last executing test programs: 24.697016718s ago: executing program 1 (id=1000): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, r1) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={r2}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e2613c2b346dc3f0a7387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 24.524854111s ago: executing program 1 (id=1002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 24.477136995s ago: executing program 1 (id=1003): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000500)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000250, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="4e8fc38e71", 0x5}]) 24.317890987s ago: executing program 1 (id=1004): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4a9, &(0x7f0000000b40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = io_uring_setup(0x4ca6, &(0x7f0000000340)={0x0, 0x67dd, 0x10, 0x0, 0x193, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {0x7, 0x0, 0x9, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u={0x18, 0x8}, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 24.110581002s ago: executing program 1 (id=1005): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x546, &(0x7f0000000200)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000b40)={@desc={0x4100, 0x3f000000, @desc1}}) 23.958751004s ago: executing program 1 (id=1007): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000000), 0x1, 0x472, &(0x7f0000000c00)="$eJzs289vVEUcAPDve7sFBGUrIgqCVNGk8UdLCyoHE6PRxIMmJnrAY20LQRZqaE2ENFqNwaMh8W48mvgXePJk1JOJVzyaGBKixAT04pq3+17ZLrullS27YT+fZGFm3+zMfPvevJ2d2Q1gYI1k/yQRd0fExYioNLIrC4w0/rt2ZXH67yuL00nUam/+kdTLXb2yOF3LFa/bltc5mkaknyZ5IzHUXO382XMnp6rV2TN5fnzh1Hvj82fPPX3i1NTx2eOzpyePHDl8aOK5ZyefadPr3y6sN84svqt7Ppzbu/vVty+8Pn30wjs/fpP1d9e+xvEsjvXW2UGtlidGssD/bPxtWgs93qXG+sW/tetxJuVe94a1KkVEOR+cF6MSpbh+8irxyic97RywobJ79ubOh5dqwB0siY0rDfSz4o0++/xbPG7T1KMvXH6x8QEoi/ta/mgcKUealxnawPZHIuLo0j9fZo9oWYeotVk3AAC4Vd9l85+n2s3/0tjVVG57vjc0HBH3RsSOiLgvInZGxP0R9bIPRMSD62x/pCV/4/wzvfS/AlujbP73fL63tXL+V8z+YriU5+6pxz+UHDtRnT2Y/01GY2hzlp9oV3lRxcu/fN6p/eb5X/bI2i/mgnkll8qNBbotxTMzUwtT3ZqUXv44Yk+5XfzJ8k5AEhG7I2LP+qreXiROPPH13k6Fbh7/Krqwz1T7qqhkcSla4i8kq+9Pjm+J6uzB8eKquNFPP59/o1P7txR/F2Tnf+vK67+lROWvpHm/dn75wAvNpVZZQ47zv37W8TNlee3X/7Ls+t+UvFXf092UP/fB1MLCmYmITclr9fyK5yevv7bIF+Wz+EcPtB//O/LXZPE/FBHZRbwvIh6OiP35uXskIh6NiAOrxP/DS4+92+lYP5z/mbb3v+Xrf3jl+V9/onTy+287tb+2+9/hemo0f6Z+/7uJzt0pbqMtVzMAAADcwdL6d+OTdGw5naZjY43v8O+MrWl1bn7hyWNz75+eaXyHfjiG0mKlq9K0HjqRLOU1NvKT+VpxcfxQvm78Remuen5seq460+PYYdBt6zD+M7+Xet07YMP5vRYMrtbxn/aoH8Dt5/0fBpfxD4PL+IfB1W78f9SStxcAd6Japdc9AHrH/B8Gl/EPg8v4h4F0K7/r36hEeZVf70v0SyLSvuhG3yT2txlNaY/GV7kLo7vHNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu+S8AAP//W5/4VQ==") chdir(0x0) open(&(0x7f00000000c0)='./bus\x00', 0x24142, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x16103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) ftruncate(r0, 0x7fff) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}]) 6.613490037s ago: executing program 2 (id=1086): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10005) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 6.612412247s ago: executing program 4 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 6.496771025s ago: executing program 4 (id=1088): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f0000000280)={[{@nodioread_nolock}, {@noinit_itable}, {@usrquota}, {@nobh}, {@data_err_abort}, {@usrquota}, {@discard}, {@barrier_val={'barrier', 0x3d, 0xd960}}, {@nouser_xattr}]}, 0x84, 0x471, &(0x7f0000000bc0)="$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") move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 4.586381338s ago: executing program 0 (id=1089): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 4.584668748s ago: executing program 2 (id=1090): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x5, 0x0, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b7a8a5fc7b3627ca"}}, 0x48}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 4.577380098s ago: executing program 3 (id=1091): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fcntl$setstatus(r0, 0x4, 0x2800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) 4.572350329s ago: executing program 4 (id=1093): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.485499875s ago: executing program 3 (id=1094): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 4.483886806s ago: executing program 4 (id=1095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 4.42348815s ago: executing program 0 (id=1096): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 4.42277822s ago: executing program 2 (id=1097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632f77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 2.362664043s ago: executing program 0 (id=1098): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.361932544s ago: executing program 2 (id=1099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}, {0x0}], 0x2) 2.361318853s ago: executing program 3 (id=1100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) 2.356024694s ago: executing program 4 (id=1101): epoll_create(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r2, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r3) ioctl$FITRIM(r1, 0x5450, 0x0) 2.202290916s ago: executing program 2 (id=1102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) 2.191296937s ago: executing program 3 (id=1103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 2.163268749s ago: executing program 0 (id=1104): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffda3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x590, &(0x7f00000002c0)="4ce02b9d64e50d293ddb0ae4b8a0", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 106.029092ms ago: executing program 0 (id=1105): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ptype\x00') r1 = epoll_create(0x2) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000500)) write$binfmt_script(r3, 0x0, 0xb) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x60000011}) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 100.371223ms ago: executing program 2 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "860e0a31"}]}}, 0x0}, 0x0) 96.191163ms ago: executing program 3 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) 82.941194ms ago: executing program 4 (id=1108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="06bd"], 0xffdd) 13.134219ms ago: executing program 3 (id=1109): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="fb6bba8839fe8bc048c0cdafc9f8a9918bc4055eaaeb6db4ee9bcb25b14e1dbf40b3a7da5a8a04ed6dd26eea2e37229c339b1f91201c27968ef5963dde", 0x3d}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r2}, &(0x7f00000005c0), &(0x7f0000000880)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r0) 0s ago: executing program 0 (id=1110): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x545, &(0x7f0000000bc0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) kernel console output (not intermixed with test programs): Pv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.387413][ T30] audit: type=1326 audit(1725478949.589:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 104.410397][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.447048][ T2019] device veth1_macvtap entered promiscuous