last executing test programs: 1.24090263s ago: executing program 3 (id=369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x2, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1, 0x6, 0x4, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000680)=r0}, 0x20) 1.209901101s ago: executing program 3 (id=370): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005200ff03000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x40091}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) 1.170659292s ago: executing program 3 (id=371): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x50) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/133, 0x18}, {&(0x7f0000000940)=""/114}], 0x44) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1.106651113s ago: executing program 3 (id=373): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x92, 0x5, 0x9bc, {0x2, 0x2, 0x4, 0x9, 0xff, 0x3}, {0x2, 0x1, 0x8, 0x9, 0x80, 0x8e}, 0x1, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0x5, 0x4, 0x0, 0xfffffc00, 0xb80, 0x7, 0xee13, 0x4, 0x6, 0x3, 0x5, 0x2, 0xc0f9, 0x9e60, 0x10001, 0x4, 0x5, 0x1, 0x9, 0x9a, 0x7, 0x6, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x619d, 0x37, 0x39, 0x2, 0x3ff, 0x800, 0x559, 0x4, 0x101, 0x7, 0xfffffffe, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x0, 0x800, 0x8, 0x0, 0x9, 0xfffffffb, 0x9, 0x2, 0xa55b, 0x0, 0x400, 0x1, 0x3, 0x25, 0x7, 0x1, 0x1, 0xd, 0x10001, 0x5, 0xfffffffe, 0x72a2c416, 0xfffffff7, 0x9, 0x3d, 0x4, 0x3, 0x4, 0x1, 0x7, 0x4, 0x92, 0x401, 0x3, 0xfffffff7, 0x0, 0x1, 0xd6f, 0x8, 0x80000001, 0x401, 0x2, 0x8, 0x3, 0xd9, 0xfffdffff, 0xfffffffd, 0x4, 0x7f4, 0x2, 0xfffffbf8, 0x3, 0x9, 0x4, 0x6, 0x4, 0xfffffff7, 0x0, 0xfb, 0x9, 0x6, 0x400, 0xfc000000, 0x400, 0x7, 0x7, 0x6f1, 0x1, 0x5, 0x7, 0x7fffffff, 0x401, 0xffffffff, 0x4, 0x10, 0xfffffff7, 0x6, 0x964, 0x5, 0x8, 0x101, 0x6, 0xff, 0x1, 0x2, 0x4a, 0x10001, 0xffff, 0x0, 0x14, 0x200, 0xfff, 0x100, 0xc, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8000000, 0x6, 0x0, 0x9a7c, 0x3fc, 0x3, 0x5, 0x0, 0x6, 0x9, 0x3, 0x43, 0x80000000, 0x3, 0xffffffff, 0x1, 0x9, 0x8, 0x5, 0xefd2, 0x795, 0x5, 0x1ff, 0x5, 0x3, 0xffffffff, 0x5, 0x2, 0xc, 0x1e, 0x1, 0x1, 0x8001, 0x200, 0x8001, 0x7, 0x800, 0x5, 0x80000001, 0x0, 0x7fff, 0x8, 0x1d23, 0x7fff, 0x90, 0x5, 0xffffffff, 0xd, 0x3, 0x0, 0x5, 0x10, 0x9, 0x6, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x7010, 0xfffffe01, 0x2, 0x6, 0xc4e, 0xb, 0x5a, 0xe74, 0x9, 0x1, 0x3, 0x97df, 0x0, 0x2, 0x7, 0x1c, 0x9, 0x1, 0x8, 0x24, 0xfffffff8, 0x10000, 0xffff, 0x6, 0x8d5b, 0x7, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0xc9, 0x0, 0x1, 0x4, 0x8, 0xc74, 0x800, 0x1, 0x8, 0x5, 0x6, 0x2, 0xfffffffa, 0x2b, 0x5, 0x8, 0x9, 0x1, 0x3, 0x9a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0x6, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0xac54, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0x7ff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000000, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0x101, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x27, 0xe5f, 0x8, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x2, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x4, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1.081296044s ago: executing program 3 (id=375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000200), &(0x7f00000009c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r1, &(0x7f0000000680), 0x0}, 0x20) 1.074360884s ago: executing program 4 (id=376): r0 = io_uring_setup(0x6cee, &(0x7f00000051c0)={0x0, 0x321d, 0x10, 0x1, 0x304}) mmap$IORING_OFF_CQ_RING(0xffffc000, 0x10002, 0x0, 0x13, r0, 0x8000000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r1, &(0x7f0000002c00)=[{&(0x7f0000002b40)=""/182, 0xb6}], 0x37, 0xd6c40391, 0x0) 1.058935325s ago: executing program 3 (id=378): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) open(0x0, 0x80080, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, 'c'}, @main=@item_4={0x3, 0x0, 0xa, "e71c6e13"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x10, 0xe7, 0x1, {0x22, 0x64}}}}, 0x0) 1.042151915s ago: executing program 4 (id=380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000750000000000000000000000000000000000000000000000000000000000b86b6e"], 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0216ef050a0000002dbd7000ffdbdf250800120002000100b86b6e"], 0x50}}, 0x840) 1.028459785s ago: executing program 4 (id=382): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 1.015657106s ago: executing program 4 (id=384): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005"], 0x1f0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 982.101686ms ago: executing program 4 (id=386): setuid(0xee01) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6(0xa, 0x3, 0x6) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 949.465687ms ago: executing program 4 (id=387): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0xfff7, 0x3, 0x9, 0x6}]}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 623.590415ms ago: executing program 0 (id=399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 572.773826ms ago: executing program 0 (id=400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x5, 0x0, [{0x7, 0x12000, 0x2, 0x1, 0x0, 0xfffffff9, 0x8}, {0x80000000, 0x2, 0x3, 0x7, 0x9, 0xd258, 0x5}, {0x7, 0x8, 0x9, 0x401, 0xffff8000, 0x1, 0x800}, {0x80000019, 0xfffff800, 0x0, 0x1, 0x80000001, 0x7, 0x40000000}, {0x1, 0x3, 0x4, 0xe09c, 0x5, 0xfffffff8, 0x6}]}) 478.253908ms ago: executing program 0 (id=402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @irqchip={0x1, 0x10000}}]}) 461.500089ms ago: executing program 0 (id=403): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_create(0x4, 0x80000) 199.507755ms ago: executing program 2 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYBLOB="8060"]) 172.468206ms ago: executing program 2 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x4}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2c, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x5}, {0xfff1, 0xffff}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 154.941836ms ago: executing program 1 (id=415): unshare(0x22020600) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xfffffffc, 0x80000004, 0x100003, 0x80002, 0x1, 0x2}}) 144.241106ms ago: executing program 2 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000b40)={0x1, 0x0, [{0x40000073, 0x0, 0x66}]}) 134.001716ms ago: executing program 1 (id=417): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 120.549227ms ago: executing program 1 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 107.590107ms ago: executing program 1 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x8001}}, 0x30) 93.966397ms ago: executing program 2 (id=420): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') io_setup(0x3fd, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001700)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700", @ANYRES64=r0, @ANYRES64, @ANYRESOCT=r1], 0xbc}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) 87.430318ms ago: executing program 1 (id=421): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) 36.485299ms ago: executing program 1 (id=422): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8605, &(0x7f0000000a00), 0x0, 0x65e, &(0x7f00000000c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000100"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000040), 0x3ff, r0}, 0x38) 19.734199ms ago: executing program 2 (id=423): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="7f454c4603100702810000000000000003003e"], 0xb0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 14.808329ms ago: executing program 0 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') mount(0x0, &(0x7f0000000140)='./proc\x00', 0x0, 0x40000, 0x0) 6.332939ms ago: executing program 2 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x20) 0s ago: executing program 0 (id=426): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 23.191839][ T30] audit: type=1400 audit(1791200857.113:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.195858][ T277] cgroup: Unknown subsys name 'net' [ 23.214996][ T30] audit: type=1400 audit(1791200857.113:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.242345][ T30] audit: type=1400 audit(1791200857.143:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.242672][ T277] cgroup: Unknown subsys name 'devices' [ 23.385387][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.391042][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.530281][ T30] audit: type=1400 audit(1791200857.453:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.553491][ T30] audit: type=1400 audit(1791200857.453:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.578290][ T30] audit: type=1400 audit(1791200857.453:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.596631][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.610399][ T30] audit: type=1400 audit(1791200857.533:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.635916][ T30] audit: type=1400 audit(1791200857.533:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.668169][ T30] audit: type=1400 audit(1791200857.593:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.693799][ T30] audit: type=1400 audit(1791200857.593:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.693838][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.198606][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.205714][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.213432][ T286] device bridge_slave_0 entered promiscuous mode [ 24.221600][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.228796][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.236485][ T286] device bridge_slave_1 entered promiscuous mode [ 24.295999][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.303070][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.310798][ T285] device bridge_slave_0 entered promiscuous mode [ 24.317983][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.325191][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.332620][ T285] device bridge_slave_1 entered promiscuous mode [ 24.385449][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.392656][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.400280][ T288] device bridge_slave_0 entered promiscuous mode [ 24.424044][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.431130][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.438609][ T288] device bridge_slave_1 entered promiscuous mode [ 24.469047][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.476158][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.483704][ T289] device bridge_slave_0 entered promiscuous mode [ 24.493023][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.500105][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.507517][ T289] device bridge_slave_1 entered promiscuous mode [ 24.545836][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.552918][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.560468][ T287] device bridge_slave_0 entered promiscuous mode [ 24.570148][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.577212][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.584657][ T287] device bridge_slave_1 entered promiscuous mode [ 24.653991][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.661159][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.668504][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.675553][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.733908][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.740970][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.748255][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.755303][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.771210][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.778288][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.785637][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.792697][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.820138][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.827231][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.834523][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.841582][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.854820][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.861872][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.869167][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.876223][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.915710][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.924448][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.932976][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.940886][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.949456][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.957212][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.964494][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.971717][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.979096][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.986347][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.993744][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.001473][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.009039][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.035750][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.044064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.051725][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.060226][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.067295][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.074749][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.082884][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.089957][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.097421][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.105587][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.112616][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.120023][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.127984][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.136217][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.143273][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.150608][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.158830][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.165867][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.194631][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.209227][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.218206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.226535][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.235429][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.242469][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.249898][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.258100][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.265155][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.272528][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.280554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.288459][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.296545][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.304657][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.312933][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.324457][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.332609][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.349856][ T286] device veth0_vlan entered promiscuous mode [ 25.358472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.366722][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.374838][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.383110][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.391595][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.399634][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.407808][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.416026][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.431638][ T285] device veth0_vlan entered promiscuous mode [ 25.439102][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.446625][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.454177][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.461986][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.470448][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.478009][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.492963][ T288] device veth0_vlan entered promiscuous mode [ 25.502887][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.511040][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.518972][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.526515][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.534989][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.543430][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.551709][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.569194][ T287] device veth0_vlan entered promiscuous mode [ 25.576484][ T286] device veth1_macvtap entered promiscuous mode [ 25.585134][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.593732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.601829][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.610313][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.618733][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.626377][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.634811][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.642632][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.650969][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.658476][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.670289][ T288] device veth1_macvtap entered promiscuous mode [ 25.678998][ T289] device veth0_vlan entered promiscuous mode [ 25.686828][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.695214][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.702601][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.715236][ T287] device veth1_macvtap entered promiscuous mode [ 25.723388][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.731706][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.739989][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.747820][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.756177][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.765808][ T285] device veth1_macvtap entered promiscuous mode [ 25.781699][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.789666][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.798074][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.806625][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.815074][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.823690][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.832049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.840519][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.848885][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.857401][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.865773][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.892407][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 25.905967][ T289] device veth1_macvtap entered promiscuous mode [ 25.914974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.923581][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.931872][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.940397][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.949134][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.957880][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.966197][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.987443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.998194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.006895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.015200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.102106][ T325] ======================================================= [ 26.102106][ T325] WARNING: The mand mount option has been deprecated and [ 26.102106][ T325] and is ignored by this kernel. Remove the mand [ 26.102106][ T325] option from the mount to silence this warning. [ 26.102106][ T325] ======================================================= [ 26.169061][ T333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.373074][ T327] loop3: detected capacity change from 0 to 40427 [ 26.399937][ T327] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 26.409303][ T327] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 26.427893][ T327] F2FS-fs (loop3): fault_type options not supported [ 26.428751][ T347] capability: warning: `syz.1.16' uses 32-bit capabilities (legacy support in use) [ 26.450614][ T327] F2FS-fs (loop3): fault_injection options not supported [ 26.485484][ T327] F2FS-fs (loop3): invalid crc value [ 26.522848][ T327] F2FS-fs (loop3): Found nat_bits in checkpoint [ 26.535709][ T360] process 'syz.1.21' launched './file2' with NULL argv: empty string added [ 26.567766][ T360] loop1: detected capacity change from 0 to 512 [ 26.575513][ T364] tun0: tun_chr_ioctl cmd 2148553947 [ 26.606800][ T327] F2FS-fs (loop3): Start checkpoint disabled! [ 26.613933][ T360] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.21: bad orphan inode 17 [ 26.624279][ T360] ext4_test_bit(bit=16, block=4) = 1 [ 26.629841][ T360] is_bad_inode(inode)=0 [ 26.634797][ T360] NEXT_ORPHAN(inode)=0 [ 26.639141][ T360] max_ino=32 [ 26.642525][ T360] i_nlink=1 [ 26.642527][ T327] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 26.646122][ T360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.656313][ T327] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 26.731539][ T366] attempt to access beyond end of device [ 26.731539][ T366] loop3: rw=2049, want=40984, limit=40427 [ 26.899486][ T392] loop3: detected capacity change from 0 to 8192 [ 26.944161][ T335] loop3: p1 < > p2 p3 < > p4 < p5 > [ 26.949761][ T335] loop3: partition table partially beyond EOD, truncated [ 26.964700][ T335] loop3: p1 start 105709568 is beyond EOD, truncated [ 26.971554][ T335] loop3: p2 size 134217988 extends beyond EOD, truncated [ 26.981775][ T335] loop3: p5 size 134217988 extends beyond EOD, truncated [ 26.997552][ T392] loop3: p1 < > p2 p3 < > p4 < p5 > [ 27.003426][ T392] loop3: partition table partially beyond EOD, truncated [ 27.011007][ T392] loop3: p1 start 105709568 is beyond EOD, truncated [ 27.018200][ T392] loop3: p2 size 134217988 extends beyond EOD, truncated [ 27.027587][ T392] loop3: p5 size 134217988 extends beyond EOD, truncated [ 27.146170][ T335] udevd[335]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 27.165692][ T398] udevd[398]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 27.174286][ T397] udevd[397]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 27.185673][ T399] udevd[399]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 27.218238][ T399] udevd[399]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 27.218709][ T335] udevd[335]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 27.231299][ T397] udevd[397]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 27.244121][ T398] udevd[398]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 27.273108][ T405] loop3: detected capacity change from 0 to 512 [ 27.304051][ T405] EXT4-fs (loop3): Ignoring removed nobh option [ 27.326689][ T405] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 27.334676][ T405] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 27.343002][ T405] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #13: comm syz.3.38: inode has both inline data and extents flags [ 27.356686][ T405] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.38: couldn't read orphan inode 13 (err -117) [ 27.368907][ T405] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 27.390186][ T416] capability: warning: `syz.1.42' uses deprecated v2 capabilities in a way that may be insecure [ 27.417834][ T419] loop1: detected capacity change from 0 to 512 [ 27.454268][ T419] EXT4-fs (loop1): Test dummy encryption mode enabled [ 27.461760][ T419] EXT4-fs (loop1): Ignoring removed oldalloc option [ 27.488533][ T419] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 27.520965][ T419] EXT4-fs (loop1): Ignoring removed nobh option [ 27.527786][ T419] EXT4-fs (loop1): Test dummy encryption mode enabled [ 27.535324][ T419] EXT4-fs (loop1): Ignoring removed oldalloc option [ 27.542415][ T419] EXT4-fs (loop1): re-mounted. Opts: noinit_itable,nobh,barrier,sb=0x0000000000000001,jqfmt=vfsv0,usrjquota=..,test_dummy_encryption=v1,oldalloc,. Quota mode: writeback. [ 27.698569][ T455] loop0: detected capacity change from 0 to 2048 [ 27.773273][ T306] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.926683][ T474] loop0: detected capacity change from 0 to 128 [ 28.173550][ T306] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.184692][ T306] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.198056][ T306] usb 3-1: config 0 interface 0 has no altsetting 0 [ 28.205543][ T306] usb 3-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 28.214711][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 28.214724][ T30] audit: type=1400 audit(1791200868.127:193): avc: denied { mount } for pid=487 comm="syz.0.73" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 28.243135][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.251786][ T30] audit: type=1400 audit(1791200868.147:194): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 28.263815][ T490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 28.272472][ T306] usb 3-1: config 0 descriptor?? [ 28.438570][ T30] audit: type=1400 audit(1791200868.357:195): avc: denied { read } for pid=496 comm="syz.3.77" dev="nsfs" ino=4026532290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.476235][ T30] audit: type=1400 audit(1791200868.357:196): avc: denied { open } for pid=496 comm="syz.3.77" path="net:[4026532290]" dev="nsfs" ino=4026532290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.500237][ T30] audit: type=1400 audit(1791200868.357:197): avc: denied { ioctl } for pid=496 comm="syz.3.77" path="socket:[16783]" dev="sockfs" ino=16783 