last executing test programs: 16.373735794s ago: executing program 1 (id=2): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0xac, {0x3, 0x5}}, @datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], "99"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "a58e93"}]}}, &(0x7f00000019c0)=""/173, 0x4e, 0xad, 0x1}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='GPL\x00', r2) r3 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r3, 0x16, 0x0, @void}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x4000000}, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x344001, 0x0, 0x3e, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="200a09000000090902"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@getnexthop={0x20, 0x76, 0xb0d, 0x18, 0x25dfdbff, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x1, 0x4}}, 0x26) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001280), 0x8, &(0x7f0000000040)={[{@redirect_dir_on}, {@userxattr}]}) 14.543820417s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) (fail_nth: 4) 14.197424255s ago: executing program 1 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000004c0)=0x20f2b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000180)=0x38) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000100)={[{@nodioread_nolock}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@bh}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) chdir(&(0x7f0000000400)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x140) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x7, 0x20000}, {0x7, 0x8}]}, 0x14, 0x0) lchown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) 13.966716251s ago: executing program 1 (id=30): socket(0x10, 0x3, 0x0) add_key(&(0x7f0000002240)='dns_resolver\x00', &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) 13.354002805s ago: executing program 1 (id=34): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) 13.256610557s ago: executing program 32 (id=34): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) 7.131052552s ago: executing program 4 (id=96): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), &(0x7f0000000040)=0x30) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x456, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0xb6, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x4, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180), 0x4, 0xbaf, &(0x7f0000000b80)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x50, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000780)={&(0x7f00000000c0), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x40000) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r10, 0x0, 0x40, &(0x7f0000000300)={'security\x00', 0x0, [0x21, 0xfffffffd, 0x3, 0x0, 0x2]}, &(0x7f0000000200)=0x54) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6.37858573s ago: executing program 4 (id=101): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x3, 0x22, 0x2, 0x2, 0x5, 0x7fff, 0x5, 0xd0, 0x1}) 5.182038588s ago: executing program 0 (id=114): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) 5.07604558s ago: executing program 4 (id=115): setresuid(0xee00, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x2004c011) 5.06331367s ago: executing program 4 (id=116): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 4.966156792s ago: executing program 4 (id=120): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) fallocate(r0, 0x8, 0x4000, 0x8000) 4.059251674s ago: executing program 3 (id=122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="93d1b38683e0cf45ed", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x4000001) 3.992363496s ago: executing program 3 (id=123): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="86"], 0x0) 3.906065738s ago: executing program 4 (id=124): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) 3.897620918s ago: executing program 33 (id=124): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) 3.027977038s ago: executing program 6 (id=125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 2.993324709s ago: executing program 6 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2.929051151s ago: executing program 6 (id=133): socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000940)='naa.6', 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x2e8, 0x40000, 0x198, 0x2e8, 0x198, 0x3b0, 0x358, 0x358, 0x3b0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00', {}, {}, 0x2f}, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 'team_slave_1\x00', 'wlan0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6}, {0x2, 0x2, 0x2}, 0x2, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a8) 2.928892621s ago: executing program 6 (id=134): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x5, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x7d2d732298b18228, 0x82, 0xb, 0x45}}}}}]}}]}}, 0x0) 2.754381905s ago: executing program 3 (id=137): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="2022280400003cbdeacc91960fb2f237cc6e442a52973661d60900fe"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.438224872s ago: executing program 0 (id=138): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.433812393s ago: executing program 0 (id=139): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x2c060000) unshare(0x8000400) unshare(0x8000000) 2.381829213s ago: executing program 0 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0xff, 0x1) 2.381641133s ago: executing program 0 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) eventfd2(0x0, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380)}, 0x20) 2.303527105s ago: executing program 0 (id=142): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b04, 0x0) 1.25730077s ago: executing program 5 (id=146): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @empty, 0xa3c}, {0xa, 0xbffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0xb9) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}}}}}}}, 0x0) 1.232204791s ago: executing program 2 (id=147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x10, 0x80002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket(0x2b, 0x5, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0xa9eaf000) syz_open_procfs(r3, &(0x7f0000000140)='net\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3b) clock_nanosleep(0x9, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x130, 0x150, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x350) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1.210203252s ago: executing program 5 (id=148): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x54, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4804) 1.209624072s ago: executing program 5 (id=149): getpgrp(0xffffffffffffffff) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) fcntl$setownex(r0, 0xf, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/102, 0x41}], 0x2}, 0x18}], 0x1, 0x1, 0x0) 1.075637975s ago: executing program 6 (id=150): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000003800)={0x3, 0x6, 0x8, 0x1, 0x4, 0x1, 0x5, 0x7}, 0x0, &(0x7f0000003880)={0x9, 0x3, 0xfffffffffffffffe, 0x8, 0xfffffffffffffc00, 0x8000000000000000, 0x0, 0x5}, &(0x7f00000038c0)={0x0, 0x989680}, 0x0) 1.006146916s ago: executing program 6 (id=151): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x40, 0x15, 0x2, "3a17"}, 0x0, 0x0, 0x0, 0x0}) 681.078874ms ago: executing program 3 (id=152): timer_create(0x1, 0x0, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000280)) 673.321114ms ago: executing program 3 (id=153): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@abort}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x500, 0x0, 0x4, 0x1000000000000}) 578.043507ms ago: executing program 3 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f0000000380)={[{@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@resgid}, {@noinit_itable}, {@errors_continue}, {@minixdf}, {@usrjquota}, {@test_dummy_encryption_v1}, {@discard}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") 318.694833ms ago: executing program 5 (id=155): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="021800001c00000002000000fedbdf25050006006c8000000a000000000000000000000000000000000000000000000000000000000000000800120000000000feffff7f0000000006000000000000000000000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500002000000a00000000000000fe8000000000000000000000000000bb000000040000000008001900000000000a"], 0xe0}}, 0x0) 233.297955ms ago: executing program 5 (id=156): close(0xffffffffffffffff) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x24, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000b70400000000000085000000340000009500"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) 233.051395ms ago: executing program 5 (id=157): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 154.330026ms ago: executing program 2 (id=158): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000800)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x3, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x8}}}}}, 0x0) 154.163837ms ago: executing program 2 (id=159): clock_adjtime(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="7961fdffffff000000007e320000000c0099006c91000614ebbc"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 64.220348ms ago: executing program 2 (id=160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) 175.19µs ago: executing program 2 (id=161): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd1, 0x0, 0x0) 0s ago: executing program 2 (id=162): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 21.593608][ T28] audit: type=1400 audit(1786910554.201:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.594785][ T279] cgroup: Unknown subsys name 'net' [ 21.616246][ T28] audit: type=1400 audit(1786910554.201:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.643546][ T28] audit: type=1400 audit(1786910554.231:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.643686][ T279] cgroup: Unknown subsys name 'devices' [ 21.785698][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.791297][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.923335][ T28] audit: type=1400 audit(1786910554.531:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.946504][ T28] audit: type=1400 audit(1786910554.531:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.971248][ T28] audit: type=1400 audit(1786910554.531:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.999705][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.008658][ T28] audit: type=1400 audit(1786910554.621:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.034533][ T28] audit: type=1400 audit(1786910554.621:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.069595][ T28] audit: type=1400 audit(1786910554.681:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.095208][ T28] audit: type=1400 audit(1786910554.681:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.095249][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.996844][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.003904][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.011559][ T287] device bridge_slave_0 entered promiscuous mode [ 23.019574][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.026633][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.033899][ T287] device bridge_slave_1 entered promiscuous mode [ 23.069832][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.076923][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.084521][ T288] device bridge_slave_0 entered promiscuous mode [ 23.092452][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.099744][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.107212][ T288] device bridge_slave_1 entered promiscuous mode [ 23.212916][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.220129][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.227542][ T290] device bridge_slave_0 entered promiscuous mode [ 23.234528][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.241561][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.248940][ T290] device bridge_slave_1 entered promiscuous mode [ 23.255580][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.262612][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.270016][ T291] device bridge_slave_0 entered promiscuous mode [ 23.278457][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.285515][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.292797][ T291] device bridge_slave_1 entered promiscuous mode [ 23.331857][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.338954][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.346392][ T289] device bridge_slave_0 entered promiscuous mode [ 23.353271][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.360383][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.367923][ T289] device bridge_slave_1 entered promiscuous mode [ 23.500060][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.507140][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.514423][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.521451][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.540502][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.547568][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.554843][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.561857][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.573909][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.580989][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.588285][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.595308][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.611302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.618988][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.626480][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.634432][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.641663][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.648916][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.656083][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.685688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.693830][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.700896][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.708477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.716693][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.723718][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.751332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.758986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.767408][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.774482][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.782735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.790223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.806518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.814868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.823018][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.830063][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.837780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.845972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.873467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.881836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.889950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.898285][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.905333][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.912820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.921002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.929183][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.936207][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.943683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.951675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.959672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.968020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.976167][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.983166][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.990558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.998872][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.005924][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.013263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.021172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.039922][ T288] device veth0_vlan entered promiscuous mode [ 24.046257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.054765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.062881][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.069918][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.077516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.086241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.094650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.102451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.110528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.118028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.130629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.139152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.147364][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.154385][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.162277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.170811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.180167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.188297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.205844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.214283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.222267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.230596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.238804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.247332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.255788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.263583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.278938][ T287] device veth0_vlan entered promiscuous mode [ 24.287335][ T290] device veth0_vlan entered promiscuous mode [ 24.297758][ T289] device veth0_vlan entered promiscuous mode [ 24.304438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.311939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.319449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.327529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.335699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.344258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.352569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.360742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.368887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.376954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.385076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.392563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.400150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.407694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.420354][ T288] device veth1_macvtap entered promiscuous mode [ 24.429046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.437290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.445641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.457091][ T290] device veth1_macvtap entered promiscuous mode [ 24.465847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.474444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.484393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.492752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.510662][ T287] device veth1_macvtap entered promiscuous mode [ 24.519683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.528369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.536780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.545213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.553483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.561979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.570301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.578729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.587110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.595375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.603466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.616127][ T291] device veth0_vlan entered promiscuous mode [ 24.629008][ T289] device veth1_macvtap entered promiscuous mode [ 24.636756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.645008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.645159][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 24.653062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.668263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.692440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.700342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.707861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.716112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.724789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.733018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.741655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.750064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.772281][ T291] device veth1_macvtap entered promiscuous mode [ 24.785177][ T312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.806350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.815065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.823354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.831631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.840182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.843170][ T313] loop3: detected capacity change from 0 to 512 [ 24.848936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.864481][ T313] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 24.866942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.881913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.885837][ T313] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.4: bad orphan inode 13 [ 24.899914][ T313] ext4_test_bit(bit=12, block=18) = 1 [ 24.906116][ T313] is_bad_inode(inode)=0 [ 24.910587][ T313] NEXT_ORPHAN(inode)=0 [ 24.914858][ T313] max_ino=32 [ 24.917014][ T318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 24.918163][ T313] i_nlink=1 [ 24.936936][ T313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.035975][ T318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 25.060526][ T332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 25.067024][ T312] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 25.075323][ T330] loop2: detected capacity change from 0 to 128 [ 25.094174][ T312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4: bg 0: block 248: padding at end of block bitmap is not set [ 25.108544][ T330] ======================================================= [ 25.108544][ T330] WARNING: The mand mount option has been deprecated and [ 25.108544][ T330] and is ignored by this kernel. Remove the mand [ 25.108544][ T330] option from the mount to silence this warning. [ 25.108544][ T330] ======================================================= [ 25.130647][ T312] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.4: Failed to acquire dquot type 1 [ 25.178512][ T313] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.4: Failed to acquire dquot type 1 [ 25.191091][ T330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 25.195645][ T332] kvm: pic: single mode not supported [ 25.199649][ T332] kvm: pic: level sensitive irq not supported [ 25.213672][ T330] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.222760][ T332] kvm: pic: single mode not supported [ 25.230298][ T332] kvm: pic: level sensitive irq not supported [ 25.250341][ T337] loop4: detected capacity change from 0 to 4096 [ 25.266844][ T332] kvm: pic: level sensitive irq not supported [ 25.275051][ T337] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.293793][ T337] fs-verity: sha256 using implementation "sha256-avx2" [ 25.304012][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.306662][ T312] syz.3.4 (312) used greatest stack depth: 21216 bytes left [ 25.319711][ T337] fs-verity (loop4, inode 15): fs-verity keyring is empty, rejecting signed file! [ 25.324980][ T339] overlayfs: unrecognized mount option "verity=require" or missing value [ 25.339688][ T290] EXT4-fs (loop4): unmounting filesystem. [ 25.345520][ T288] EXT4-fs (loop3): unmounting filesystem. [ 25.351359][ T314] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 1 [ 25.387114][ T343] capability: warning: `syz.4.8' uses deprecated v2 capabilities in a way that may be insecure [ 25.444820][ T346] loop4: detected capacity change from 0 to 16 [ 25.451858][ T346] erofs: (device loop4): mounted with root inode @ nid 36. [ 25.460716][ T346] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 25.470710][ T346] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 25.480798][ T346] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 25.485132][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 25.502239][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.502276][ T346] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 25.512308][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 25.526710][ T346] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 25.531966][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.556653][ T24] hub 2-1:4.0: USB hub found [ 25.561098][ T346] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 25.571449][ T346] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 25.582196][ T346] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 25.591986][ T346] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 25.602052][ T346] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 25.613521][ T346] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 25.623541][ T346] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 25.633485][ T346] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 25.643342][ T346] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 25.653306][ T346] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 25.664036][ T19] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 25.665001][ T346] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 25.681420][ T346] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 25.691593][ T346] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 25.701647][ T346] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 25.711624][ T346] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 25.731559][ T346] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 25.741797][ T346] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 25.751853][ T346] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 25.755474][ T24] hub 2-1:4.0: 2 ports detected [ 25.762048][ T346] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 25.766572][ T24] usb 2-1: selecting invalid altsetting 1 [ 25.776659][ T346] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 25.782215][ T24] hub 2-1:4.0: Using single TT (err -22) [ 25.819301][ T330] EXT4-fs (loop2): unmounting filesystem. [ 25.875845][ T19] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.884048][ T19] usb 4-1: not running at top speed; connect to a high speed hub [ 25.892649][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 25.914831][ T19] usb 4-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 25.927715][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.935939][ T19] usb 4-1: Product: syz [ 25.940150][ T19] usb 4-1: Manufacturer: syz [ 25.944825][ T19] usb 4-1: SerialNumber: syz [ 25.953170][ T341] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 25.956856][ T360] loop2: detected capacity change from 0 to 40427 [ 25.971296][ T360] F2FS-fs (loop2): Invalid uid value -1 [ 25.998197][ T363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 26.084037][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.162924][ T341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.167984][ T324] overlayfs: conflicting options: userxattr,redirect_dir=on [ 26.171704][ T341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.197764][ T24] usb 2-1: USB disconnect, device number 2 [ 26.199163][ T19] usb 4-1: USB disconnect, device number 2 [ 26.244140][ T6] usb 5-1: device descriptor read/64, error -71 [ 26.274029][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.334157][ T367] kvm: emulating exchange as write [ 26.394640][ T370] loop0: detected capacity change from 0 to 128 [ 26.404704][ T370] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.413368][ T370] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.426325][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.446701][ T291] EXT4-fs (loop0): unmounting filesystem. [ 26.456592][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.466775][ T39] usb 3-1: config 0 has no interfaces? [ 26.472680][ T39] usb 3-1: language id specifier not provided by device, defaulting to English [ 26.483165][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.494972][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.503067][ T39] usb 3-1: Product: syz [ 26.507492][ T39] usb 3-1: SerialNumber: syz [ 26.512723][ T39] usb 3-1: config 0 descriptor?? [ 26.524000][ T6] usb 5-1: device descriptor read/64, error -71 [ 26.565386][ T380] loop0: detected capacity change from 0 to 1024 [ 26.572347][ T380] EXT4-fs: Ignoring removed mblk_io_submit option [ 26.580867][ T380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.599685][ T380] EXT4-fs error (device loop0): __ext4_iget:5104: inode #12: block 13: comm syz.0.19: invalid block [ 26.611097][ T380] EXT4-fs error (device loop0): __ext4_iget:5104: inode #12: block 13: comm syz.0.19: invalid block [ 26.622836][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 26.622847][ T28] audit: type=1400 audit(1786910559.241:166): avc: denied { setopt } for pid=379 comm="syz.0.19" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.631011][ T380] EXT4-fs error (device loop0): __ext4_iget:5104: inode #12: block 13: comm syz.0.19: invalid block [ 26.663932][ T380] EXT4-fs error (device loop0): __ext4_iget:5104: inode #12: block 13: comm syz.0.19: invalid block [ 26.675500][ T380] EXT4-fs error (device loop0): __ext4_iget:5104: inode #12: block 13: comm syz.0.19: invalid block [ 26.690837][ T291] EXT4-fs (loop0): unmounting filesystem. [ 26.712616][ T385] process 'syz.3.21' launched './file1' with NULL argv: empty string added [ 26.713022][ T383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'. [ 26.722034][ T28] audit: type=1400 audit(1786910559.341:167): avc: denied { execute } for pid=384 comm="syz.3.21" name="file1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.734578][ T364] usb 3-1: USB disconnect, device number 2 [ 26.762744][ T28] audit: type=1400 audit(1786910559.381:168): avc: denied { execute_no_trans } for pid=384 comm="syz.3.21" path="/2/file1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.790459][ T388] FAULT_INJECTION: forcing a failure. [ 26.790459][ T388] name failslab, interval 1, probability 0, space 0, times 1 [ 26.803840][ T388] CPU: 0 PID: 388 Comm: syz.1.22 Not tainted syzkaller #0 [ 26.810973][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.821052][ T388] Call Trace: [ 26.824339][ T388] [ 26.827273][ T388] __dump_stack+0x21/0x24 [ 26.831628][ T388] dump_stack_lvl+0x110/0x170 [ 26.836315][ T388] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.841328][ T388] dump_stack+0x15/0x24 [ 26.845469][ T388] should_fail_ex+0x3bf/0x510 [ 26.850127][ T388] ? security_file_alloc+0x33/0x130 [ 26.855315][ T388] __should_failslab+0xac/0xf0 [ 26.860084][ T388] should_failslab+0x9/0x20 [ 26.864569][ T388] kmem_cache_alloc+0x3b/0x320 [ 26.869328][ T388] ? __alloc_file+0x28/0x2a0 [ 26.873903][ T388] security_file_alloc+0x33/0x130 [ 26.878913][ T388] __alloc_file+0xb5/0x2a0 [ 26.883312][ T388] alloc_empty_file+0x97/0x180 [ 26.888074][ T388] path_openat+0xf4/0x2f30 [ 26.892477][ T388] ? kasan_set_track+0x60/0x70 [ 26.897224][ T388] ? kasan_set_track+0x4b/0x70 [ 26.901974][ T388] ? __kasan_slab_alloc+0x72/0x80 [ 26.906984][ T388] ? slab_post_alloc_hook+0x4f/0x2d0 [ 26.912254][ T388] ? kmem_cache_alloc+0x166/0x320 [ 26.917261][ T388] ? getname_flags+0xba/0x510 [ 26.921930][ T388] ? getname+0x19/0x20 [ 26.925981][ T388] ? do_sys_openat2+0xeb/0x820 [ 26.930763][ T388] ? __x64_sys_openat+0x136/0x160 [ 26.935768][ T388] ? x64_sys_call+0x783/0x9a0 [ 26.940429][ T388] ? do_syscall_64+0x4c/0xa0 [ 26.944999][ T388] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.951056][ T388] ? do_filp_open+0x420/0x420 [ 26.955717][ T388] do_filp_open+0x1ee/0x420 [ 26.960202][ T388] ? __cfi_do_filp_open+0x10/0x10 [ 26.965224][ T388] ? alloc_fd+0x4c1/0x570 [ 26.969542][ T388] do_sys_openat2+0x15e/0x820 [ 26.974203][ T388] ? __kasan_check_write+0x14/0x20 [ 26.979298][ T388] ? do_sys_open+0xe0/0xe0 [ 26.983694][ T388] ? ksys_write+0x1fa/0x260 [ 26.988205][ T388] ? __cfi_ksys_write+0x10/0x10 [ 26.993044][ T388] __x64_sys_openat+0x136/0x160 [ 26.997878][ T388] x64_sys_call+0x783/0x9a0 [ 27.002360][ T388] do_syscall_64+0x4c/0xa0 [ 27.006755][ T388] ? clear_bhb_loop+0x30/0x80 [ 27.011460][ T388] ? clear_bhb_loop+0x30/0x80 [ 27.016153][ T388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.022037][ T388] RIP: 0033:0x7fcd6939e0d9 [ 27.026472][ T388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.046063][ T388] RSP: 002b:00007fcd6a2dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 27.054494][ T388] RAX: ffffffffffffffda RBX: 00007fcd69625fa0 RCX: 00007fcd6939e0d9 [ 27.062454][ T388] RDX: 0000000000141442 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 27.070412][ T388] RBP: 00007fcd6a2dc090 R08: 0000000000000000 R09: 0000000000000000 [ 27.074004][ T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.078368][ T388] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 27.078384][ T388] R13: 00007fcd69626038 R14: 00007fcd69625fa0 R15: 00007ffda77d82a8 [ 27.078398][ T388] [ 27.080066][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.127829][ T396] loop1: detected capacity change from 0 to 512 [ 27.134399][ T396] EXT4-fs: Ignoring removed bh option [ 27.140236][ T396] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.153422][ T396] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 27.165324][ T396] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 27.179588][ T396] EXT4-fs (loop1): 1 truncate cleaned up [ 27.181328][ T28] audit: type=1400 audit(1786910559.791:169): avc: denied { setopt } for pid=398 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.188834][ T396] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 27.204547][ T28] audit: type=1400 audit(1786910559.801:170): avc: denied { write } for pid=398 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.239229][ T28] audit: type=1400 audit(1786910559.851:171): avc: denied { mounton } for pid=395 comm="syz.1.25" path="/2/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.264600][ T28] audit: type=1400 audit(1786910559.861:172): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 27.271887][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.284808][ T6] usb 5-1: device descriptor read/64, error -71 [ 27.300697][ T396] incfs: Unexpected inode type [ 27.302246][ T403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.27'. [ 27.310376][ T28] audit: type=1400 audit(1786910559.871:173): avc: denied { name_bind } for pid=400 comm="syz.0.28" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.315648][ T287] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.342025][ T28] audit: type=1400 audit(1786910559.871:174): avc: denied { node_bind } for pid=400 comm="syz.0.28" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.358812][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.389419][ T39] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 27.389444][ T287] EXT4-fs (loop1): Remounting filesystem read-only [ 27.400339][ T39] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 27.417006][ T28] audit: type=1400 audit(1786910559.871:175): avc: denied { setattr } for pid=395 comm="syz.1.25" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.438648][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 27.448095][ T39] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 27.460364][ T287] EXT4-fs (loop1): Remounting filesystem read-only [ 27.468377][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.482857][ T39] usb 4-1: Product: syz [ 27.483667][ T287] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.487325][ T39] usb 4-1: Manufacturer: syz [ 27.513148][ T39] usb 4-1: SerialNumber: syz [ 27.519819][ T287] EXT4-fs (loop1): Remounting filesystem read-only [ 27.526698][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 27.546937][ T287] EXT4-fs (loop1): Remounting filesystem read-only [ 27.553607][ T287] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.575395][ T287] EXT4-fs (loop1): Remounting filesystem read-only [ 27.582079][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 27.604214][ T287] EXT4-fs (loop1): Remounting filesystem read-only [ 27.610993][ T287] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.632579][ T287] EXT4-fs (loop1): Remounting filesystem read-only [ 27.634020][ T6] usb 5-1: device descriptor read/64, error -71 [ 27.639302][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 27.665716][ T287] EXT4-fs (loop1): Remounting filesystem read-only [ 27.672958][ T287] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.695125][ T287] EXT4-fs (loop1): Remounting filesystem read-only [ 27.702393][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 27.727364][ T413] loop2: detected capacity change from 0 to 512 [ 27.734273][ T413] FAT-fs (loop2): Unrecognized mount option "ÿ" or missing value [ 27.742785][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.766453][ T6] usb usb5-port1: attempt power cycle [ 27.767863][ T356] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 27.945555][ T60] usb 1-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 27.954877][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.970208][ T39] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 27.984703][ T60] usb 1-1: config 0 descriptor?? [ 27.993663][ T39] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 28.018464][ T39] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 28.060250][ T39] usb 4-1: USB disconnect, device number 3 [ 28.075484][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.184058][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 28.221360][ T6] usb 5-1: device descriptor read/8, error -71 [ 28.370558][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.377901][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.386174][ T6] usb 5-1: device descriptor read/8, error -71 [ 28.392928][ T416] device bridge_slave_0 entered promiscuous mode [ 28.402669][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.409860][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.417749][ T416] device bridge_slave_1 entered promiscuous mode [ 28.485123][ T43] device bridge_slave_1 left promiscuous mode [ 28.491653][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.499672][ T43] device bridge_slave_0 left promiscuous mode [ 28.506197][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.514888][ T43] device veth1_macvtap left promiscuous mode [ 28.521039][ T43] device veth0_vlan left promiscuous mode [ 28.787560][ T424] tipc: Enabling of bearer rejected, failed to enable media [ 28.798656][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.805739][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.813046][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.820092][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.848341][ T441] bridge0: port 3(syz_tun) entered blocking state [ 28.856011][ T441] bridge0: port 3(syz_tun) entered disabled state [ 28.862923][ T441] device syz_tun entered promiscuous mode [ 28.869095][ T441] bridge0: port 3(syz_tun) entered blocking state [ 28.875544][ T441] bridge0: port 3(syz_tun) entered forwarding state [ 28.935853][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.943247][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.957978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.965530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.984246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.992606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.000870][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.007957][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.015633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.023924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.032124][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.039164][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.046572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.054671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.062586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.070821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.078788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.087173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.097630][ T416] device veth0_vlan entered promiscuous mode [ 29.104588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.112453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.120564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.128371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.139552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.147880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.157440][ T416] device veth1_macvtap entered promiscuous mode [ 29.167608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.175699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.184314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.193991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.202283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.414311][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 29.444741][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 29.450869][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.462417][ T6] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 29.471539][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.479601][ T6] usb 5-1: Product: syz [ 29.483780][ T6] usb 5-1: Manufacturer: syz [ 29.488424][ T6] usb 5-1: SerialNumber: syz [ 29.494154][ T6] usb 5-1: config 0 descriptor?? [ 29.707006][ T309] usb 5-1: USB disconnect, device number 5 [ 29.864110][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.044003][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 30.050189][ T6] usb 3-1: config index 0 