mode [ 104.511716][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.542473][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.573135][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.584267][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.676984][ T2091] loop2: detected capacity change from 0 to 512 [ 104.688450][ T2094] syz.3.642[2094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.688597][ T2094] syz.3.642[2094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.761299][ T2091] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.813793][ T2091] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.848897][ T2091] EXT4-fs (loop2): 1 truncate cleaned up [ 104.858442][ T2091] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 104.918369][ T30] audit: type=1400 audit(1725478950.419:531): avc: denied { sys_module } for pid=2090 comm="syz.2.614" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.961533][ T30] audit: type=1400 audit(1725478950.419:532): avc: denied { module_load } for pid=2090 comm="syz.2.614" path="/0/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 104.994811][ T2112] netlink: 68 bytes leftover after parsing attributes in process `syz.4.650'. [ 105.110029][ T2118] loop0: detected capacity change from 0 to 512 [ 105.120740][ T2120] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.127985][ T2120] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.129553][ T764] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 105.142932][ T407] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 105.143287][ T2120] bridge0: port 2(bridge_slave_1) entered listening state [ 105.166976][ T2120] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.174053][ T2120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.181740][ T2120] device bridge0 entered promiscuous mode [ 105.186290][ T2118] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.198821][ T2118] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 105.283218][ T2128] loop0: detected capacity change from 0 to 128 [ 105.333530][ T2128] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.344474][ T2128] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 105.419493][ T764] usb 2-1: Using ep0 maxpacket: 8 [ 105.502466][ T30] audit: type=1400 audit(1725478951.009:533): avc: denied { name_bind } for pid=2136 comm="syz.0.659" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 105.539496][ T764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.550447][ T407] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 105.560535][ T764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.570528][ T764] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 105.570822][ T2141] loop0: detected capacity change from 0 to 2048 [ 105.580397][ T764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.595545][ T764] usb 2-1: config 0 descriptor?? [ 105.643099][ T2141] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.719462][ T407] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 105.729639][ T407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.737527][ T407] usb 4-1: Product: syz [ 105.741653][ T407] usb 4-1: Manufacturer: syz [ 105.746691][ T407] usb 4-1: SerialNumber: syz [ 105.753322][ T407] usb 4-1: config 0 descriptor?? [ 105.769414][ T2108] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.779365][ T26] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 106.014296][ T407] usb 4-1: USB disconnect, device number 15 [ 106.082180][ T764] steelseries_srws1 0003:1038:1410.002A: unknown main item tag 0xd [ 106.099571][ T764] steelseries_srws1 0003:1038:1410.002A: item fetching failed at offset 6/7 [ 106.112431][ T764] steelseries_srws1 0003:1038:1410.002A: parse failed [ 106.119484][ T2141] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.134786][ T764] steelseries_srws1: probe of 0003:1038:1410.002A failed with error -22 [ 106.143258][ T26] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.157200][ T2141] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 106.170172][ T26] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 106.181358][ T26] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 106.189369][ T2141] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.189369][ T2141] [ 106.192590][ T26] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.209450][ T2141] EXT4-fs (loop0): Total free blocks count 0 [ 106.211521][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.226990][ T2141] EXT4-fs (loop0): Free/Dirty block details [ 106.233104][ T2141] EXT4-fs (loop0): free_blocks=2415919104 [ 106.238932][ T2141] EXT4-fs (loop0): dirty_blocks=8192 [ 106.244837][ T2139] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 106.251889][ T2141] EXT4-fs (loop0): Block reservation details [ 106.257747][ T2141] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 106.348068][ T2147] loop4: detected capacity change from 0 to 40427 [ 106.358673][ T320] usb 2-1: USB disconnect, device number 14 [ 106.390445][ T2147] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 106.400277][ T2147] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 106.412275][ T2147] F2FS-fs (loop4): invalid crc value [ 106.420990][ T2147] F2FS-fs (loop4): Found nat_bits in checkpoint [ 106.460394][ T45] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 106.473486][ T45] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.473486][ T45] [ 106.549817][ T2147] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 106.556825][ T2147] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 106.591367][ T30] audit: type=1400 audit(1725478952.099:534): avc: denied { relabelfrom } for pid=2152 comm="syz.3.666" name="" dev="pipefs" ino=27253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 106.646508][ T317] usb 3-1: USB disconnect, device number 14 [ 106.677458][ T2156] loop3: detected capacity change from 0 to 512 [ 106.710920][ T2156] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 106.710920][ T2156] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 106.710920][ T2156] [ 106.783341][ T2156] EXT4-fs (loop3): mounted filesystem without journal. Opts: noacl,resgid=0x0000000000000000,grpquota,abort,block_validity,,errors=continue. Quota mode: writeback. [ 106.800228][ T2156] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 107.240929][ T2184] device pim6reg1 entered promiscuous mode [ 107.313952][ T2186] loop2: detected capacity change from 0 to 512 [ 107.349501][ T317] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 107.349632][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 107.357743][ T20] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 107.367644][ T2186] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6929!