { read } for pid=686 comm="syz.1.134" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.283789][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.296342][ T28] audit: type=1400 audit(1731625138.766:264): avc: denied { open } for pid=686 comm="syz.1.134" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.308703][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.342158][ T310] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.351715][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.360087][ T310] usb 4-1: config 0 descriptor?? [ 33.365354][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.605270][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 33.655281][ T315] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.725270][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.735362][ T19] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 33.744138][ T19] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 33.753046][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.761674][ T19] usb 1-1: config 0 descriptor?? [ 33.765243][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.846196][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 33.853666][ T310] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 33.862600][ T310] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 33.874960][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 33.995319][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.008101][ T19] usb 1-1: USB disconnect, device number 4 [ 34.035312][ T315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.046235][ T315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.095399][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 34.105581][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 34.113564][ T24] usb 3-1: SerialNumber: syz [ 34.119346][ T24] usb 3-1: config 0 descriptor?? [ 34.145349][ T315] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 34.154268][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.163271][ T24] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 34.170105][ T315] usb 2-1: SerialNumber: syz [ 34.175869][ T24] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 34.184453][ T24] usb 3-1: Failed to create links for entity 255 [ 34.191123][ T24] usb 3-1: Failed to register entities (-22). [ 34.367224][ T19] usb 3-1: USB disconnect, device number 5 [ 34.466002][ T315] usb 2-1: 0:2 : does not exist [ 34.510761][ T315] usb 2-1: USB disconnect, device number 2 [ 34.522736][ T671] udevd[671]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.588635][ T288] syz-executor (288) used greatest stack depth: 21552 bytes left [ 34.840304][ T703] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.847653][ T703] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.855218][ T703] device bridge_slave_0 entered promiscuous mode [ 34.862638][ T703] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.869830][ T703] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.878019][ T703] device bridge_slave_1 entered promiscuous mode [ 34.923054][ T712] input: syz0 as /devices/virtual/input/input8 [ 35.069180][ T703] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.076345][ T703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.083442][ T703] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.090351][ T703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.123762][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.132631][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.143077][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.188802][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.200506][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.208906][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.220075][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.228925][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.235822][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.264395][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.282776][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.296560][ T423] device bridge_slave_1 left promiscuous mode [ 35.302889][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.313840][ T423] device bridge_slave_0 left promiscuous mode [ 35.320953][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.329713][ T423] device veth1_macvtap left promiscuous mode [ 35.337615][ T423] device veth0_vlan left promiscuous mode [ 35.352478][ T750] input: syz0 as /devices/virtual/input/input9 [ 35.388169][ T752] loop2: detected capacity change from 0 to 512 [ 35.401474][ T752] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.413182][ T752] EXT4-fs warning (device loop2): ext4_enable_quotas:7022: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 35.429911][ T752] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 35.436801][ T752] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.161: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 35.455588][ T752] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.161: couldn't read orphan inode 13 (err -117) [ 35.468494][ T752] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.486588][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.497185][ T293] EXT4-fs (loop2): unmounting filesystem. [ 35.502999][ T703] device veth0_vlan entered promiscuous mode [ 35.510272][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.522783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.531092][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.547952][ T703] device veth1_macvtap