descriptor too short (expected 6957, got 45) [ 30.058838][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.068970][ T6] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 30.079518][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 30.093905][ T6] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 30.103038][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 30.111166][ T6] usb 3-1: Product: syz [ 30.115337][ T6] usb 3-1: Manufacturer: syz [ 30.119910][ T6] usb 3-1: SerialNumber: syz [ 30.146399][ T6] usb 3-1: config 0 descriptor?? [ 30.152591][ T6] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 30.232227][ T464] zero sized request [ 30.245929][ T466] loop4: detected capacity change from 0 to 512 [ 30.255225][ T466] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 30.263553][ T466] EXT4-fs (loop4): 1 truncate cleaned up [ 30.269396][ T466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.286152][ T290] EXT4-fs (loop4): unmounting filesystem. [ 30.438897][ T19] usb 1-1: USB disconnect, device number 2 [ 30.865469][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.895939][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 31.895953][ T28] audit: type=1400 audit(1786910564.511:200): avc: denied { connect } for pid=495 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.971479][ T513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 31.972685][ T28] audit: type=1400 audit(1786910564.581:201): avc: denied { read } for pid=508 comm="syz.5.68" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.014134][ T28] audit: type=1400 audit(1786910564.581:202): avc: denied { open } for pid=508 comm="syz.5.68" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.037536][ T28] audit: type=1400 audit(1786910564.581:203): avc: denied { ioctl } for pid=508 comm="syz.5.68" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.080571][ T28] audit: type=1400 audit(1786910564.601:204): avc: denied { write } for pid=508 comm="syz.5.68" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.100106][ T527] loop4: detected capacity change from 0 to 4096 [ 32.104362][ T28] audit: type=1400 audit(1786910564.681:205): avc: denied { bind } for pid=522 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.130159][ T28] audit: type=1400 audit(1786910564.731:206): avc: denied { mount } for pid=524 comm="syz.5.77" name="/" dev="configfs" ino=14138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.159110][ T527] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.159317][ T28] audit: type=1400 audit(1786910564.731:207): avc: denied { search } for pid=524 comm="syz.5.77" name="/" dev="configfs" ino=14138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.169532][ T527] EXT4-fs (loop4): Test dummy encryption mode enabled [ 32.189928][ T28] audit: type=1400 audit(1786910564.741:208): avc: denied { unmount } for pid=416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.217375][ T527] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 32.217748][ T28] audit: type=1400 audit(1786910564.741:209): avc: denied { block_suspend } for pid=528 comm="syz.5.78" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.225686][ T414] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.254691][ T527] System zones: 0-5 [ 32.260126][ T527] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.293864][ T527] fscrypt: AES-256-XTS using blk-crypto-fallback [ 32.311236][ T290] EXT4-fs (loop4): unmounting filesystem. [ 32.505189][ T414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 32.516724][ T414] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.533506][ T414] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 32.542623][ T414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.551418][ T414] usb 4-1: config 0 descriptor?? [ 32.593617][ T24] usb 3-1: USB disconnect, device number 3 [ 32.964639][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 32.977329][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 32.985107][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 32.992558][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.000491][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.008093][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.015958][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.023442][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.030970][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.072638][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.080142][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.091523][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.099148][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.107338][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.114812][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.122351][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.129829][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.137671][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.145199][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.152951][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.162616][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.220744][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.229186][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.234036][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.237130][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.253053][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.261063][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.269513][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.278362][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.286406][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.294600][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.302107][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.309675][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.317194][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.330925][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.341498][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.349029][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.356544][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.364174][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.371819][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.379706][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.387199][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.396825][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.405344][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.412855][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.423411][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.424010][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 33.431057][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.443921][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.445605][ T6] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 33.457345][ T6] usb 1-1: config 0 has no interface number 0 [ 33.461693][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.467654][ T6] usb 1-1: config 0 interface 184 has no altsetting 0 [ 33.476005][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.489923][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.490657][ T6] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 33.497687][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.507047][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.519252][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.526860][ T6] usb 1-1: Product: syz [ 33.533827][ T6] usb 1-1: Manufacturer: syz [ 33.539661][ T6] usb 1-1: SerialNumber: syz [ 33.545483][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.549027][ T6] usb 1-1: config 0 descriptor?? [ 33.554266][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.566552][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.566760][ T6] smsc75xx v1.0.0 [ 33.574220][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.585843][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.593359][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.594334][ T564] loop2: detected capacity change from 0 to 8192 [ 33.601138][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.614948][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.622535][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.625688][ T564] FAT-fs (loop2): bogus logical sector size 0 [ 33.632431][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.636232][ T564] FAT-fs (loop2): Can't find a valid FAT filesystem [ 33.643724][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.657662][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.665182][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.672684][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.680200][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.687694][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.734622][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.744587][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.802994][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.824505][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.848286][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.860927][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.877262][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.925457][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.932899][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.940787][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.948382][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.956650][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.964253][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.971660][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.979987][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.987909][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 33.995596][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.003147][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.012820][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.022233][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.032416][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.041657][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.052304][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.060501][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.074464][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.083496][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.095154][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.102700][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.111506][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.123643][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.132247][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.145193][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.152907][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.165849][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.173403][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.181452][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.197571][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.199207][ T618] xt_hashlimit: size too large, truncated to 1048576 [ 34.212295][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.220256][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.235934][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.243653][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.251781][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.276800][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.303089][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.327665][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.349933][ T618] loop4: detected capacity change from 0 to 4096 [ 34.357922][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.368136][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.411739][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.430738][ T618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.509417][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.595418][ T6] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 34.611120][ T6] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 34.625155][ T6] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 34.635523][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.838759][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.862097][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.869706][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.877305][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.884773][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.892204][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.899990][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.907426][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.914906][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.928880][ T290] EXT4-fs (loop4): unmounting filesystem. [ 34.931756][ T6] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 34.949138][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.954014][ T6] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 34.974001][ T6] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 34.983463][ T6] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 34.989118][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 34.996493][ T6] usb 1-1: USB disconnect, device number 3 [ 35.049488][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.056993][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.068477][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.076033][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.083479][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.091988][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.099468][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.106978][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.119142][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.126662][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.127027][ T644] loop2: detected capacity change from 0 to 256 [ 35.134173][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.148386][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.155912][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.163705][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.171270][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.260252][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.338049][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.346066][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.353480][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.361660][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.369293][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.377243][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.389346][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.404411][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.416925][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.430041][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.437675][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.445552][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.453030][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.460600][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.468158][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.475896][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.483373][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.491008][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.498625][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.506210][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.513774][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.521395][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.528990][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.536584][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.544146][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.551595][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.559496][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.567193][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.574908][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.582363][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.589957][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.597516][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.605092][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.612566][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.620471][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.628223][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.635812][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.643457][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.651187][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.658768][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.666340][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.673865][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.681710][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.689300][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.694002][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.696914][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.711705][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.719349][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.726941][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.734517][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.741971][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.749585][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.757149][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.764713][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.772149][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.772618][ T659] loop0: detected capacity change from 0 to 40427 [ 35.779781][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.793519][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.801001][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.801895][ T659] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.808469][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.846857][ T659] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.852544][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.889527][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.897424][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.897943][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.905052][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.924207][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.931621][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.934019][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.939977][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.967029][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.973105][ T6] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 35.974480][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.994149][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 35.994688][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.001639][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.017211][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.017974][ T6] usb 3-1: Product: syz [ 36.025924][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.029104][ T6] usb 3-1: Manufacturer: syz [ 36.037164][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.041404][ T6] usb 3-1: SerialNumber: syz [ 36.048305][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.060257][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.067732][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.075368][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.082779][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.090214][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.097614][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.105011][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.112394][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.119836][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.127251][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.135061][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.142459][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.149896][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.157297][ T414] hid-generic 0003:07B5:0312.0001: unknown main item tag 0x0 [ 36.166664][ T414] hid-generic 0003:07B5:0312.0001: hidraw0: USB HID v0.01 Device [HID 07b5:0312] on usb-dummy_hcd.3-1/input0 [ 36.184245][ T414] usb 4-1: USB disconnect, device number 4 [ 36.233033][ T673] fido_id[673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 36.246993][ T677] loop4: detected capacity change from 0 to 1024 [ 36.260981][ T677] EXT4-fs: Ignoring removed bh option [ 36.280896][ T677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.312985][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /26/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 36.335795][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 36.342802][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /26/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 