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.543356][ T30] audit: type=1400 audit(1791200868.457:198): avc: denied { block_suspend } for pid=502 comm="syz.4.80" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.703566][ T30] audit: type=1400 audit(1791200868.627:199): avc: denied { write } for pid=517 comm="syz.1.87" name="enable" dev="tracefs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 28.760431][ T520] loop1: detected capacity change from 0 to 1024 [ 28.775513][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 28.785972][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 28.809705][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 28.816841][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 28.818008][ T520] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.824282][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 28.844492][ T507] loop3: detected capacity change from 0 to 40427 [ 28.851256][ T520] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.852835][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 28.873384][ T30] audit: type=1400 audit(1791200868.797:200): avc: denied { read write } for pid=519 comm="syz.1.88" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.875988][ T520] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.88: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.897976][ T507] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 28.917123][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 28.918094][ T507] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 28.930725][ T30] audit: type=1400 audit(1791200868.797:201): avc: denied { open } for pid=519 comm="syz.1.88" path="/23/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.955271][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 28.962169][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 28.963456][ T520] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 28.981943][ T520] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.981943][ T520] [ 28.986356][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 28.991975][ T507] F2FS-fs (loop3): invalid crc value [ 29.003840][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 29.003866][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 29.003888][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 29.003907][ T306] sony 0003:12BA:0100.0001: unknown main item tag 0x0 [ 29.003928][ T306] sony 0003:12BA:0100.0001: unbalanced collection at end of report description [ 29.004264][ T306] sony 0003:12BA:0100.0001: parse failed [ 29.013537][ T527] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.88: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.029623][ T306] sony: probe of 0003:12BA:0100.0001 failed with error -22 [ 29.062931][ T507] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 29.075206][ T30] audit: type=1400 audit(1791200868.997:202): avc: denied { getopt } for pid=526 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.084218][ T527] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.88: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 29.125127][ T306] usb 3-1: USB disconnect, device number 2 [ 29.151448][ T527] EXT4-fs error (device loop1) in ext4_setattr:5676: Corrupt filesystem [ 29.168224][ T507] F2FS-fs (loop3): Start checkpoint disabled! [ 29.190071][ T507] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 29.197574][ T507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 29.296319][ T365] attempt to access beyond end of device [ 29.296319][ T365] loop3: rw=2049, want=45104, limit=40427 [ 29.429029][ T537] loop0: detected capacity change from 0 to 40427 [ 29.452012][ T537] F2FS-fs (loop0): invalid crc value [ 29.458832][ T537] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 29.492893][ T537] F2FS-fs (loop0): Start checkpoint disabled! [ 29.500052][ T537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 29.626033][ T39] lg-g15 0003:046D:0A07.0002: unknown main item tag 0x0 [ 29.633387][ T309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.643406][ T39] lg-g15 0003:046D:0A07.0002: unknown main item tag 0x0 [ 29.656919][ T39] lg-g15 0003:046D:0A07.0002: unknown main item tag 0x0 [ 29.666347][ T39] lg-g15 0003:046D:0A07.0002: unknown main item tag 0x0 [ 29.673824][ T39] lg-g15 0003:046D:0A07.0002: unknown main item tag 0x0 [ 29.681555][ T39] lg-g15 0003:046D:0A07.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 29.720504][ T561] fido_id[561]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 29.793163][ T574] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.829205][ T578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 29.838426][ T578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 29.847409][ T578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.113'. [ 29.848148][ T287] syz-executor (287) used greatest stack depth: 22056 bytes left [ 29.864187][ T578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.113'. [ 29.995488][ T595] ip_tables: iptables: counters copy to user failed while replacing table [ 30.023313][ T309] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 30.046386][ T600] ip_tables: iptables: counters copy to user failed while replacing table [ 30.055416][ T598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 30.061026][ T309] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.121262][ T596] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.132463][ T596] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.140130][ T596] device bridge_slave_0 entered promiscuous mode [ 30.153399][ T596] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.169534][ T596] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.176982][ T309] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.190066][ T596] device bridge_slave_1 entered promiscuous mode [ 30.199241][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.238561][ T623] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 30.248318][ T623] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 30.253333][ T309] usb 2-1: SerialNumber: syz [ 30.267960][ T623] EXT4-fs (loop2): 1 truncate cleaned up [ 30.275407][ T623] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 30.294163][ T545] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 30.338985][ T596] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.346319][ T596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.353649][ T596] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.360711][ T596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.403465][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.411517][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.419291][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.451470][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.464946][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.472061][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.480863][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.496929][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.504037][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.515449][ T545] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 30.529119][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.555085][ T10] device bridge_slave_1 left promiscuous mode [ 30.562368][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.577873][ T10] device bridge_slave_0 left promiscuous mode [ 30.591712][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.609568][ T10] device veth1_macvtap left promiscuous mode [ 30.622223][ T10] device veth0_vlan left promiscuous mode [ 30.836239][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.857931][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.875662][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.892921][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.906114][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.914612][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.922117][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.929778][ T596] device veth0_vlan entered promiscuous mode [ 30.943920][ T633] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24) [ 30.951790][ T633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 30.960078][ T633] F2FS-fs (loop4): Test dummy encryption mode enabled [ 30.968310][ T633] F2FS-fs (loop4): invalid crc value [ 30.974400][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.983029][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.984235][ T309] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 30.998134][ T596] device veth1_macvtap entered promiscuous mode [ 31.007043][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.015613][ T633] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.053119][ T633] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 31.065958][ T633] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 31.072638][ T633] F2FS-fs (loop4): Start checkpoint disabled! [ 31.082517][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.090861][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.099802][ T633] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 31.103342][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.107064][ T633] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 31.131285][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.191992][ T305] usb 2-1: USB disconnect, device number 2 [ 31.212740][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 31.284360][ T658] loop2: p2 < > p3 < > [ 31.591020][ T694] set_capacity_and_notify: 6 callbacks suppressed [ 31.591036][ T694] loop3: detected capacity change from 0 to 128 [ 31.676102][ T694] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 31.695206][ T694] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.708844][ T694] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.160: Block bitmap for bg 0 marked uninitialized [ 31.783225][ T306] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.844753][ T709] loop3: detected capacity change from 0 to 1024 [ 31.894801][ T709] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 31.904899][ T709] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.166: lblock 2 mapped to illegal pblock 2 (length 1) [ 31.927698][ T709] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.166: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.952837][ T709] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.166: Failed to acquire dquot type 0 [ 31.976259][ T709] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 31.993066][ T709] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.166: mark_inode_dirty error [ 32.014886][ T709] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 32.027326][ T709] EXT4-fs (loop3): 1 orphan inode deleted [ 32.035886][ T306] usb 3-1: Using ep0 maxpacket: 8 [ 32.043396][ T10] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.072933][ T709] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,resuid=0x0000000000000000,norecovery,nodiscard,nodioread_nolock,nomblk_io_submit,,errors=continue. Quota mode: none. [ 32.099071][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:1: Failed to release dquot type 0 [ 32.139305][ T10] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.173422][ T306] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 32.182521][ T306] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 32.191810][ T732] overlayfs: upper fs does not support tmpfile. [ 32.202271][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:1: Failed to release dquot type 0 [ 32.233312][ T306] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 32.252695][ T285] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 32.262976][ T306] usb 3-1: config 250 has no interface number 0 [ 32.271784][ T306] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 32.283667][ T285] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 32.293365][ T285] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 32.296839][ T735] loop4: detected capacity change from 0 to 512 [ 32.305601][ T306] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 32.369738][ T306] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 32.383251][ T306] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 32.417185][ T306] usb 3-1: config 250 interface 228 has no altsetting 0 [ 32.453393][ T741] tap0: tun_chr_ioctl cmd 1074812118 [ 32.553344][ T306] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 32.582732][ T306] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 32.629231][ T306] usb 3-1: Product: syz [ 32.653116][ T306] usb 3-1: SerialNumber: syz [ 32.661033][ T698] loop1: detected capacity change from 0 to 131072 [ 32.703802][ T306] hub 3-1:250.228: bad descriptor, ignoring hub [ 32.713330][ T306] hub: probe of 3-1:250.228 failed with error -5 [ 32.776717][ T698] F2FS-fs (loop1): invalid crc value [ 32.804171][ T773] zero sized request [ 32.812446][ T698] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.868398][ T767] loop4: detected capacity change from 0 to 40427 [ 32.878719][ T698] F2FS-fs (loop1): Inconsistent error blkaddr:5632, sit bitmap:0 [ 32.887297][ T698] CPU: 1 PID: 698 Comm: syz.1.162 Not tainted syzkaller #0 [ 32.894542][ T698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 32.904635][ T698] Call Trace: [ 32.907943][ T698] [ 32.910899][ T698] __dump_stack+0x21/0x30 [ 32.915264][ T698] dump_stack_lvl+0x110/0x170 [ 32.919969][ T698] ? show_regs_print_info+0x20/0x20 [ 32.925230][ T698] ? page_cache_prev_miss+0x290/0x290 [ 32.930653][ T698] dump_stack+0x15/0x20 [ 32.934862][ T698] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 32.940263][ T698] f2fs_get_read_data_page+0x43f/0x6e0 [ 32.945748][ T698] ? f2fs_get_block+0x140/0x140 [ 32.950646][ T698] f2fs_find_data_page+0x189/0x3c0 [ 32.951011][ T306] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 32.955780][ T698] ? __f2fs_find_entry+0x84b/0xd80 [ 32.955806][ T698] __f2fs_find_entry+0x6ce/0xd80 [ 32.955827][ T698] ? __d_lookup_rcu+0x63a/0x6a0 [ 32.955853][ T698] f2fs_lookup+0x1c1/0xab0 [ 32.986476][ T698] ? selinux_inode_permission+0x431/0x5f0 [ 32.991753][ T767] F2FS-fs (loop4): invalid crc value [ 32.992220][ T698] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 33.003588][ T698] ? d_hash_and_lookup+0x1f0/0x1f0 [ 33.008732][ T698] ? _raw_spin_trylock_bh+0x150/0x150 [ 33.014142][ T698] ? downgrade_write+0x440/0x440 [ 33.019107][ T698] __lookup_slow+0x2b8/0x410 [ 33.023728][ T698] ? lookup_one_len+0x2d0/0x2d0 [ 33.028604][ T698] ? down_read+0xab/0x100 [ 33.032960][ T698] ? lookup_one_common+0x30b/0x460 [ 33.038095][ T698] lookup_one_unlocked+0x184/0x2a0 [ 33.043237][ T698] ? stack_trace_save+0xf0/0xf0 [ 33.048117][ T698] ? lookup_one+0x2d0/0x2d0 [ 33.052648][ T698] lookup_positive_unlocked+0x2a/0xb0 [ 33.058047][ T698] dquot_quota_on_mount+0x5a/0xe0 [ 33.063097][ T698] f2fs_enable_quota_files+0x514/0x710 [ 33.068578][ T698] f2fs_recover_fsync_data+0x23b/0x8020 [ 33.074147][ T698] ? __kasan_slab_alloc+0xc9/0xe0 [ 33.079194][ T698] ? __kasan_slab_alloc+0xb7/0xe0 [ 33.084250][ T698] ? slab_post_alloc_hook+0x4f/0x2b0 [ 33.089582][ T698] ? kmem_cache_alloc+0xf7/0x260 [ 33.094546][ T698] ? __proc_create+0x376/0x8f0 [ 33.099344][ T698] ? proc_create_single_data+0xad/0x1c0 [ 33.104917][ T698] ? f2fs_register_sysfs+0x3bf/0x440 [ 33.110231][ T698] ? f2fs_fill_super+0x57aa/0x6dd0 [ 33.115370][ T698] ? mount_bdev+0x28d/0x3c0 [ 33.119922][ T698] ? f2fs_mount+0x34/0x40 [ 33.124274][ T698] ? legacy_get_tree+0xed/0x190 [ 33.129160][ T698] ? vfs_get_tree+0x89/0x260 [ 33.133776][ T698] ? do_new_mount+0x251/0xb40 [ 33.138473][ T698] ? path_mount+0x640/0xff0 [ 33.142999][ T698] ? __se_sys_mount+0x320/0x390 [ 33.147872][ T698] ? x64_sys_call+0x6bf/0x9a0 [ 33.152579][ T698] ? do_syscall_64+0x4c/0xa0 [ 33.157209][ T698] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.163331][ T698] ? __kasan_check_write+0x14/0x20 [ 33.168464][ T698] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 33.170996][ T767] F2FS-fs (loop4): Found nat_bits in checkpoint [ 33.173973][ T698] ? _raw_spin_lock+0xf0/0xf0 [ 33.173994][ T698] ? xas_find_marked+0xc6c/0xd70 [ 33.189865][ T698] ? f2fs_space_for_roll_forward+0x1d0/0x1d0 [ 33.195892][ T698] ? xas_nomem+0x6b/0x1d0 [ 33.200246][ T698] ? ida_alloc_range+0x809/0x840 [ 33.205205][ T698] ? __kasan_check_write+0x14/0x20 [ 33.210340][ T698] ? _raw_write_lock+0x94/0xf0 [ 33.215127][ T698] ? _raw_write_trylock+0x150/0x150 [ 33.220347][ T698] ? __proc_create+0x581/0x8f0 [ 33.225152][ T698] ? _raw_write_trylock+0x150/0x150 [ 33.230378][ T698] ? _raw_write_unlock+0x2b/0x60 [ 33.233454][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 33.233487][ T30] audit: type=1400 audit(1791200873.087:244): avc: denied { read write } for pid=673 comm="syz.2.145" name="lp0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 33.235338][ T698] ? f2fs_recover_orphan_inodes+0x13c/0xa80 [ 33.248851][ T30] audit: type=1400 audit(1791200873.087:245): avc: denied { open } for pid=673 comm="syz.2.145" path="/dev/usb/lp0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 33.264701][ T698] ? __kasan_check_read+0x11/0x20 [ 33.264731][ T698] ? bdev_read_only+0xc1/0x120 [ 33.264752][ T698] ? f2fs_hw_is_readonly+0x1bc/0x230 [ 33.264774][ T698] f2fs_fill_super+0x5d16/0x6dd0 [ 33.310801][ T767] F2FS-fs (loop4): Start checkpoint disabled! [ 33.314273][ T698] ? kill_f2fs_super+0x3d0/0x3d0 [ 33.314303][ T698] ? vscnprintf+0x80/0x80 [ 33.314322][ T698] ? mutex_unlock+0x8f/0x230 [ 33.314343][ T698] ? set_blocksize+0x1e9/0x360 [ 33.333650][ T60] usb 3-1: USB disconnect, device number 3 [ 33.334316][ T698] ? sb_set_blocksize+0xaa/0xf0 [ 33.346675][ T60] usblp0: removed [ 33.349742][ T698] ? kill_f2fs_super+0x3d0/0x3d0 [ 33.358328][ T698] mount_bdev+0x28d/0x3c0 [ 33.362695][ T698] ? kill_f2fs_super+0x3d0/0x3d0 [ 33.367671][ T698] f2fs_mount+0x34/0x40 [ 33.371902][ T698] legacy_get_tree+0xed/0x190 [ 33.376617][ T698] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 33.382805][ T698] vfs_get_tree+0x89/0x260 [ 33.387257][ T698] do_new_mount+0x251/0xb40 [ 33.391795][ T698] ? security_capable+0x87/0xb0 [ 33.396682][ T698] path_mount+0x640/0xff0 [ 33.401049][ T698] __se_sys_mount+0x320/0x390 [ 33.405655][ T30] audit: type=1400 audit(1791200873.327:246): avc: denied { setopt } for pid=782 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.405754][ T698] ? __x64_sys_mount+0xd0/0xd0 [ 33.429625][ T698] __x64_sys_mount+0xbf/0xd0 [ 33.434251][ T698] x64_sys_call+0x6bf/0x9a0 [ 33.438799][ T698] do_syscall_64+0x4c/0xa0 [ 33.441341][ T30] audit: type=1400 audit(1791200873.347:247): avc: denied { bind } for pid=782 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.443244][ T698] ? clear_bhb_loop+0x50/0xa0 [ 33.443269][ T698] ? clear_bhb_loop+0x50/0xa0 [ 33.443288][ T698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.477505][ T698] RIP: 0033:0x7f57bc67f40a [ 33.477607][ T767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 33.481939][ T698] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.509003][ T698] RSP: 002b:00007f57bb0d6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 33.517454][ T698] RAX: ffffffffffffffda RBX: 00007f57bb0d6ee0 RCX: 00007f57bc67f40a [ 33.525482][ T698] RDX: 0000200000000100 RSI: 0000200000000140 RDI: 00007f57bb0d6ea0 [ 33.533483][ T698] RBP: 0000200000000100 R08: 00007f57bb0d6ee0 R09: 0000000000800080 [ 33.541480][ T698] R10: 0000000000800080 R11: 0000000000000246 R12: 0000200000000140 [ 33.549468][ T698] R13: 00007f57bb0d6ea0 R14: 00000000000105fb R15: 0000200000000540 [ 33.557468][ T698] [ 33.573282][ T698] F2FS-fs (loop1): Cannot turn on quotas: -117 on 2 [ 33.579940][ T30] audit: type=1400 audit(1791200873.497:248): avc: denied { map } for pid=765 comm="syz.4.192" path="/49/file0/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.603200][ T30] audit: type=1400 audit(1791200873.497:249): avc: denied { execute } for pid=765 comm="syz.4.192" path="/49/file0/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.623629][ T698] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 33.663635][ T365] attempt to access beyond end of device [ 33.663635][ T365] loop4: rw=2049, want=40976, limit=40427 [ 33.759914][ T30] audit: type=1400 audit(1791200873.677:250): avc: denied { bind } for pid=805 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.782219][ T808] loop0: detected capacity change from 0 to 512 [ 33.819475][ T30] audit: type=1400 audit(1791200873.737:251): avc: denied { create } for pid=809 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.844268][ T808] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 33.863390][ T30] audit: type=1400 audit(1791200873.747:252): avc: denied { setopt } for pid=809 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.919303][ T30] audit: type=1400 audit(1791200873.747:253): avc: denied { write } for pid=809 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.935587][ T808] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 33.954636][ T821] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 33.983305][ T808] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.991009][ T825] loop2: detected capacity change from 0 to 256 [ 34.150163][ T770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=770 comm=kworker/0:4 [ 34.170490][ T845] loop2: detected capacity change from 0 to 256 [ 34.194311][ T850] loop4: detected capacity change from 0 to 256 [ 34.243420][ T850] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 34.339725][ T863] loop3: detected capacity change from 0 to 256 [ 34.389974][ T863] FAT-fs (loop3): Directory bread(block 64) failed [ 34.401657][ T863] FAT-fs (loop3): Directory bread(block 65) failed [ 34.408613][ T863] FAT-fs (loop3): Directory bread(block 66) failed [ 34.416571][ T863] FAT-fs (loop3): Directory bread(block 67) failed [ 34.423407][ T863] FAT-fs (loop3): Directory bread(block 68) failed [ 34.429987][ T863] FAT-fs (loop3): Directory bread(block 69) failed [ 34.436751][ T863] FAT-fs (loop3): Directory bread(block 70) failed [ 34.443460][ T863] FAT-fs (loop3): Directory bread(block 71) failed [ 34.452619][ T873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.237'. [ 34.461941][ T863] FAT-fs (loop3): Directory bread(block 72) failed [ 34.473016][ T863] FAT-fs (loop3): Directory bread(block 73) failed [ 34.514395][ T883] pimreg: tun_chr_ioctl cmd 1074025677 [ 34.524824][ T883] pimreg: linktype set to 774 [ 34.609960][ T902] Zero length message leads to an empty skb [ 34.828307][ T929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.263'. [ 34.843255][ T929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 34.864733][ T918] F2FS-fs (loop4): invalid crc value [ 34.895606][ T918] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.975213][ T942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.267'. [ 35.023293][ T918] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 35.076572][ T925] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 35.084577][ T925] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 35.134223][ T925] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.222174][ T961] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.271153][ T925] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 35.279974][ T961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c1a8, mo2=0002] [ 35.294442][ T925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.363059][ T961] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 35.414688][ T961] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.275: invalid indirect mapped block 2683928664 (level 1) [ 35.444038][ T961] EXT4-fs (loop1): Remounting filesystem read-only [ 35.450843][ T961] EXT4-fs (loop1): 1 truncate cleaned up [ 35.497196][ T961] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,debug,nodiscard,minixdf,usrjquota=.sb=0x00000000000000ba,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,errors=remount-ro,,. Quota mode: writeback. [ 35.554005][ T961] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.275: invalid indirect mapped block 480848489 (level 1) [ 35.571050][ T961] EXT4-fs (loop1): Remounting filesystem read-only [ 35.640348][ T990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=47 sclass=netlink_audit_socket pid=990 comm=syz.2.283 [ 35.670170][ T990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=990 comm=syz.2.283 [ 35.758183][ T999] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.290: inode #1: comm syz.2.290: iget: illegal inode # [ 35.774734][ T999] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.290: error while reading EA inode 1 err=-117 [ 35.787611][ T999] EXT4-fs (loop2): 1 orphan inode deleted [ 35.793528][ T999] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,inlinecrypt,,errors=continue. Quota mode: none. [ 36.067781][ T1040] SELinux: failed to load policy [ 36.083754][ T1037] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 36.108192][ T1037] FAT-fs (loop2): Filesystem has been set read-only [ 36.123515][ T1037] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 36.180326][ T1016] F2FS-fs (loop3): fault_injection options not supported [ 36.190653][ T1016] F2FS-fs (loop3): fault_type options not supported [ 36.212578][ T1016] F2FS-fs (loop3): invalid crc value [ 36.274668][ T1016] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.322269][ T1016] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 36.420643][ T1073] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.439509][ T1016] attempt to access beyond end of device [ 36.439509][ T1016] loop3: rw=2049, want=45104, limit=40427 [ 36.442082][ T1076] netlink: 44 bytes leftover after parsing attributes in process `syz.2.325'. [ 36.453376][ T1073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.460446][ T1076] netlink: 35 bytes leftover after parsing attributes in process `syz.2.325'. [ 36.484628][ T1016] syz.3.299 (1016) used greatest stack depth: 22048 bytes left [ 36.490954][ T1076] netlink: 'syz.2.325': attribute type 5 has an invalid length. [ 36.499969][ T1077] netlink: 'syz.1.324': attribute type 3 has an invalid length. [ 36.507766][ T1076] netlink: 'syz.2.325': attribute type 6 has an invalid length. [ 36.511330][ T1073] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.323: invalid indirect mapped block 32768 (level 2) [ 36.517463][ T1076] netlink: 35 bytes leftover after parsing attributes in process `syz.2.325'. [ 36.539755][ T1073] EXT4-fs (loop4): 1 orphan inode deleted [ 36.545545][ T1073] EXT4-fs (loop4): 1 truncate cleaned up [ 36.551293][ T1073] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.624565][ T285] attempt to access beyond end of device [ 36.624565][ T285] loop3: rw=2049, want=45112, limit=40427 [ 36.638876][ T1082] set_capacity_and_notify: 10 callbacks suppressed [ 36.638891][ T1082] loop2: detected capacity change from 0 to 256 [ 36.667069][ T1082] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 36.761320][ T1096] loop1: detected capacity change from 0 to 512 [ 36.854907][ T1096] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 36.870977][ T1096] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.896676][ T1096] overlayfs: invalid origin (0000007900f85392cfef1f117126cdffc351483f4d200beaf57afdb7fac176d5ab7560dfcaa7c7c0b9fc504434caf9fcd050e318fe9f31902f57aab5872f5796) [ 36.934089][ T1116] syz.4.342 (1116) used greatest stack depth: 21504 bytes left [ 36.975447][ T1124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 37.014347][ T1101] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input4 [ 37.115247][ T1155] loop1: detected capacity change from 0 to 256 [ 37.147056][ T1155] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 37.276841][ T1175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 37.467168][ T1205] netlink: 'syz.4.384': attribute type 3 has an invalid length. [ 37.475009][ T1205] netlink: 72 bytes leftover after parsing attributes in process `syz.4.384'. [ 37.487752][ T1207] loop0: detected capacity change from 0 to 256 [ 37.497488][ T1207] exfat: Unknown parameter '¶£K'ªëy'\Y`HS¼ä*ÂÆZV¹öbÓɆ–ŽY±ëü\C`†HÛ©÷ÛøýQA$Wh•P¨bù//ŸïúÍFȹs%&_̉ǡÁ-uÊl•&&VÖ£ÁB[/Aÿÿÿÿÿÿÿÿÿ¹è–ǹäG¯Ê¥Ò' [ 37.703319][ T770] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.736220][ T1233] loop2: detected capacity change from 0 to 512 [ 37.766805][ T1233] EXT4-fs (loop2): Test dummy encryption mode enabled [ 37.775669][ T1233] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.397: inode #1: comm syz.2.397: iget: illegal inode # [ 37.788862][ T1233] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.397: error while reading EA inode 1 err=-117 [ 37.802648][ T1233] EXT4-fs (loop2): 1 orphan inode deleted [ 37.803327][ T642] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 37.808759][ T1233] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000009,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 37.854308][ T1233] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #13: comm syz.2.397: corrupted inode contents [ 37.866448][ T1233] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #13: comm syz.2.397: mark_inode_dirty error [ 37.878123][ T1233] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.397: invalid indirect mapped block 234881024 (level 0) [ 37.892263][ T1233] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #13: comm syz.2.397: corrupted inode contents [ 37.904733][ T1233] EXT4-fs error (device loop2): ext4_truncate:4317: inode #13: comm syz.2.397: mark_inode_dirty error [ 37.916070][ T1233] EXT4-fs error (device loop2) in ext4_setattr:5676: Corrupt filesystem [ 37.924807][ T1240] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #13: comm syz.2.397: corrupted inode contents [ 37.936860][ T1240] EXT4-fs error (device loop2): __ext4_unlink:3343: inode #13: comm syz.2.397: mark_inode_dirty error [ 37.958372][ T289] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #13: comm syz-executor: corrupted inode contents [ 37.970713][ T289] EXT4-fs error (device loop2): ext4_evict_inode:285: inode #13: comm syz-executor: mark_inode_dirty error [ 37.982487][ T289] EXT4-fs warning (device loop2): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 38.033513][ T1250] loop1: detected capacity change from 0 to 512 [ 38.063287][ T642] usb 5-1: Using ep0 maxpacket: 16 [ 38.092687][ T1250] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.404: missing EA_INODE flag [ 38.104375][ T1250] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.404: error while reading EA inode 2 err=-117 [ 38.116667][ T1250] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.404: inode #3584: comm syz.1.404: iget: illegal inode # [ 38.129909][ T1250] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.404: error while reading EA inode 3584 err=-117 [ 38.142698][ T1250] EXT4-fs (loop1): 1 orphan inode deleted [ 38.148623][ T770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.159832][ T1250] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 38.172710][ T770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.183299][ T642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 38.193305][ T770] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 38.203554][ T770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.216466][ T770] usb 4-1: config 0 descriptor?? [ 38.224060][ T642] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 38.236733][ T642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.247040][ T642] usb 5-1: config 0 descriptor?? [ 38.264006][ T1212] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 38.292326][ T1270] 9p: Unknown access argument €` [ 38.395052][ T1289] device team_slave_0 entered promiscuous mode [ 38.401453][ T1287] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 38.402500][ T1288] device team_slave_0 left promiscuous mode [ 38.450309][ T1291] loop1: detected capacity change from 0 to 1024 [ 38.482746][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 38.482760][ T30] audit: type=1400 audit(1791200878.397:329): avc: denied { create } for pid=1298 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.502110][ T1291] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 38.524715][ T1298] ================================================================== [ 38.532831][ T1298] BUG: KASAN: use-after-free in mutex_lock+0x8e/0x1c0 [ 38.533356][ T30] audit: type=1400 audit(1791200878.447:330): avc: denied { connect } for pid=1298 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.539644][ T1298] Write of size 8 at addr ffff88810e0a3d50 by task syz.0.426/1298 [ 38.539662][ T1298] [ 38.539668][ T1298] CPU: 1 PID: 1298 Comm: syz.0.426 Not tainted syzkaller #0 [ 38.570527][ T30] audit: type=1400 audit(1791200878.447:331): avc: denied { ioctl } for pid=1298 comm="syz.0.426" path="socket:[20515]" dev="sockfs" ino=20515 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.576557][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.576571][ T1298] Call Trace: [ 38.576578][ T1298] [ 38.617433][ T1298] __dump_stack+0x21/0x30 [ 38.621825][ T1298] dump_stack_lvl+0x110/0x170 [ 38.626555][ T1298] ? show_regs_print_info+0x20/0x20 [ 38.631779][ T1298] ? load_image+0x3f0/0x3f0 [ 38.636321][ T1298] print_address_description+0x7f/0x2c0 [ 38.641903][ T1298] ? mutex_lock+0x8e/0x1c0 [ 38.646363][ T1298] kasan_report+0x10f/0x150 [ 38.650897][ T1298] ? mutex_lock+0x8e/0x1c0 [ 38.655349][ T1298] kasan_check_range+0x249/0x2a0 [ 38.660313][ T1298] __kasan_check_write+0x14/0x20 [ 38.665296][ T1298] mutex_lock+0x8e/0x1c0 [ 38.669603][ T1298] ? wait_for_completion_killable_timeout+0x10/0x10 [ 38.676216][ T1298] ? l2tp_session_put+0xaf/0x1a0 [ 38.681178][ T1298] ? l2tp_session_delete+0x3a9/0x4a0 [ 38.686481][ T1298] pppol2tp_release+0x178/0x2b0 [ 38.691359][ T1298] sock_close+0xb8/0x200 [ 38.695657][ T1298] ? sock_mmap+0xa0/0xa0 [ 38.699913][ T1298] __fput+0x22b/0x900 [ 38.703907][ T1298] ____fput+0x15/0x20 [ 38.707902][ T1298] task_work_run+0x127/0x190 [ 38.712504][ T1298] exit_to_user_mode_loop+0xd0/0xe0 [ 38.717716][ T1298] exit_to_user_mode_prepare+0x87/0xd0 [ 38.723202][ T1298] syscall_exit_to_user_mode+0x1a/0x30 [ 38.728672][ T1298] do_syscall_64+0x58/0xa0 [ 38.733113][ T1298] ? clear_bhb_loop+0x50/0xa0 [ 38.737803][ T1298] ? clear_bhb_loop+0x50/0xa0 [ 38.742487][ T1298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.748405][ T1298] RIP: 0033:0x7fab2161e199 [ 38.752829][ T1298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.772551][ T1298] RSP: 002b:00007ffced66bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.780977][ T1298] RAX: 0000000000000000 RBX: 00007ffced66bd60 RCX: 00007fab2161e199 [ 38.788968][ T1298] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.796950][ T1298] RBP: 000000000000963a R08: 0000000000000001 R09: 0000000000000000 [ 38.804936][ T1298] R10: 0000001b30920000 R11: 0000000000000246 R12: 00007ffced66bda0 [ 38.812918][ T1298] R13: 00007fab218a5fac R14: 0000000000009697 R15: 00007fab218a5fa0 [ 38.820920][ T1298] [ 