entered promiscuous mode [ 35.555997][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.566550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.574898][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.591392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.600835][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.622752][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.633855][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.816973][ T770] loop3: detected capacity change from 0 to 128 [ 35.824129][ T770] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 35.854568][ T770] syz.3.168: attempt to access beyond end of device [ 35.854568][ T770] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 35.869921][ T770] syz.3.168: attempt to access beyond end of device [ 35.869921][ T770] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 35.936484][ T315] usb 4-1: USB disconnect, device number 2 [ 35.954300][ T782] loop2: detected capacity change from 0 to 2048 [ 35.965341][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 36.044777][ T787] loop3: detected capacity change from 0 to 1024 [ 36.064109][ T787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.101811][ T787] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.129548][ T787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.143845][ T803] loop4: detected capacity change from 0 to 128 [ 36.157377][ T803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.167216][ T803] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 36.182227][ T290] EXT4-fs (loop3): unmounting filesystem. [ 36.207607][ T807] loop3: detected capacity change from 0 to 1024 [ 36.215479][ T807] EXT4-fs: Ignoring removed orlov option [ 36.219291][ T292] EXT4-fs (loop4): unmounting filesystem. [ 36.221147][ T807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.242379][ T807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.305353][ T24] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 36.335342][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.350329][ T819] syz.1.188[819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.350413][ T819] syz.1.188[819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.415011][ T825] loop4: detected capacity change from 0 to 128 [ 36.440757][ T290] EXT4-fs (loop3): unmounting filesystem. [ 36.463386][ T828] loop1: detected capacity change from 0 to 256 [ 36.515909][ T834] netem: change failed [ 36.705381][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.716435][ T6] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 36.725575][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.738406][ T6] usb 3-1: config 0 descriptor?? [ 36.765340][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.808611][ T854] Zero length message leads to an empty skb [ 36.826687][ T856] syz.4.203[856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.826772][ T856] syz.4.203[856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.925329][ T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.045337][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 37.054591][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.125328][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.136291][ T313] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 37.143602][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.155865][ T19] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 37.164749][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.174165][ T19] usb 2-1: config 0 descriptor?? [ 37.226122][ T6] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 37.236002][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input10 [ 37.325363][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.325595][ T6] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 37.343321][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.360606][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 37.369973][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.378658][ T39] usb 4-1: config 0 descriptor?? [ 37.495452][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.507056][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.518199][ T313] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 37.527919][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.537649][ T313] usb 5-1: config 0 descriptor?? [ 37.615372][ T24] usb 7-1: Found UVC 0.00 device (046d:08c1) [ 37.622514][ T24] usb 7-1: No valid video chain found. [ 37.630130][ T24] usb 7-1: USB disconnect, device number 2 [ 37.656243][ T19] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 37.663043][ T19] sony 0003:054C:0268.0005: item fetching failed at offset 1/5 [ 37.671172][ T19] sony 0003:054C:0268.0005: parse failed [ 37.676744][ T19] sony: probe of 0003:054C:0268.0005 failed with error -22 [ 37.846464][ T39] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 37.853479][ T39] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 37.860756][ T39] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 37.867728][ T39] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 37.867993][ T19] usb 2-1: USB disconnect, device number 3 [ 37.874618][ T39] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 37.874646][ T39] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 37.894624][ T39] lg-g15 0003:046D:C222.0006: item fetching failed at offset 6/11 [ 37.902597][ T39] lg-g15: probe of 0003:046D:C222.0006 failed with error -22 [ 37.928516][ T39] usb 3-1: USB disconnect, device number 6 [ 38.017122][ T313] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 38.024956][ T313] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 38.032085][ T313] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 38.038968][ T313] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 38.046862][ T313] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 38.062064][ T313] usb 4-1: USB disconnect, device number 3 [ 38.133367][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 38.133385][ T28] audit: type=1400 audit(1731625143.626:374): avc: denied { create } for pid=863 comm="syz.6.