=33349) [ 107.384389][ T2186] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 107.389374][ T320] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 107.392198][ T2186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0002] [ 107.407476][ T2186] System zones: 1-12 [ 107.412258][ T2186] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.418947][ T2186] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 107.429029][ T2186] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 107.439563][ T2186] EXT4-fs (loop2): 1 truncate cleaned up [ 107.445180][ T2186] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000000,quota,user_xattr,,errors=continue. Quota mode: writeback. [ 107.661552][ T2198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 107.729524][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.740846][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.750791][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.764971][ T26] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 107.770842][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.774058][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.785232][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.794722][ T26] usb 1-1: config 0 descriptor?? [ 107.803816][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.819173][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.829152][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.838949][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.848850][ T317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.861955][ T320] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.874941][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 107.884083][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.891915][ T317] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.901051][ T320] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 107.910832][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.919725][ T20] usb 2-1: config 0 descriptor?? [ 107.924671][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.934401][ T317] usb 4-1: config 0 descriptor?? [ 107.939839][ T320] usb 5-1: config 0 descriptor?? [ 108.019407][ T764] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 108.259388][ T764] usb 3-1: Using ep0 maxpacket: 32 [ 108.291144][ T26] prodikeys 0003:041E:2801.002B: unknown main item tag 0x0 [ 108.298268][ T26] prodikeys 0003:041E:2801.002B: unknown main item tag 0x0 [ 108.306298][ T26] prodikeys 0003:041E:2801.002B: unknown main item tag 0x0 [ 108.313677][ T26] prodikeys 0003:041E:2801.002B: unknown main item tag 0x0 [ 108.321690][ T26] prodikeys 0003:041E:2801.002B: unknown main item tag 0x0 [ 108.330132][ T26] prodikeys 0003:041E:2801.002B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 108.379464][ T764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 108.390910][ T764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 108.392713][ T20] logitech-hidpp-device 0003:046D:C086.002C: unknown main item tag 0x0 [ 108.403268][ T764] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 108.413343][ T317] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 108.426842][ T20] logitech-hidpp-device 0003:046D:C086.002C: unknown main item tag 0x0 [ 108.435715][ T317] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 108.436523][ T764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.443532][ T20] logitech-hidpp-device 0003:046D:C086.002C: item fetching failed at offset 2/5 [ 108.453632][ T764] usb 3-1: config 0 descriptor?? [ 108.462156][ T20] logitech-hidpp-device 0003:046D:C086.002C: hidpp_probe:parse failed [ 108.475689][ T320] betop 0003:11C2:2208.002E: item fetching failed at offset 4/5 [ 108.479505][ T2203] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 108.483518][ T317] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 108.509756][ T320] betop 0003:11C2:2208.002E: parse failed [ 108.515414][ T320] betop: probe of 0003:11C2:2208.002E failed with error -22 [ 108.520593][ T764] hub 3-1:0.0: USB hub found [ 108.522586][ T20] logitech-hidpp-device: probe of 0003:046D:C086.002C failed with error -22 [ 108.551939][ T26] usb 1-1: USB disconnect, device number 18 [ 108.650154][ T320] usb 2-1: USB disconnect, device number 15 [ 108.680717][ T20] usb 5-1: USB disconnect, device number 12 [ 108.690890][ T407] usb 4-1: USB disconnect, device number 16 [ 108.739581][ T764] hub 3-1:0.0: 2 ports detected [ 109.191596][ T2207] loop0: detected capacity change from 0 to 512 [ 109.223610][ T2210] loop4: detected capacity change from 0 to 512 [ 109.235491][ T2207] EXT4-fs error (device loop0): __ext4_iget:4892: inode #15: block 1803188595: comm syz.0.698: invalid block [ 109.248039][ T2207] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.698: couldn't read orphan inode 15 (err -117) [ 109.263116][ T2207] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,block_validity,max_dir_size_kb=0x0000000000000053,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 109.293046][ T2210] EXT4-fs (loop4): 1 orphan inode deleted [ 109.298745][ T2210] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.308289][ T2207] EXT4-fs error (device loop0): ext4_ind_map_blocks:604: inode #15: comm syz.0.698: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 109.309740][ T2210] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 109.327093][ T2207] attempt to access beyond end of device [ 109.327093][ T2207] loop0: rw=0, want=3606377192, limit=512 [ 109.375436][ T1995] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 109.450505][ T30] audit: type=1326 audit(1725478954.959:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2220 comm="syz.3.694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa37e846ef9 code=0x0 [ 109.479492][ T20] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 109.512582][ T764] usb 3-1: USB disconnect, device number 15 [ 109.695241][ T2230] syz.4.696[2230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.695470][ T2230] syz.4.696[2230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.708864][ T30] audit: type=1400 audit(1725478955.209:536): avc: denied { ioctl } for pid=2229 comm="syz.4.696" path="/dev/loop-control" dev="devtmpfs" ino=111 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.853090][ T30] audit: type=1400 audit(1725478955.359:537): avc: denied { mounton } for pid=2234 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 109.879507][ T20] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.890728][ T20] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 109.902245][ T20] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 109.917110][ T20] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.926731][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.959527][ T2208] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.005368][ T2234] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.012711][ T2234] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.020707][ T2234] device bridge_slave_0 entered promiscuous mode [ 110.028439][ T2234] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.035358][ T2234] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.043553][ T2234] device bridge_slave_1 entered promiscuous mode [ 110.089511][ T444] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 110.168176][ T30] audit: type=1400 audit(1725478955.669:538): avc: denied { append } for pid=2238 comm="syz.2.700" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.202121][ T10] device bridge_slave_1 left promiscuous mode [ 110.208222][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.217354][ T10] device bridge_slave_0 left promiscuous mode [ 110.223759][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.233538][ T10] device veth1_macvtap left promiscuous mode [ 110.237288][ T298] usb 2-1: USB disconnect, device number 16 [ 110.239634][ T10] device veth0_vlan left promiscuous mode [ 110.460890][ T444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.473547][ T444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.483416][ T444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.496380][ T444] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 110.505546][ T444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.519741][ T444] usb 5-1: config 0 descriptor?? [ 110.537502][ T2234] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.544473][ T2234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.551804][ T2234] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.559242][ T2234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.568614][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.577584][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.648225][ T30] audit: type=1400 audit(1725478956.149:539): avc: denied { mounton } for pid=2251 comm="syz.2.706" path="/proc/52/task" dev="proc" ino=26403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 110.655698][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.679880][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.714730][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.736006][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.744577][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.751597][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.760050][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.769131][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.777723][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.784673][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.826610][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.860005][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.878512][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.889249][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.924764][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.934044][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.954232][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.968093][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.977367][ T2266] loop3: detected capacity change from 0 to 128 [ 110.985572][ T2234] device veth0_vlan entered promiscuous mode [ 110.992710][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.010193][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.016861][ T2266] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.028221][ T2266] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 111.083781][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.094102][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.106834][ T2234] device veth1_macvtap entered promiscuous mode [ 111.122419][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.130549][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.138997][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.157099][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.171587][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.191533][ T444] prodikeys 0003:041E:2801.002F: unknown main item tag 0x0 [ 111.206446][ T444] prodikeys 0003:041E:2801.002F: unknown main item tag 0x0 [ 111.219578][ T444] prodikeys 0003:041E:2801.002F: unknown main item tag 0x0 [ 111.231572][ T444] prodikeys 0003:041E:2801.002F: unknown main item tag 0x0 [ 111.243464][ T2278] loop1: detected capacity change from 0 to 256 [ 111.251517][ T444] prodikeys 0003:041E:2801.002F: unknown main item tag 0x0 [ 111.261268][ T444] prodikeys 0003:041E:2801.002F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 111.341114][ T2282] syz.3.718[2282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.341298][ T2282] syz.3.718[2282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.363450][ T30] audit: type=1400 audit(1725478956.869:540): avc: denied { rename } for pid=2277 comm="syz.1.716" name="file1" dev="loop1" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.412734][ T2288] loop0: detected capacity change from 0 to 512 [ 111.420780][ T444] usb 5-1: USB disconnect, device number 13 [ 111.460996][ T2288] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 111.497709][ T2293] netlink: 'syz.3.722': attribute type 4 has an invalid length. [ 111.512805][ T2293] netlink: 'syz.3.722': attribute type 4 has an invalid length. [ 111.885693][ T2314] loop2: detected capacity change from 0 to 1024 [ 111.950555][ T2314] EXT4-fs (loop2): Ignoring removed orlov option [ 111.956946][ T2314] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 112.012517][ T2314] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 112.464803][ T2312] loop0: detected capacity change from 0 to 40427 [ 112.478801][ T2340] kvm: pic: non byte write [ 112.552001][ T2312] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 112.573266][ T2312] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 112.594685][ T2312] F2FS-fs (loop0): invalid crc value [ 112.625746][ T2312] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 112.712944][ T2312] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 112.727284][ T2312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.838576][ T2357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.746'. [ 112.879379][ T407] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 112.973450][ T2362] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 112.983281][ T2362] SELinux: security_context_str_to_sid(staff_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 113.042751][ T2337] loop4: detected capacity change from 0 to 40427 [ 113.070665][ T2337] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 113.078324][ T2337] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.089080][ T2337] F2FS-fs (loop4): invalid crc value [ 113.111516][ T2337] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.167534][ T2372] loop0: detected capacity change from 0 to 512 [ 113.199773][ T317] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 113.222050][ T2372] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 113.227075][ T2337] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.233133][ T2372] EXT4-fs (loop0): Unrecognized mount option "mask=^MAY_APPEND" or missing value [ 113.237124][ T2337] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.252350][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.270848][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.272579][ T2337] attempt to access beyond end of device [ 113.272579][ T2337] loop4: rw=2049, want=45112, limit=40427 [ 113.292720][ T30] audit: type=1400 audit(1725478958.799:541): avc: denied { read } for pid=2373 comm="syz.3.752" name="usbmon8" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.318335][ T407] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 113.327483][ T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.332113][ T30] audit: type=1400 audit(1725478958.819:542): avc: denied { open } for pid=2373 comm="syz.3.752" path="/dev/usbmon8" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.338950][ T407] usb 2-1: config 0 descriptor?? [ 113.367736][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 113.377952][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 113.479523][ T317] usb 3-1: Using ep0 maxpacket: 16 [ 113.573640][ T2372] APIC base relocation