38.823948][ T1298] [ 38.826278][ T1298] Allocated by task 1299: [ 38.830616][ T1298] __kasan_kmalloc+0xd4/0x100 [ 38.835313][ T1298] __kmalloc+0x13d/0x2c0 [ 38.839570][ T1298] l2tp_session_create+0x39/0xb60 [ 38.844611][ T1298] pppol2tp_connect+0xbf5/0x1640 [ 38.849559][ T1298] __sys_connect+0x3cb/0x450 [ 38.854163][ T1298] __x64_sys_connect+0x7a/0x90 [ 38.858961][ T1298] x64_sys_call+0x7c/0x9a0 [ 38.863389][ T1298] do_syscall_64+0x4c/0xa0 [ 38.867816][ T1298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.873717][ T1298] [ 38.876047][ T1298] Freed by task 1298: [ 38.880049][ T1298] kasan_set_track+0x4a/0x70 [ 38.884784][ T1298] kasan_set_free_info+0x23/0x40 [ 38.889735][ T1298] ____kasan_slab_free+0x125/0x160 [ 38.894875][ T1298] __kasan_slab_free+0x11/0x20 [ 38.899647][ T1298] slab_free_freelist_hook+0xc2/0x190 [ 38.905045][ T1298] kfree+0xc4/0x270 [ 38.908882][ T1298] l2tp_session_put+0xaf/0x1a0 [ 38.913745][ T1298] l2tp_session_delete+0x3a9/0x4a0 [ 38.918879][ T1298] pppol2tp_release+0x169/0x2b0 [ 38.923740][ T1298] sock_close+0xb8/0x200 [ 38.927989][ T1298] __fput+0x22b/0x900 [ 38.931977][ T1298] ____fput+0x15/0x20 [ 38.935963][ T1298] task_work_run+0x127/0x190 [ 38.940559][ T1298] exit_to_user_mode_loop+0xd0/0xe0 [ 38.945768][ T1298] exit_to_user_mode_prepare+0x87/0xd0 [ 38.951234][ T1298] syscall_exit_to_user_mode+0x1a/0x30 [ 38.956703][ T1298] do_syscall_64+0x58/0xa0 [ 38.961128][ T1298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.967035][ T1298] [ 38.969366][ T1298] The buggy address belongs to the object at ffff88810e0a3c00 [ 38.969366][ T1298] which belongs to the cache kmalloc-512 of size 512 [ 38.983430][ T1298] The buggy address is located 336 bytes inside of [ 38.983430][ T1298] 512-byte region [ffff88810e0a3c00, ffff88810e0a3e00) [ 38.996728][ T1298] The buggy address belongs to the page: [ 39.002373][ T1298] page:ffffea0004382800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e0a0 [ 39.012688][ T1298] head:ffffea0004382800 order:2 compound_mapcount:0 compound_pincount:0 [ 39.021031][ T1298] flags: 0x4000000000010200(slab|head|zone=1) [ 39.027134][ T1298] raw: 4000000000010200 ffffea0004382f00 0000000200000002 ffff888100042f00 [ 39.035742][ T1298] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 39.044606][ T1298] page dumped because: kasan: bad access detected [ 39.051062][ T1298] page_owner tracks the page as allocated [ 39.056789][ T1298] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 102, ts 5401982240, free_ts 0 [ 39.074866][ T1298] post_alloc_hook+0x192/0x1b0 [ 39.079655][ T1298] prep_new_page+0x1c/0x110 [ 39.084176][ T1298] get_page_from_freelist+0x2c3a/0x2cd0 [ 39.089738][ T1298] __alloc_pages+0x1a2/0x460 [ 39.094343][ T1298] new_slab+0xa0/0x4d0 [ 39.098443][ T1298] ___slab_alloc+0x3ac/0x840 [ 39.103051][ T1298] __slab_alloc+0x49/0x90 [ 39.107393][ T1298] __kmalloc_track_caller+0x169/0x2c0 [ 39.112785][ T1298] __alloc_skb+0x210/0x730 [ 39.117211][ T1298] alloc_uevent_skb+0x85/0x240 [ 39.121991][ T1298] kobject_uevent_net_broadcast+0x335/0x5a0 [ 39.127894][ T1298] kobject_uevent_env+0x52b/0x700 [ 39.132930][ T1298] kobject_synth_uevent+0x457/0x940 [ 39.138155][ T1298] uevent_store+0x4b/0x70 [ 39.142492][ T1298] drv_attr_store+0x79/0xa0 [ 39.147005][ T1298] sysfs_kf_write+0x129/0x150 [ 39.151704][ T1298] page_owner free stack trace missing [ 39.157075][ T1298] [ 39.159404][ T1298] Memory state around the buggy address: [ 39.165037][ T1298] ffff88810e0a3c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.173207][ T1298] ffff88810e0a3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.181281][ T1298] >ffff88810e0a3d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.189348][ T1298] ^ [ 39.196026][ T1298] ffff88810e0a3d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.204122][ T1298] ffff88810e0a3e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 39.212190][ T1298] ================================================================== [ 39.220251][ T1298] Disabling lock debugging due to kernel taint [ 39.234421][ T770] cp2112 0003:10C4:EA90.0003: unbalanced collection at end of report description [ 39.246499][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.251613][ T770] cp2112 0003:10C4:EA90.0003: parse failed [ 39.262367][ T30] audit: type=1400 audit(1791200879.177:332): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.266159][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.299775][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.307503][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.315185][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.315201][ T770] cp2112: probe of 0003:10C4:EA90.0003 failed with error -22 [ 39.326256][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.340124][ T30] audit: type=1400 audit(1791200879.177:333): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.362016][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.369639][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.377165][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.384880][ T30] audit: type=1400 audit(1791200879.177:334): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.406310][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.406732][ T30] audit: type=1400 audit(1791200879.177:335): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.414319][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.434952][ T30] audit: type=1400 audit(1791200879.177:336): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.442645][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.470164][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.478336][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.483076][ T60] usb 4-1: USB disconnect, device number 2 [ 39.486392][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.493905][ T30] audit: type=1400 audit(1791200879.177:337): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.500698][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.528624][ T30] audit: type=1400 audit(1791200879.177:338): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.533898][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.559371][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.566901][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.574696][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.582098][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.589520][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.596965][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.604395][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.612072][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.619547][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.626973][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.634430][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.641925][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.649554][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.656978][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.664415][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.671826][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.679283][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.686756][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.694190][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.701593][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.709033][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.717449][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.724900][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.732312][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.739724][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.747428][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.754857][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.762238][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.769658][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.777091][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.784551][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.791969][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.799398][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.806821][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.814278][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.821668][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.829111][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.836532][ T642] hid-generic 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 39.843940][ T642] hid-generic 0003:0C70:F00D.0004: unexpected long global item [ 39.851626][ T642] hid-generic: probe of 0003:0C70:F00D.0004 failed with error -22 [ 39.862165][ T642] usb 5-1: USB disconnect, device number 2