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.164806][ T28] audit: type=1400 audit(1731625143.656:375): avc: denied { write } for pid=863 comm="syz.6.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.219181][ T19] usb 5-1: USB disconnect, device number 3 [ 38.450693][ T28] audit: type=1400 audit(1731625143.946:376): avc: denied { mount } for pid=873 comm="syz.2.210" name="/" dev="ramfs" ino=18670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 38.490333][ T876] loop2: detected capacity change from 0 to 256 [ 38.503989][ T876] FAT-fs (loop2): Directory bread(block 64) failed [ 38.511373][ T876] FAT-fs (loop2): Directory bread(block 65) failed [ 38.518001][ T876] FAT-fs (loop2): Directory bread(block 66) failed [ 38.531582][ T876] FAT-fs (loop2): Directory bread(block 67) failed [ 38.543975][ T876] FAT-fs (loop2): Directory bread(block 68) failed [ 38.551090][ T876] FAT-fs (loop2): Directory bread(block 69) failed [ 38.557682][ T876] FAT-fs (loop2): Directory bread(block 70) failed [ 38.564129][ T876] FAT-fs (loop2): Directory bread(block 71) failed [ 38.570556][ T876] FAT-fs (loop2): Directory bread(block 72) failed [ 38.577455][ T876] FAT-fs (loop2): Directory bread(block 73) failed [ 38.613437][ T28] audit: type=1400 audit(1731625144.106:377): avc: denied { create } for pid=882 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.655637][ T28] audit: type=1400 audit(1731625144.136:378): avc: denied { bind } for pid=882 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.688464][ T423] kworker/u4:5: attempt to access beyond end of device [ 38.688464][ T423] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 38.695251][ T28] audit: type=1400 audit(1731625144.136:379): avc: denied { write } for pid=882 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.745289][ T28] audit: type=1400 audit(1731625144.176:380): avc: denied { getopt } for pid=875 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.782613][ T890] syz.4.217[890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.782693][ T890] syz.4.217[890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.803979][ T28] audit: type=1326 audit(1731625144.296:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c797e719 code=0x7ffc0000 [ 38.912767][ T28] audit: type=1326 audit(1731625144.296:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c797e719 code=0x7ffc0000 [ 38.948356][ T28] audit: type=1326 audit(1731625144.346:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94c797e719 code=0x7ffc0000 [ 38.985464][ T898] syz.3.221[898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.985577][ T898] syz.3.221[898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.034280][ T903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=903 comm=syz.4.223 [ 39.075729][ T905] loop2: detected capacity change from 0 to 256 [ 39.089035][ T880] loop1: detected capacity change from 0 to 40427 [ 39.101039][ T906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 39.115701][ T880] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 39.122920][ T880] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 39.123861][ T910] loop6: detected capacity change from 0 to 256 [ 39.150385][ T880] F2FS-fs (loop1): invalid crc value [ 39.193920][ T880] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.214412][ T909] kvm: MONITOR instruction emulated as NOP! [ 39.276193][ T880] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 39.283083][ T880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.314812][ T291] syz-executor: attempt to access beyond end of device [ 39.314812][ T291] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.404032][ T929] input: syz0 as /devices/virtual/input/input11 [ 39.511853][ T941] syz.6.237[941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.511971][ T941] syz.6.237[941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.535291][ T313] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 39.568110][ T943] loop6: detected capacity change from 0 to 256 [ 39.715317][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.885403][ T848] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.925394][ T313] usb 5-1: config 0 has no interfaces? [ 39.930869][ T313] usb 5-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 39.940836][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.950248][ T313] usb 5-1: config 0 descriptor?? [ 40.095354][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.106981][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.117185][ T6] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 40.126697][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.136095][ T6] usb 3-1: config 0 descriptor?? [ 40.198801][ T313] usb 5-1: USB disconnect, device number 4 [ 40.255317][ T848] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 40.266680][ T848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.278507][ T848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.290443][ T848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 40.307086][ T848] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 40.317833][ T848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.327521][ T848] usb 2-1: config 0 descriptor?? [ 40.528093][ T962] input: syz0 as /devices/virtual/input/input12 [ 40.607056][ T6] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 40.613875][ T6] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 40.622345][ T6] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 40.629377][ T6] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 40.636452][ T6] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 40.644824][ T6] wacom 0003:056A:5000.0008: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.2-1/input0 [ 40.722177][ T973] loop4: detected capacity change from 0 to 256 [ 40.837391][ T24] usb 3-1: USB disconnect, device number 7 [ 41.055352][ T848] usbhid 2-1:0.0: can't add hid device: -71 [ 41.064171][ T848] usbhid: probe of 2-1:0.0 failed with error -71 [ 41.072118][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 41.083267][ T848] usb 2-1: USB disconnect, device number 4 [ 41.325357][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 41.396714][ T1005] loop3: detected capacity change from 0 to 256 [ 41.625275][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 41.636252][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.648383][ T6] usb 5-1: Product: syz [ 41.655761][ T6] usb 5-1: Manufacturer: syz [ 41.663620][ T6] usb 5-1: SerialNumber: syz [ 41.676598][ T6] usb 5-1: config 0 descriptor?? [ 41.835337][ T313] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.955336][ T6] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 41.963283][ T6] usb 5-1: No valid video chain found. [ 41.972025][ T6] usb 5-1: USB disconnect, device number 5 [ 42.085235][ T313] usb 2-1: Using ep0 maxpacket: 32 [ 42.225341][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 42.240063][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 42.258560][ T313] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 42.271804][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.285932][ T313] usb 2-1: config 0 descriptor?? [ 42.305293][ T1012] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 42.335888][ T313] hub 2-1:0.0: USB hub found [ 42.475308][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 42.483734][ T39] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 42.625296][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.645423][ T313] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 42.745468][ T313] usbhid 2-1:0.0: can't add hid device: -71 [ 42.752048][ T313] usbhid: probe of 2-1:0.0 failed with error -71 [ 42.765434][ T24] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 42.785782][ T313] usb 2-1: USB disconnect, device number 5 [ 42.845371][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.857780][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.868290][ T39] usb 7-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 42.878972][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.891581][ T39] usb 7-1: config 0 descriptor?? [ 42.985439][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.999320][ T6] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 43.010152][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.019593][ T6] usb 4-1: config 0 descriptor?? [ 43.317949][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 43.317979][ T28] audit: type=1400 audit(1731625148.816:455): avc: denied { module_request } for pid=1048 comm="syz.1.283" kmod="ipt_addrtype" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 43.356082][ T1025] bpf_get_probe_write_proto: 2 callbacks suppressed [ 43.356108][ T1025] syz.6.273[1025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.374080][ T1025] syz.6.273[1025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.391591][ T28] audit: type=1400 audit(1731625148.886:456): avc: denied { create } for pid=1051 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.431612][ T1054] netlink: 96 bytes leftover after parsing attributes in process `syz.4.285'. [ 43.433722][ T28] audit: type=1400 audit(1731625148.886:457): avc: denied { ioctl } for pid=1051 comm="syz.1.284" path="socket:[19975]" dev="sockfs" ino=19975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.484101][ T39] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 43.495354][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 43.496249][ T6] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 43.514051][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.530024][ T39] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 43.538457][ T39] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 43.545370][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000A/input/input16 [ 43.570311][ T39] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 43.582885][ T39] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 43.592965][ T28] audit: type=1400 audit(1731625148.926:458): avc: denied { bind } for pid=1051 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.610830][ T39] wacom 0003:056A:5000.0009: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.6-1/input0 [ 43.648413][ T28] audit: type=1400 audit(1731625148.926:459): avc: denied { write } for pid=1051 comm="syz.1.284" path="socket:[19975]" dev="sockfs" ino=19975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.683503][ T39] usb 7-1: USB disconnect, device number 3 [ 43.708633][ T28] audit: type=1400 audit(1731625149.026:460): avc: denied { map } for pid=1055 