is unsupported by KVM [ 113.574092][ T2372] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3728620137 (477263377536 ns) > initial count (31325312 ns). Using initial count to start timer. [ 113.619585][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 113.628508][ T317] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 113.668582][ T317] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 113.698926][ T317] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 113.708715][ T317] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 113.728765][ T317] usb 3-1: config 1 interface 0 has no altsetting 0 [ 113.735387][ T317] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 113.754493][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.820350][ T317] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 113.882760][ T407] logitech-djreceiver 0003:046D:C71B.0030: item fetching failed at offset 6/7 [ 113.900981][ T407] logitech-djreceiver 0003:046D:C71B.0030: logi_dj_probe: parse failed [ 113.919888][ T407] logitech-djreceiver: probe of 0003:046D:C71B.0030 failed with error -22 [ 114.050081][ T317] scsi host1: usb-storage 3-1:1.0 [ 114.115661][ T2393] incfs: mount failed -22 [ 114.180098][ T298] usb 2-1: USB disconnect, device number 17 [ 114.237989][ T407] usb 3-1: USB disconnect, device number 16 [ 114.266837][ T2397] loop4: detected capacity change from 0 to 2048 [ 114.323218][ T2397] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.388496][ T2397] EXT4-fs warning (device loop4): verify_group_input:171: Bad blocks count 0 [ 114.507436][ T2407] device syzkaller0 entered promiscuous mode [ 114.731793][ T2416] netlink: 1328 bytes leftover after parsing attributes in process `syz.4.764'. [ 114.909890][ T2428] device pim6reg1 entered promiscuous mode [ 115.079458][ T299] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 115.249344][ T444] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 115.439492][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.459333][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.485206][ T299] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.499315][ T444] usb 3-1: Using ep0 maxpacket: 16 [ 115.518899][ T299] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 115.529117][ T299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.557761][ T299] usb 1-1: config 0 descriptor?? [ 115.629488][ T444] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.647878][ T444] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.667278][ T444] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 115.686657][ T444] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 115.706545][ T444] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 115.814041][ T444] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.829836][ T444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.849358][ T444] usb 3-1: SerialNumber: syz [ 115.889498][ T2431] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 115.910269][ T444] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 115.929510][ T444] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 116.071590][ T299] holtek_mouse 0003:04D9:A070.0031: item fetching failed at offset 1/5 [ 116.090833][ T299] holtek_mouse 0003:04D9:A070.0031: hid parse failed: -22 [ 116.097895][ T299] holtek_mouse: probe of 0003:04D9:A070.0031 failed with error -22 [ 116.136620][ T444] usb 3-1: USB disconnect, device number 17 [ 116.268550][ T299] usb 1-1: USB disconnect, device number 19 [ 116.313044][ T30] audit: type=1326 audit(1725478961.819:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 116.337858][ T30] audit: type=1326 audit(1725478961.839:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 116.364276][ T30] audit: type=1326 audit(1725478961.869:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 116.404832][ T30] audit: type=1326 audit(1725478961.869:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 116.428318][ T30] audit: type=1326 audit(1725478961.869:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 116.453095][ T30] audit: type=1326 audit(1725478961.869:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 116.479957][ T30] audit: type=1326 audit(1725478961.869:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 116.503807][ T30] audit: type=1326 audit(1725478961.869:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 116.528319][ T30] audit: type=1326 audit(1725478961.889:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 116.552903][ T30] audit: type=1326 audit(1725478961.889:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e24baef9 code=0x7ffc0000 [ 116.809331][ T298] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 116.873056][ T2474] device pim6reg1 entered promiscuous mode [ 116.941439][ T2452] loop1: detected capacity change from 0 to 131072 [ 116.961100][ T2452] F2FS-fs (loop1): Test dummy encryption mode enabled [ 116.989579][ T2452] F2FS-fs (loop1): invalid crc value [ 117.011439][ T2452] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.138443][ T2483] loop0: detected capacity change from 0 to 1024 [ 117.155675][ T2452] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.209451][ T298] usb 4-1: not running at top speed; connect to a high speed hub [ 117.230649][ T2483] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.787: casefold flag without casefold feature [ 117.236849][ T2470] loop2: detected capacity change from 0 to 40427 [ 117.250122][ T2483] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 117.262088][ T2483] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.289583][ T298] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1568, setting to 64 [ 117.301600][ T2470] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 117.309199][ T2470] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.319373][ T298] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x3 has invalid maxpacket 2064, setting to 64 [ 117.332842][ T298] usb 4-1: config 1 interface 0 has no altsetting 0 [ 117.346860][ T2470] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.431539][ T2491] syz.0.789[2491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.431702][ T2491] syz.0.789[2491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.473048][ T2470] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.491760][ T2470] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.499561][ T298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.508539][ T298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.539374][ T298] usb 4-1: Product: syz [ 117.543571][ T298] usb 4-1: Manufacturer: syz [ 117.547952][ T298] usb 4-1: SerialNumber: syz [ 117.579449][ T2464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.722777][ T2498] device sit0 entered promiscuous mode [ 117.731662][ T2019] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 117.731708][ T2019] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 117.742637][ T2498] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 117.749739][ T2019] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 117.757700][ T2019] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 117.759391][ T2498] netlink: 1 bytes leftover after parsing attributes in process `syz.0.792'. [ 117.779422][ T2019] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 