36.365050][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.372983][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 36.380723][ T290] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 36.400659][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 36.407666][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 36.422200][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /26/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 36.444515][ T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 36.444765][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 36.459045][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /26/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 36.479450][ T19] usb 3-1: USB disconnect, device number 4 [ 36.484520][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 36.493382][ T290] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 36.513412][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 36.520122][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 36.535547][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /26/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 36.559493][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 36.567155][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /26/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 36.735919][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 36.742994][ T290] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 36.765361][ T60] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 36.776891][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 36.783538][ T60] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 36.795414][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 36.812501][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /26/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 36.835478][ T60] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 36.847454][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 36.862768][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.871412][ T60] usb 6-1: Product: syz [ 36.878476][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 36.893864][ T60] usb 6-1: Manufacturer: syz [ 36.899079][ T60] usb 6-1: SerialNumber: syz [ 36.907655][ T60] usb 6-1: config 0 descriptor?? [ 36.915674][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 36.930978][ T636] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 36.944492][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 36.959327][ T636] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 37.001972][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 37.030360][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 37.047577][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 37.164003][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 37.169429][ T344] bridge0: port 3(syz_tun) entered disabled state [ 37.177235][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.189203][ T344] device syz_tun left promiscuous mode [ 37.195408][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.220456][ T344] bridge0: port 3(syz_tun) entered disabled state [ 37.234378][ T690] loop2: detected capacity change from 0 to 512 [ 37.248189][ T690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 37.249856][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 37.249871][ T28] audit: type=1400 audit(1786910569.861:244): avc: denied { name_bind } for pid=691 comm="syz.3.122" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 37.260533][ T6] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 37.283183][ T690] System zones: 1-12 [ 37.297192][ T690] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.121: missing EA_INODE flag [ 37.310209][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.310870][ T690] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.121: error while reading EA inode 12 err=-117 [ 37.321766][ T6] usb 1-1: config 0 descriptor?? [ 37.331305][ T690] EXT4-fs (loop2): 1 orphan inode deleted [ 37.341503][ T690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.574707][ T60] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.661732][ T699] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.669234][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.680609][ T699] device bridge_slave_0 entered promiscuous mode [ 37.697281][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.704403][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.711861][ T699] device bridge_slave_1 entered promiscuous mode [ 37.759989][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.767078][ T699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.774361][ T699] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.781390][ T699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.790079][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 37.800549][ T60] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 37.809717][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.819041][ T60] usb 4-1: config 0 descriptor?? [ 37.819838][ T6] hid-generic 0003:0403:6030.0002: unknown main item tag 0x0 [ 37.831874][ T6] hid-generic 0003:0403:6030.0002: unknown main item tag 0x0 [ 37.836898][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.842410][ T6] hid-generic 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 37.858453][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.866298][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.878199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.886529][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.893616][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.902156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.910608][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.917661][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.929548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.940547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.954343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.965827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.973863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.981551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.989729][ T699] device veth0_vlan entered promiscuous mode [ 38.001028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.010148][ T699] device veth1_macvtap entered promiscuous mode [ 38.029676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.031686][ T309] usb 4-1: USB disconnect, device number 5 [ 38.040814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.044626][ T28] audit: type=1400 audit(1786910570.661:245): avc: denied { mounton } for pid=699 comm="syz-executor" path="/root/syzkaller.7At8xH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.054646][ T19] usb 1-1: USB disconnect, device number 4 [ 38.084840][ T603] device bridge_slave_1 left promiscuous mode [ 38.097836][ T603] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.108871][ T603] device bridge_slave_0 left promiscuous mode [ 38.115131][ T603] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.123627][ T603] device veth1_macvtap left promiscuous mode [ 38.130017][ T603] device veth0_vlan left promiscuous mode [ 38.130445][ T289] EXT4-fs (loop2): unmounting filesystem. [ 38.167019][ T28] audit: type=1400 audit(1786910570.781:246): avc: denied { mount } for pid=707 comm="syz.2.126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.189848][ T28] audit: type=1400 audit(1786910570.781:247): avc: denied { search } for pid=707 comm="syz.2.126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 38.216660][ T28] audit: type=1400 audit(1786910570.781:248): avc: denied { read write } for pid=707 comm="syz.2.126" name="dynamic_events" dev="tracefs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.241221][ T28] audit: type=1400 audit(1786910570.781:249): avc: denied { open } for pid=707 comm="syz.2.126" path="/19/tracefs/dynamic_events" dev="tracefs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.245908][ T60] usb 6-1: USB disconnect, device number 2 [ 38.287778][ T28] audit: type=1400 audit(1786910570.781:250): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.816920][ T28] audit: type=1400 audit(1786910571.431:251): avc: denied { read } for pid=732 comm="syz.5.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.869493][ T734] loop5: detected capacity change from 0 to 512 [ 38.878367][ T734] EXT4-fs (loop5): Test dummy encryption mode enabled [ 38.885639][ T19] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 38.894251][ T734] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.136: inode #1: comm syz.5.136: iget: illegal inode # [ 38.907514][ T734] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.136: error while reading EA inode 1 err=-117 [ 38.919920][ T734] EXT4-fs (loop5): 1 orphan inode deleted [ 38.925825][ T734] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 38.984014][ T60] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 39.094019][ T19] usb 7-1: Using ep0 maxpacket: 32 [ 39.100338][ T19] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 39.111542][ T19] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 39.122719][ T19] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.135591][ T19] usb 7-1: config 0 interface 0 has no altsetting 0 [ 39.142217][ T19] usb 7-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 39.167539][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.177190][ T751] loop2: detected capacity change from 0 to 512 [ 39.184704][ T19] usb 7-1: config 0 descriptor?? [ 39.186936][ T60] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.196460][ T60] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 39.205778][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.214441][ T60] usb 4-1: config 0 descriptor?? [ 39.219993][ T325] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.278016][ T309] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.387599][ T753] ±ÿ: renamed from bond_slave_0 [ 39.675386][ T19] usbhid 7-1:0.0: can't add hid device: -71 [ 39.682241][ T19] usbhid: probe of 7-1:0.0 failed with error -71 [ 39.713551][ T416] EXT4-fs (loop5): unmounting filesystem. [ 39.714750][ T309] usb 1-1: Using ep0 maxpacket: 8 [ 39.727116][ T19] usb 7-1: USB disconnect, device number 2 [ 39.763720][ T309] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 39.786487][ T757] loop5: detected capacity change from 0 to 512 [ 39.806343][ T309] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 39.816440][ T309] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 39.825038][ T757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 39.834450][ T309] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 39.834565][ T757] System zones: [ 39.844665][ T309] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 39.846089][ T757] 1-12 [ 39.861374][ T309] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 39.861454][ T757] [ 39.875534][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.889175][ T60] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x5 [ 39.897384][ T60] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x6 [ 39.904647][ T60] hid-led 0003:0FC5:B080.0003: unexpected long global item [ 39.905696][ T757] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.145: missing EA_INODE flag [ 39.927628][ T757] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.145: error while reading EA inode 12 err=-117 [ 39.929020][ T60] hid-led: probe of 0003:0FC5:B080.0003 failed with error -22 [ 39.953196][ T757] EXT4-fs (loop5): 1 orphan inode deleted [ 39.959079][ T757] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 40.048504][ T416] EXT4-fs (loop5): unmounting filesystem. [ 40.108527][ T19] usb 4-1: USB disconnect, device number 6 [ 40.524045][ T60] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 40.634444][ T778] loop3: detected capacity change from 0 to 512 [ 40.655583][ T778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.664587][ T778] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.683030][ T288] EXT4-fs (loop3): unmounting filesystem. [ 40.704015][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 40.711410][ T60] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 40.720504][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.728503][ T60] usb 7-1: Product: syz [ 40.732637][ T60] usb 7-1: Manufacturer: syz [ 40.737235][ T60] usb 7-1: SerialNumber: syz [ 40.742302][ T60] usb 7-1: config 0 descriptor?? [ 40.751867][ T60] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 40.761988][ T60] usb 7-1: Detected FT-X [ 40.812448][ T785] loop3: detected capacity change from 0 to 512 [ 40.874524][ T785] EXT4-fs (loop3): Test dummy encryption mode enabled [ 40.989447][ T785] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.154: inode #1: comm syz.3.154: iget: illegal inode # [ 40.998728][ T28] audit: type=1400 audit(1786910573.611:252): avc: denied { create } for pid=789 comm="syz.5.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.021435][ T785] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.154: error while reading EA inode 1 err=-117 [ 41.026308][ T28] audit: type=1400 audit(1786910573.611:253): avc: denied { write } for pid=789 comm="syz.5.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.052671][ T785] EXT4-fs (loop3): 1 orphan inode deleted [ 41.058984][ T785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.061586][ T794] loop5: detected capacity change from 0 to 512 [ 41.101818][ T794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 41.109880][ T794] System zones: 1-12 [ 41.126420][ T794] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.157: missing EA_INODE flag [ 41.131718][ T799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'. [ 41.138686][ T794] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.157: error while reading EA inode 12 err=-117 [ 41.159644][ T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 41.161825][ T794] EXT4-fs (loop5): 1 orphan inode deleted [ 41.167649][ T60] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 41.173423][ T794] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 41.179944][ T60] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 41.197805][ T60] usb 7-1: USB disconnect, device number 3 [ 41.214354][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 41.222659][ T799] syz.2.159 (799) used greatest stack depth: 19616 bytes left [ 41.227136][ T60] ftdi_sio 7-1:0.0: device disconnected [ 41.284596][ T805] ================================================================== [ 41.292689][ T805] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0 [ 41.300001][ T805] Write of size 8 at addr ffff888136997950 by task syz.2.162/805 [ 41.307832][ T805] [ 41.310164][ T805] CPU: 1 PID: 805 Comm: syz.2.162 Not tainted syzkaller #0 [ 41.317378][ T805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.327439][ T805] Call Trace: [ 41.330750][ T805] [ 41.333703][ T805] __dump_stack+0x21/0x24 [ 41.338048][ T805] dump_stack_lvl+0x110/0x170 [ 41.342716][ T805] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.347724][ T805] ? mutex_lock+0x86/0x1b0 [ 41.352150][ T805] print_address_description+0x71/0x200 [ 41.357681][ T805] print_report+0x4a/0x60 [ 41.361993][ T805] kasan_report+0x122/0x150 [ 41.366478][ T805] ? mutex_lock+0x86/0x1b0 [ 41.370877][ T805] kasan_check_range+0x249/0x2a0 [ 41.375814][ T805] __kasan_check_write+0x14/0x20 [ 41.380732][ T805] mutex_lock+0x86/0x1b0 [ 41.384958][ T805] ? __cfi_mutex_lock+0x10/0x10 [ 41.389802][ T805] ? kfree+0x6f/0xf0 [ 41.393709][ T805] ? l2tp_session_put+0xaf/0x1a0 [ 41.398649][ T805] ? l2tp_session_delete+0x3df/0x4d0 [ 41.403943][ T805] pppol2tp_release+0x178/0x2b0 [ 41.408804][ T805] sock_close+0xc9/0x220 [ 41.413060][ T805] ? __cfi_sock_close+0x10/0x10 [ 41.417921][ T805] __fput+0x1fd/0x8f0 [ 41.421912][ T805] ____fput+0x15/0x20 [ 41.425903][ T805] task_work_run+0x1e1/0x250 [ 41.430501][ T805] ? __cfi_task_work_run+0x10/0x10 [ 41.435616][ T805] ? __cfi___close_range+0x10/0x10 [ 41.440735][ T805] exit_to_user_mode_loop+0x9b/0xb0 [ 41.446031][ T805] exit_to_user_mode_prepare+0x87/0xd0 [ 41.451493][ T805] syscall_exit_to_user_mode+0x1a/0x30 [ 41.456952][ T805] do_syscall_64+0x58/0xa0 [ 41.461371][ T805] ? clear_bhb_loop+0x30/0x80 [ 41.466047][ T805] ? clear_bhb_loop+0x30/0x80 [ 41.470722][ T805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.476617][ T805] RIP: 0033:0x7f813419e0d9 [ 41.481031][ T805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.500639][ T805] RSP: 002b:00007ffe1a9a1b38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 41.509147][ T805] RAX: 0000000000000000 RBX: 00007ffe1a9a1c20 RCX: 00007f813419e0d9 [ 41.517115][ T805] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 41.525085][ T805] RBP: 000000000000a12a R08: 0000000000000001 R09: 0000000000000000 [ 41.533051][ T805] R10: 0000001b2dc20000 R11: 0000000000000246 R12: 00007ffe1a9a1c60 [ 41.541023][ T805] R13: 00007f8134425fac R14: 000000000000a15e R15: 00007f8134425fa0 [ 41.549002][ T805] [ 41.552018][ T805] [ 41.554363][ T805] Allocated by task 806: [ 41.558591][ T805] kasan_set_track+0x4b/0x70 [ 41.563182][ T805] kasan_save_alloc_info+0x1f/0x30 [ 41.568285][ T805] __kasan_kmalloc+0x95/0xb0 [ 41.572875][ T805] __kmalloc+0xb4/0x1e0 [ 41.577024][ T805] l2tp_session_create+0x38/0xbd0 [ 41.582042][ T805] pppol2tp_connect+0xbf5/0x1640 [ 41.586977][ T805] __sys_connect+0x3da/0x460 [ 41.591570][ T805] __x64_sys_connect+0x7a/0x90 [ 41.596343][ T805] x64_sys_call+0x88d/0x9a0 [ 41.600844][ T805] do_syscall_64+0x4c/0xa0 [ 41.605254][ T805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.611151][ T805] [ 41.613467][ T805] Freed by task 805: [ 41.617348][ T805] kasan_set_track+0x4b/0x70 [ 41.621936][ T805] kasan_save_free_info+0x2b/0x40 [ 41.626951][ T805] ____kasan_slab_free+0x132/0x180 [ 41.632063][ T805] __kasan_slab_free+0x11/0x20 [ 41.636821][ T805] slab_free_freelist_hook+0xc2/0x190 [ 41.642185][ T805] __kmem_cache_free+0xb7/0x1b0 [ 41.647039][ T805] kfree+0x6f/0xf0 [ 41.650766][ T805] l2tp_session_put+0xaf/0x1a0 [ 41.655536][ T805] l2tp_session_delete+0x3df/0x4d0 [ 41.660647][ T805] pppol2tp_release+0x169/0x2b0 [ 41.665495][ T805] sock_close+0xc9/0x220 [ 41.669738][ T805] __fput+0x1fd/0x8f0 [ 41.673717][ T805] ____fput+0x15/0x20 [ 41.677694][ T805] task_work_run+0x1e1/0x250 [ 41.682280][ T805] exit_to_user_mode_loop+0x9b/0xb0 [ 41.687480][ T805] exit_to_user_mode_prepare+0x87/0xd0 [ 41.692938][ T805] syscall_exit_to_user_mode+0x1a/0x30 [ 41.698393][ T805] do_syscall_64+0x58/0xa0 [ 41.702806][ T805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.708701][ T805] [ 41.711015][ T805] The buggy address belongs to the object at ffff888136997800 [ 41.711015][ T805] which belongs to the cache kmalloc-512 of size 512 [ 41.725065][ T805] The buggy address is located 336 bytes inside of [ 41.725065][ T805] 512-byte region [ffff888136997800, ffff888136997a00) [ 41.738341][ T805] [ 41.740657][ T805] The buggy address belongs to the physical page: [ 41.747071][ T805] page:ffffea0004da6500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x136994 [ 41.757322][ T805] head:ffffea0004da6500 order:2 compound_mapcount:0 compound_pincount:0 [ 41.765642][ T805] flags: 0x4000000000010200(slab|head|zone=1) [ 41.771723][ T805] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100042f00 [ 41.780304][ T805] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 41.788881][ T805] page dumped because: kasan: bad access detected [ 41.795279][ T805] page_owner tracks the page as allocated [ 41.800998][ T805] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 24, tgid 24 (kworker/1:0), ts 26454513476, free_ts 0 [ 41.821836][ T805] post_alloc_hook+0x1f5/0x210 [ 41.826613][ T805] prep_new_page+0x1c/0x110 [ 41.831113][ T805] get_page_from_freelist+0x2ca9/0x2d20 [ 41.836660][ T805] __alloc_pages+0x1fa/0x610 [ 41.841256][ T805] alloc_slab_page+0x6e/0xf0 [ 41.845930][ T805] new_slab+0x98/0x3e0 [ 41.849994][ T805] ___slab_alloc+0x70f/0xb70 [ 41.854586][ T805] __slab_alloc+0x5e/0xa0 [ 41.858911][ T805] __kmem_cache_alloc_node+0x204/0x2d0 [ 41.864370][ T805] __kmalloc_node_track_caller+0xa1/0x1e0 [ 41.870080][ T805] __alloc_skb+0x226/0x4a0 [ 41.874491][ T805] __ipv6_ifa_notify+0x200/0xe80 [ 41.879428][ T805] addrconf_dad_completed+0x192/0xe80 [ 41.884805][ T805] addrconf_dad_work+0xc1b/0x14a0 [ 41.889821][ T805] process_one_work+0x717/0xc30 [ 41.894669][ T805] worker_thread+0xa4d/0x11d0 [ 41.899344][ T805] page_owner free stack trace missing [ 41.904711][ T805] [ 41.907038][ T805] Memory state around the buggy address: [ 41.912668][ T805] ffff888136997800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.920729][ T805] ffff888136997880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.928791][ T805] >ffff888136997900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.936854][ T805] ^ [ 41.943531][ T805] ffff888136997980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.951594][ T805] ffff888136997a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.959652][ T805] ================================================================== [ 42.011989][ T288] EXT4-fs (loop3): unmounting filesystem. [ 42.018183][ T24] usb 1-1: USB disconnect, device number 5 [ 42.024675][ T805] Disabling lock debugging due to kernel taint [ 42.099649][ T416] EXT4-fs (loop5): unmounting filesystem.