comm="syz.1.286" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.755462][ T6] keytouch 0003:0926:3333.000A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 43.807139][ T28] audit: type=1400 audit(1731625149.026:461): avc: denied { read write } for pid=1055 comm="syz.1.286" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.857874][ T1069] loop4: detected capacity change from 0 to 2048 [ 43.871141][ T28] audit: type=1400 audit(1731625149.126:462): avc: denied { block_suspend } for pid=1055 comm="syz.1.286" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.905472][ T28] audit: type=1400 audit(1731625149.146:463): avc: denied { unmount } for pid=1057 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.937055][ T28] audit: type=1400 audit(1731625149.256:464): avc: denied { execute } for pid=1065 comm="syz.4.288" path="/59/cpuacct.usage_percpu_user" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.976112][ T1069] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.992845][ T1073] loop1: detected capacity change from 0 to 16 [ 44.001048][ T1073] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 44.050710][ T292] EXT4-fs (loop4): unmounting filesystem. [ 44.135430][ T24] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 44.135470][ T24] usb 3-1: No valid video chain found. [ 44.139081][ T24] usb 3-1: USB disconnect, device number 8 [ 44.264018][ T1089] loop6: detected capacity change from 0 to 16 [ 44.277330][ T1087] netlink: 96 bytes leftover after parsing attributes in process `syz.1.298'. [ 44.290805][ T1089] erofs: (device loop6): mounted with root inode @ nid 36. [ 44.322259][ T6] usb 4-1: USB disconnect, device number 4 [ 44.640013][ T1117] SELinux: Context :yz1 is not valid (left unmapped). [ 44.708230][ T1122] loop2: detected capacity change from 0 to 256 [ 44.763617][ T1122] FAT-fs (loop2): Directory bread(block 64) failed [ 44.780577][ T1122] FAT-fs (loop2): Directory bread(block 65) failed [ 44.799285][ T1122] FAT-fs (loop2): Directory bread(block 66) failed [ 44.813805][ T1122] FAT-fs (loop2): Directory bread(block 67) failed [ 44.828957][ T1122] FAT-fs (loop2): Directory bread(block 68) failed [ 44.841360][ T1122] FAT-fs (loop2): Directory bread(block 69) failed [ 44.855726][ T1122] FAT-fs (loop2): Directory bread(block 70) failed [ 44.870554][ T1122] FAT-fs (loop2): Directory bread(block 71) failed [ 44.880872][ T1122] FAT-fs (loop2): Directory bread(block 72) failed [ 44.895565][ T1122] FAT-fs (loop2): Directory bread(block 73) failed [ 44.975261][ T315] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 45.250350][ T1148] syz.2.321 (1148) used greatest stack depth: 20168 bytes left [ 45.269871][ T1160] loop6: detected capacity change from 0 to 256 [ 45.300799][ T1160] FAT-fs (loop6): Directory bread(block 64) failed [ 45.313453][ T1160] FAT-fs (loop6): Directory bread(block 65) failed [ 45.329192][ T1162] loop2: detected capacity change from 0 to 256 [ 45.331245][ T1160] FAT-fs (loop6): Directory bread(block 66) failed [ 45.350109][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.357796][ T1160] FAT-fs (loop6): Directory bread(block 67) failed [ 45.372903][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.401406][ T1160] FAT-fs (loop6): Directory bread(block 68) failed [ 45.401576][ T315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.413788][ T1160] FAT-fs (loop6): Directory bread(block 69) failed [ 45.431157][ T315] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.444315][ T1160] FAT-fs (loop6): Directory bread(block 70) failed [ 45.472746][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.479477][ T1160] FAT-fs (loop6): Directory bread(block 71) failed [ 45.499128][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.510988][ T315] usb 5-1: config 0 descriptor?? [ 45.519843][ T1160] FAT-fs (loop6): Directory bread(block 72) failed [ 45.530259][ T1160] FAT-fs (loop6): Directory bread(block 73) failed [ 45.885299][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 45.918374][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.939909][ T6] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 45.952698][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.969225][ T6] usb 2-1: config 0 descriptor?? [ 46.006712][ T315] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 46.021423][ T315] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 46.102713][ T1182] loop3: detected capacity change from 0 to 40427 [ 46.113391][ T1182] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 46.128150][ T1182] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 46.142521][ T1182] F2FS-fs (loop3): invalid crc value [ 46.155041][ T1182] F2FS-fs (loop3): Found nat_bits in checkpoint [ 46.155266][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 46.204527][ T1182] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 46.219464][ T1182] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 46.253869][ T1182] syz.3.339: attempt to access beyond end of device [ 46.253869][ T1182] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 46.301638][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 46.306722][ T313] usb 5-1: USB disconnect, device number 6 [ 46.315669][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.336134][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 46.446116][ T6] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 46.475555][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input20 [ 46.495713][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.508490][ T1189] loop3: detected capacity change from 0 to 1024 [ 