117.782245][ T2019] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 117.799369][ T2019] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 117.899735][ T298] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 117.945719][ T298] usb 4-1: USB disconnect, device number 17 [ 118.366305][ T2496] loop4: detected capacity change from 0 to 40427 [ 118.420379][ T2496] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 118.428819][ T2509] device pim6reg1 entered promiscuous mode [ 118.442613][ T2496] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.472553][ T2496] F2FS-fs (loop4): invalid crc value [ 118.522358][ T2496] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.685764][ T2518] loop3: detected capacity change from 0 to 512 [ 118.769009][ T2496] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.778557][ T2496] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.781265][ T2518] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 120.109341][ T444] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 120.349426][ T444] usb 5-1: Using ep0 maxpacket: 32 [ 120.408157][ T2504] loop0: detected capacity change from 0 to 131072 [ 120.462899][ T2504] F2FS-fs (loop0): invalid crc value [ 120.489480][ T444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.501189][ T444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.511007][ T444] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 120.513263][ T2504] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 120.520205][ T444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.539812][ T444] usb 5-1: config 0 descriptor?? [ 120.635917][ T2504] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 120.879377][ T320] Bluetooth: hci0: command 0x1003 tx timeout [ 120.885355][ T1204] Bluetooth: hci0: sending frame failed (-49) [ 121.002696][ T444] uclogic 0003:28BD:0094.0032: item fetching failed at offset 5/7 [ 121.020042][ T444] uclogic 0003:28BD:0094.0032: parse failed [ 121.025904][ T444] uclogic: probe of 0003:28BD:0094.0032 failed with error -22 [ 121.221182][ T298] usb 5-1: USB disconnect, device number 14 [ 121.350121][ T2561] loop1: detected capacity change from 0 to 512 [ 121.390714][ T2561] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 121.455083][ T2569] loop0: detected capacity change from 0 to 2048 [ 121.485273][ T2569] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 121.492710][ T2569] EXT4-fs (loop0): Ignoring removed orlov option [ 121.514034][ T2569] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,discard,norecovery,abort,usrjquota=,mblk_io_submit,dioread_lock,orlov,bsddf,,errors=continue. Quota mode: none. [ 121.535974][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 121.536005][ T30] audit: type=1400 audit(1725478967.039:572): avc: denied { mount } for pid=2568 comm="syz.0.815" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 121.567972][ T2234] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 121.578588][ T30] audit: type=1400 audit(1725478967.049:573): avc: denied { remount } for pid=2568 comm="syz.0.815" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 121.596677][ T2234] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 121.627764][ T764] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 121.637259][ T2234] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 121.659968][ T2234] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 121.679217][ T2234] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 121.701419][ T2234] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 121.721177][ T2234] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 121.742174][ T2234] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 121.761802][ T2234] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 121.789609][ T2234] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 121.899437][ T764] usb 4-1: Using ep0 maxpacket: 8 [ 122.010903][ T30] audit: type=1400 audit(1725478967.519:574): avc: denied { mount } for pid=2587 comm="syz.1.824" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 122.033645][ T764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.044645][ T764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.060172][ T764] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 122.069097][ T764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.095456][ T764] usb 4-1: config 0 descriptor?? [ 122.099740][ T30] audit: type=1400 audit(1725478967.519:575): avc: denied { read } for pid=2587 comm="syz.1.824" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.159358][ T30] audit: type=1400 audit(1725478967.519:576): avc: denied { open } for pid=2587 comm="syz.1.824" path="/53/file0" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.203579][ T30] audit: type=1400 audit(1725478967.589:577): avc: denied { unmount } for pid=1728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 122.454304][ T2583] loop4: detected capacity change from 0 to 40427 [ 122.503256][ T2583] F2FS-fs (loop4): invalid crc value [ 122.534814][ T2583] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.559187][ T2592] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.567164][ T2592] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.585734][ T2592] device bridge_slave_0 entered promiscuous mode [ 122.599345][ T2592] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.606330][ T2592] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.614524][ T2592] device bridge_slave_1 entered promiscuous mode [ 122.650638][ T1061] device bridge_slave_1 left promiscuous mode [ 122.656741][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.680163][ T1061] device bridge_slave_0 left promiscuous mode [ 122.682135][ T764] hid-picolcd 0003:04D8:F002.0033: item fetching failed at offset 5/7 [ 122.688224][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.706392][ T1061] device veth1_macvtap left promiscuous mode [ 122.712726][ T1061] device veth0_vlan left promiscuous mode [ 122.726265][ T764] hid-picolcd 0003:04D8:F002.0033: device report parse failed [ 122.751559][ T764] hid-picolcd: probe of 0003:04D8:F002.0033 failed with error -22 [ 122.769539][ T2583] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 122.855535][ T1936] attempt to access beyond end of device [ 122.855535][ T1936] loop4: rw=2049, want=45112, limit=40427 [ 122.920379][ T2590] loop1: detected capacity change from 0 to 40427 [ 122.934784][ T764] usb 4-1: USB disconnect, device number 18 [ 122.960902][ T299] Bluetooth: hci0: command 0x1001 tx timeout [ 122.967774][ T1204] Bluetooth: hci0: sending frame failed (-49) [ 122.977131][ T2590] F2FS-fs (loop1): invalid crc value [ 122.988247][ T2590] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.068877][ T2590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 123.153248][ T2590] attempt to access beyond end of device [ 123.153248][ T2590] loop1: rw=524288, want=45072, limit=40427 [ 123.165565][ T2590] attempt to access beyond end of device [ 123.165565][ T2590] loop1: rw=0, want=45072, limit=40427 [ 123.209926][ T1728] attempt to access beyond end of device [ 123.209926][ T1728] loop1: rw=0, want=45072, limit=40427 [ 123.334367][ T351] attempt to access beyond end of device [ 123.334367][ T351] loop1: rw=2049, want=41056, limit=40427 [ 123.387942][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.398766][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.419561][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.428959][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.439214][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.448274][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.470395][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.489977][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.498329][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.505341][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.521568][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.567966][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.576469][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.629569][ T764] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 123.645773][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.682818][ T2592] device veth0_vlan entered promiscuous mode [ 123.699930][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.710472][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.718504][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.756302][ T2612] loop3: detected capacity change from 0 to 512 [ 123.765399][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.777207][ T2592] device veth1_macvtap entered promiscuous mode [ 123.802372][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.817099][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.819912][ T2612] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.865322][ T2612] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff) [ 123.958309][ T30] audit: type=1326 audit(1725478969.459:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2611 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 123.999464][ T764] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 124.011989][ T764] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.025110][ T30] audit: type=1326 audit(1725478969.489:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2611 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 124.048714][ T30] audit: type=1326 audit(1725478969.489:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2611 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 124.079174][ T30] audit: type=1326 audit(1725478969.509:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2611 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 124.120333][ T764] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.138758][ T764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.147544][ T764] usb 5-1: SerialNumber: syz [ 124.169502][ T2608] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.213855][ T2624] loop3: detected capacity change from 0 to 512 [ 124.255191][ T2624] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 124.267914][ T2624] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff) [ 124.281171][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.288105][ T2619] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.307627][ T2619] device bridge_slave_0 entered promiscuous mode [ 124.317132][ T2619] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.324440][ T2619] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.332539][ T2619] device bridge_slave_1 entered promiscuous mode [ 124.396582][ T2608] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.415475][ T1061] device bridge_slave_1 left promiscuous mode [ 124.429576][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.438424][ T1061] device bridge_slave_0 left promiscuous mode [ 124.444886][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.455079][ T1061] device veth1_macvtap left promiscuous mode [ 124.461202][ T1061] device veth0_vlan left promiscuous mode [ 124.762967][ T2619] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.770025][ T2619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.777268][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.784405][ T2619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.856148][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.869675][ T764] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 124.870936][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.893410][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.930080][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.938462][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.945384][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.962897][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.971341][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.978258][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.006074][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.020927][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.049737][ T299] Bluetooth: hci0: command 0x1009 tx timeout [ 125.050329][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.084030][ T407] usb 5-1: USB disconnect, device number 15 [ 125.097990][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.107323][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.114991][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.124414][ T2619] device veth0_vlan entered promiscuous mode [ 125.146204][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.155358][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.166882][ T2619] device veth1_macvtap entered promiscuous mode [ 125.185302][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.193717][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.203038][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.221511][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.230050][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.475825][ T2655] syz.3.846[2655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.476005][ T2655] syz.3.846[2655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.540609][ T299] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 125.929636][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.949386][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.969420][ T299] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.978370][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.009697][ T299] usb 2-1: config 0 descriptor?? [ 126.149400][ T320] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 126.154907][ T2664] loop4: detected capacity change from 0 to 40427 [ 126.200628][ T2664] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 126.208429][ T2664] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 126.222676][ T2664] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.329982][ T2664] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 126.337049][ T2664] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.419400][ T320] usb 4-1: Using ep0 maxpacket: 16 [ 126.467515][ T2664] overlayfs: invalid origin (0000) [ 126.481276][ T299] hid (null): bogus close delimiter [ 126.525361][ T1936] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 126.525409][ T1936] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 126.533642][ T1936] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 126.549389][ T1936] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 126.549483][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.556933][ T1936] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 126.557035][ T1936] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 126.557074][ T1936] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 126.574973][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.608617][ T320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.622023][ T320] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 126.631515][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.643010][ T320] usb 4-1: config 0 descriptor?? [ 126.699647][ T299] usb 2-1: string descriptor 0 read error: -22 [ 126.960138][ T299] uclogic 0003:256C:006D.0034: interface is invalid, ignoring [ 127.101512][ T320] koneplus 0003:1E7D:2E22.0035: unknown main item tag 0x0 [ 127.110091][ T320] koneplus 0003:1E7D:2E22.