46.515139][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.526785][ T24] usb 7-1: Product: syz [ 46.532751][ T1189] EXT4-fs: Ignoring removed orlov option [ 46.533011][ T24] usb 7-1: Manufacturer: syz [ 46.544822][ T24] usb 7-1: SerialNumber: syz [ 46.545702][ T1189] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.571030][ T1189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.595108][ T1189] fscrypt: AES-256-XTS using blk-crypto-fallback [ 46.603959][ T6] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 46.650815][ T290] EXT4-fs (loop3): unmounting filesystem. [ 46.702698][ T1202] input: syz0 as /devices/virtual/input/input21 [ 46.859851][ T1210] loop4: detected capacity change from 0 to 1024 [ 46.872034][ T1210] EXT4-fs: Ignoring removed nobh option [ 46.882651][ T1210] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.908418][ T1210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.943478][ T292] EXT4-fs (loop4): unmounting filesystem. [ 47.045341][ T315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 47.055501][ T1218] random: crng reseeded on system resumption [ 47.219641][ T39] usb 2-1: USB disconnect, device number 6 [ 47.235217][ C0] keytouch 0003:0926:3333.000C: usb_submit_urb(ctrl) failed: -19 [ 47.348415][ T1232] loop4: detected capacity change from 0 to 2048 [ 47.386843][ T1232] Alternate GPT is invalid, using primary GPT. [ 47.397416][ T1232] loop4: p1 p2 p3 [ 47.415286][ T315] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 47.432356][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 47.456893][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 47.477161][ T315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.504645][ T315] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.515832][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.531118][ T671] udevd[671]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.532717][ T616] udevd[616]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.562284][ T315] usb 4-1: config 0 descriptor?? [ 47.570253][ T1061] udevd[1061]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.595365][ T1208] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 47.685280][ T24] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 47.693295][ T24] cdc_ncm 7-1:1.0: setting tx_max = 52 [ 47.747087][ T1250] loop4: detected capacity change from 0 to 512 [ 47.796898][ T1250] EXT4-fs error (device loop4): ext4_acquire_dquot:6787: comm syz.4.365: Failed to acquire dquot type 0 [ 47.815769][ T1257] loop1: detected capacity change from 0 to 512 [ 47.818803][ T1248] hub 9-0:1.0: USB hub found [ 47.824852][ T1250] EXT4-fs error (device loop4): ext4_acquire_dquot:6787: comm syz.4.365: Failed to acquire dquot type 0 [ 47.830570][ T1248] hub 9-0:1.0: 1 port detected [ 47.846172][ T1257] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.861584][ T1250] EXT4-fs error (device loop4): ext4_acquire_dquot:6787: comm syz.4.365: Failed to acquire dquot type 0 [ 47.888726][ T1250] EXT4-fs (loop4): 1 orphan inode deleted [ 47.897457][ T1250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.908496][ T1250] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff) [ 47.911839][ T24] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 47.957340][ T1257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 47.968117][ T1257] System zones: 1-12 [ 47.996091][ T1257] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.015395][ T1257] EXT4-fs (loop1): 1 truncate cleaned up [ 48.018764][ T24] usb 7-1: USB disconnect, device number 4 [ 48.027130][ T1257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.038335][ T24] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 48.048787][ T292] EXT4-fs (loop4): unmounting filesystem. [ 48.073597][ T315] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 48.087590][ T315] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 48.105563][ T1257] loop1: detected capacity change from 512 to 64 [ 48.114152][ T315] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 48.130032][ T1263] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 48.146869][ T1263] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 48.148224][ T315] ================================================================== [ 48.165235][ T1263] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -12) [ 48.168693][ T315] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 48.168934][ T315] Read of size 8 at addr ffff8881147e8cf0 by task kworker/1:3/315 [ 48.168955][ T315] [ 48.168973][ T315] CPU: 1 PID: 315 Comm: kworker/1:3 Not tainted 6.1.112-syzkaller-00014-g7160754546da #0 [ 48.218190][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.231100][ T315] Workqueue: rcu_gp process_srcu [ 48.241822][ T315] Call Trace: [ 48.246407][ T315] [ 48.252078][ T315] dump_stack_lvl+0x151/0x1b7 [ 48.259231][ T315] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 48.265301][ T315] ? _printk+0xd1/0x111 [ 48.269998][ T315] ? __virt_addr_valid+0x242/0x2f0 [ 48.277743][ T315] print_report+0x158/0x4e0 [ 48.283828][ T315] ? __virt_addr_valid+0x242/0x2f0 [ 48.289326][ T315] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 48.297823][ T315] ? __list_del_entry_valid+0xa6/0x130 [ 48.306247][ T315] kasan_report+0x13c/0x170 [ 48.312392][ T315] ? __list_del_entry_valid+0xa6/0x130 [ 48.321314][ T315] __asan_report_load8_noabort+0x14/0x20 [ 48.329023][ T315] __list_del_entry_valid+0xa6/0x130 [ 48.335835][ T315] process_one_work+0x4d7/0xcb0 [ 48.341507][ T315] worker_thread+0xa60/0x1260 [ 48.347881][ T315] kthread+0x26d/0x300 [ 48.352583][ T315] ? worker_clr_flags+0x1a0/0x1a0 [ 48.359269][ T315] ? kthread_blkcg+0xd0/0xd0 [ 48.367675][ T315] ret_from_fork+0x1f/0x30 [ 48.374030][ T315] [ 48.380684][ T315] [ 48.383196][ T315] Allocated by task 24: [ 48.388169][ T315] kasan_set_track+0x4b/0x70 [ 48.393946][ T315] kasan_save_alloc_info+0x1f/0x30 [ 48.399463][ T315] __kasan_kmalloc+0x9c/0xb0 [ 48.405150][ T315] __kmalloc_node+0xb4/0x1e0 [ 48.412317][ T315] kvmalloc_node+0x221/0x640 [ 48.422440][ T315] alloc_netdev_mqs+0x8c/0xf90 [ 48.430271][ T315] alloc_etherdev_mqs+0x36/0x40 [ 48.435628][ T315] usbnet_probe+0x210/0x2850 [ 48.441779][ T315] usb_probe_interface+0x5b6/0xa90 [ 48.447635][ T315] really_probe+0x2b8/0x920 [ 48.453058][ T315] __driver_probe_device+0x1a0/0x310 [ 48.460022][ T315] driver_probe_device+0x54/0x3d0 [ 48.465780][ T315] __device_attach_driver+0x2e3/0x490 [ 48.473643][ T315] bus_for_each_drv+0x183/0x200 [ 48.479877][ T315] __device_attach+0x312/0x510 [ 48.486656][ T315] device_initial_probe+0x1a/0x20 [ 48.492264][ T315] bus_probe_device+0xbe/0x1e0 [ 48.497881][ T315] device_add+0xb60/0xf10 [ 48.504528][ T315] usb_set_configuration+0x190f/0x1e80 [ 48.511593][ T315] usb_generic_driver_probe+0x8b/0x150 [ 48.519047][ T315] usb_probe_device+0x144/0x260 [ 48.525011][ T315] really_probe+0x2b8/0x920 [ 48.529760][ T315] __driver_probe_device+0x1a0/0x310 [ 48.537368][ T315] driver_probe_device+0x54/0x3d0 [ 48.544195][ T315] __device_attach_driver+0x2e3/0x490 [ 48.550095][ T315] bus_for_each_drv+0x183/0x200 [ 48.555597][ T315] __device_attach+0x312/0x510 [ 48.560590][ T315] device_initial_probe+0x1a/0x20 [ 48.565612][ T315] bus_probe_device+0xbe/0x1e0 [ 48.570510][ T315] device_add+0xb60/0xf10 [ 48.575096][ T315] usb_new_device+0xf2f/0x1820 [ 48.579956][ T315] hub_event+0x2db1/0x4830 [ 48.586382][ T315] process_one_work+0x73d/0xcb0 [ 48.591820][ T315] worker_thread+0xa60/0x1260 [ 48.596692][ T315] kthread+0x26d/0x300 [ 48.602964][ T315] ret_from_fork+0x1f/0x30 [ 48.608537][ T315] [ 48.611620][ T315] Freed by task 24: [ 48.615351][ T315] kasan_set_track+0x4b/0x70 [ 48.621638][ T315] kasan_save_free_info+0x2b/0x40 [ 48.627083][ T315] ____kasan_slab_free+0x131/0x180 [ 48.632893][ T315] __kasan_slab_free+0x11/0x20 [ 48.639782][ T315] __kmem_cache_free+0x218/0x3b0 [ 48.644688][ T315] kfree+0x7a/0xf0 [ 48.649080][ T315] kvfree+0x35/0x40 [ 48.658241][ T315] netdev_freemem+0x3f/0x60 [ 48.663441][ T315] netdev_release+0x7f/0xb0 [ 48.670044][ T315] device_release+0x95/0x1c0 [ 48.677482][ T315] kobject_put+0x178/0x260 [ 48.682800][ T315] put_device+0x1f/0x30 [ 48.688000][ T315] free_netdev+0x393/0x480 [ 48.695068][ T315] usbnet_disconnect+0x245/0x390 [ 48.700121][ T315] usb_unbind_interface+0x1fa/0x8c0 [ 48.706704][ T315] device_release_driver_internal+0x53e/0x870 [ 48.713885][ T315] device_release_driver+0x19/0x20 [ 48.721051][ T315] bus_remove_device+0x2fa/0x360 [ 48.726417][ T315] device_del+0x663/0xe90 [ 48.733972][ T315] usb_disable_device+0x380/0x720 [ 48.740388][ T315] usb_disconnect+0x32a/0x890 [ 48.745892][ T315] hub_event+0x1ed8/0x4830 [ 48.751016][ T315] process_one_work+0x73d/0xcb0 [ 48.758268][ T315] worker_thread+0xd71/0x1260 [ 48.764376][ T315] kthread+0x26d/0x300 [ 48.770139][ T315] ret_from_fork+0x1f/0x30 [ 48.776527][ T315] [ 48.779984][ T315] Last potentially related work creation: [ 48.785850][ T315] kasan_save_stack+0x3b/0x60 [ 48.791725][ T315] __kasan_record_aux_stack+0xb4/0xc0 [ 48.799892][ T315] kasan_record_aux_stack_noalloc+0xb/0x10 [ 48.806681][ T315] insert_work+0x56/0x310 [ 48.811369][ T315] __queue_work+0x9b6/0xd70 [ 48.817386][ T315] queue_work_on+0x105/0x170 [ 48.822876][ T315] usbnet_link_change+0xeb/0x100 [ 48.830709][ T315] usbnet_probe+0x1e2c/0x2850 [ 48.837762][ T315] usb_probe_interface+0x5b6/0xa90 [ 48.844282][ T315] really_probe+0x2b8/0x920 [ 48.850625][ T315] __driver_probe_device+0x1a0/0x310 [ 48.858029][ T315] driver_probe_device+0x54/0x3d0 [ 48.864385][ T315] __device_attach_driver+0x2e3/0x490 [ 48.871244][ T315] bus_for_each_drv+0x183/0x200 [ 48.881788][ T315] __device_attach+0x312/0x510 [ 48.890247][ T315] device_initial_probe+0x1a/0x20 [ 48.898785][ T315] bus_probe_device+0xbe/0x1e0 [ 48.906463][ T315] device_add+0xb60/0xf10 [ 48.912199][ T315] usb_set_configuration+0x190f/0x1e80 [ 48.920225][ T315] usb_generic_driver_probe+0x8b/0x150 [ 48.927089][ T315] usb_probe_device+0x144/0x260 [ 48.933359][ T315] really_probe+0x2b8/0x920 [ 48.938892][ T315] __driver_probe_device+0x1a0/0x310 [ 48.945741][ T315] driver_probe_device+0x54/0x3d0 [ 48.951855][ T315] __device_attach_driver+0x2e3/0x490 [ 48.958610][ T315] bus_for_each_drv+0x183/0x200 [ 48.966321][ T315] __device_attach+0x312/0x510 [ 48.973784][ T315] device_initial_probe+0x1a/0x20 [ 48.979219][ T315] bus_probe_device+0xbe/0x1e0 [ 48.984973][ T315] device_add+0xb60/0xf10 [ 48.989442][ T315] usb_new_device+0xf2f/0x1820 [ 48.995116][ T315] hub_event+0x2db1/0x4830 [ 49.002403][ T315] process_one_work+0x73d/0xcb0 [ 49.008837][ T315] worker_thread+0xa60/0x1260 [ 49.014932][ T315] kthread+0x26d/0x300 [ 49.020661][ T315] ret_from_fork+0x1f/0x30 [ 49.026989][ T315] [ 49.030729][ T315] The buggy address belongs to the object at ffff8881147e8000 [ 49.030729][ T315] which belongs to the cache kmalloc-4k of size 4096 [ 49.050790][ T315] The buggy address is located 3312 bytes inside of [ 49.050790][ T315] 4096-byte region [ffff8881147e8000, ffff8881147e9000) [ 49.074112][ T315] [ 49.078000][ T315] The buggy address belongs to the physical page: [ 49.086138][ T315] page:ffffea000451fa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1147e8 [ 49.098855][ T315] head:ffffea000451fa00 order:3 compound_mapcount:0 compound_pincount:0 [ 49.109167][ T315] flags: 0x4000000000010200(slab|head|zone=1) [ 49.117689][ T315] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 49.129664][ T315] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 49.139536][ T315] page dumped because: kasan: bad access detected [ 49.149054][ T315] page_owner tracks the page as allocated [ 49.155547][ T315] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 102, tgid 102 (udevd), ts 46604956642, free_ts 46558908835 [ 49.188140][ T315] post_alloc_hook+0x213/0x220 [ 49.193671][ T315] prep_new_page+0x1b/0x110 [ 49.201009][ T315] get_page_from_freelist+0x2980/0x2a10 [ 49.210891][ T315] __alloc_pages+0x234/0x610 [ 49.217572][ T315] alloc_slab_page+0x6c/0xf0 [ 49.227126][ T315] new_slab+0x90/0x3e0 [ 49.232166][ T315] ___slab_alloc+0x6f9/0xb80 [ 49.238075][ T315] __slab_alloc+0x5d/0xa0 [ 49.242878][ T315] __kmem_cache_alloc_node+0x1af/0x250 [ 49.249344][ T315] __kmalloc_node+0xa3/0x1e0 [ 49.254524][ T315] kvmalloc_node+0x221/0x640 [ 49.259876][ T315] seq_read_iter+0x1ff/0xd00 [ 49.265687][ T315] kernfs_fop_read_iter+0x145/0x470 [ 49.272007][ T315] vfs_read+0x801/0xae0 [ 49.277129][ T315] ksys_read+0x199/0x2c0 [ 49.282001][ T315] __x64_sys_read+0x7b/0x90 [ 49.287286][ T315] page last free stack trace: [ 49.292142][ T315] free_unref_page_prepare+0x83d/0x850 [ 49.299203][ T315] free_unref_page+0xb2/0x5c0 [ 49.304494][ T315] __free_pages+0x61/0xf0 [ 49.309699][ T315] __free_slab+0xce/0x1a0 [ 49.315683][ T315] __unfreeze_partials+0x165/0x1a0 [ 49.322012][ T315] put_cpu_partial+0xa9/0x100 [ 49.327407][ T315] __slab_free+0x1c8/0x280 [ 49.332907][ T315] ___cache_free+0xc6/0xd0 [ 49.338531][ T315] qlist_free_all+0xc5/0x140 [ 49.344342][ T315] kasan_quarantine_reduce+0x15a/0x180 [ 49.351166][ T315] __kasan_slab_alloc+0x24/0x80 [ 49.357343][ T315] slab_post_alloc_hook+0x53/0x2c0 [ 49.364595][ T315] __kmem_cache_alloc_node+0x191/0x250 [ 49.372529][ T315] __kmalloc_node_track_caller+0xa2/0x1e0 [ 49.381953][ T315] kvasprintf+0xdb/0x180 [ 49.387066][ T315] kasprintf+0xd1/0x120 [ 49.391858][ T315] [ 49.394215][ T315] Memory state around the buggy address: [ 49.401213][ T315] ffff8881147e8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.410710][ T315] ffff8881147e8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.421742][ T315] >ffff8881147e8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.433405][ T315] ^ [ 49.448622][ T315] ffff8881147e8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.457901][ T315] ffff8881147e8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.467584][ T315] ================================================================== [ 49.477690][ T315] Disabling lock debugging due to kernel taint [ 49.494425][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 49.494444][ T28] audit: type=1400 audit(1731625154.986:567): avc: denied { read } for pid=1265 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.564076][ T28] audit: type=1400 audit(1731625154.986:568): avc: denied { open } for pid=1265 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.565381][ T291] EXT4-fs warning (device loop1): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.617833][ T315] usb 4-1: USB disconnect, device number 5 [ 49.653029][ T28] audit: type=1400 audit(1731625154.986:569): avc: denied { getattr } for pid=1265 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.663259][ T291] EXT4-fs warning (device loop1): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.702417][ T28] audit: type=1400 audit(1731625154.986:570): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.711566][ T291] EXT4-fs warning (device loop1): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.744079][ T28] audit: type=1400 audit(1731625154.986:571): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.768043][ T291] EXT4-fs warning (device loop1): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.781049][ T28] audit: type=1400 audit(1731625154.986:572): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.797621][ T291] EXT4-fs warning (device loop1): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.827549][ T28] audit: type=1400 audit(1731625154.986:573): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.844971][ T291] EXT4-fs warning (device loop1): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.881896][ T28] audit: type=1400 audit(1731625155.056:574): avc: denied { rmdir } for pid=291 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.887737][ T291] EXT4-fs warning (device loop1): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.926188][ T28] audit: type=1400 audit(1731625155.136:575): avc: denied { create } for pid=1269 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.932151][ T291] EXT4-fs warning (device loop1): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.964460][ T28] audit: type=1400 audit(1731625155.136:576): avc: denied { connect } for pid=1269 comm="syz.4.369" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.974760][ T291] EXT4-fs warning (device loop1): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 50.060694][ T291] EXT4-fs (loop1): unmounting filesystem. [ 50.676217][ T10] device bridge_slave_1 left promiscuous mode [ 50.683121][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.692339][ T10] device bridge_slave_0 left promiscuous mode [ 50.700986][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.710337][ T10] device veth1_macvtap left promiscuous mode [ 50.716598][ T10] device veth0_vlan left promiscuous mode