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 127.180061][ T444] usb 2-1: USB disconnect, device number 18 [ 127.309626][ T320] koneplus 0003:1E7D:2E22.0035: couldn't init struct koneplus_device [ 127.317592][ T320] koneplus 0003:1E7D:2E22.0035: couldn't install mouse [ 127.324319][ T299] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 127.333575][ T320] koneplus: probe of 0003:1E7D:2E22.0035 failed with error -5 [ 127.518999][ T320] usb 4-1: USB disconnect, device number 19 [ 127.609618][ T299] usb 5-1: Using ep0 maxpacket: 8 [ 127.750242][ T299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.761546][ T299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.771751][ T299] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 127.781027][ T299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.790466][ T299] usb 5-1: config 0 descriptor?? [ 128.039479][ T407] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 128.291602][ T299] kone 0003:1E7D:2CED.0036: collection stack underflow [ 128.298569][ T299] kone 0003:1E7D:2CED.0036: item 0 1 0 12 parsing failed [ 128.306097][ T299] kone 0003:1E7D:2CED.0036: parse failed [ 128.311983][ T299] kone: probe of 0003:1E7D:2CED.0036 failed with error -22 [ 128.319392][ T444] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 128.399459][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.410261][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.419989][ T407] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.428919][ T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.438251][ T407] usb 2-1: config 0 descriptor?? [ 128.511445][ T299] usb 5-1: USB disconnect, device number 16 [ 128.569450][ T444] usb 1-1: Using ep0 maxpacket: 32 [ 128.689506][ T444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 128.700785][ T444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 128.712184][ T444] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.722299][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.739732][ T444] usb 1-1: config 0 descriptor?? [ 128.759445][ T2701] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 128.780482][ T444] hub 1-1:0.0: USB hub found [ 128.999734][ T444] hub 1-1:0.0: 2 ports detected [ 129.076485][ T2704] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.083457][ T2704] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.091580][ T2704] device bridge_slave_0 entered promiscuous mode [ 129.098814][ T2710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.866'. [ 129.120189][ T2704] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.127183][ T2704] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.135346][ T2704] device bridge_slave_1 entered promiscuous mode [ 129.298051][ T2714] netlink: 'syz.4.868': attribute type 4 has an invalid length. [ 129.339003][ T2714] netlink: 'syz.4.868': attribute type 4 has an invalid length. [ 129.388813][ T2704] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.395757][ T2704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.403016][ T2704] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.409933][ T2704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.469709][ T444] hub 1-1:0.0: set hub depth failed [ 129.487729][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.498452][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.511265][ T444] usb 1-1: USB disconnect, device number 20 [ 129.531340][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.539015][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.570586][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.579010][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.585941][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.593873][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.602614][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.609546][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.634877][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.643656][ T2726] tipc: Started in network mode [ 129.648405][ T2726] tipc: Node identity ac1414aa, cluster identity 4711 [ 129.655435][ T2726] tipc: New replicast peer: 100.1.1.1 [ 129.661162][ T2726] tipc: Enabled bearer , priority 10 [ 129.679657][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.701728][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.737970][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.739895][ T2728] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 129.748115][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.767638][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.777733][ T2704] device veth0_vlan entered promiscuous mode [ 129.807149][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.821408][ T2704] device veth1_macvtap entered promiscuous mode [ 129.843175][ T407] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0037/input/input26 [ 129.847780][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.854955][ T298] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 129.873907][ T407] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0037/input/input27 [ 129.887998][ T407] uclogic 0003:256C:006D.0037: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 129.895046][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.064121][ T20] usb 2-1: USB disconnect, device number 19 [ 130.190926][ T1061] device bridge_slave_1 left promiscuous mode [ 130.198138][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.214409][ T1061] device bridge_slave_0 left promiscuous mode [ 130.219639][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.227291][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.249357][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.261292][ T1061] device veth1_macvtap left promiscuous mode [ 130.269454][ T1061] device veth0_vlan left promiscuous mode [ 130.279342][ T298] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 130.298554][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.328167][ T298] usb 4-1: config 0 descriptor?? [ 130.675413][ T2732] loop4: detected capacity change from 0 to 40427 [ 130.723306][ T2732] F2FS-fs (loop4): invalid crc value [ 130.739652][ T407] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 130.747358][ T2732] F2FS-fs (loop4): Found nat_bits in checkpoint [ 130.779623][ T26] tipc: Node number set to 2886997162 [ 130.823251][ T298] hid-steam 0003:28DE:1142.0038: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 130.847090][ T2757] syz.1.886[2757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.847257][ T2757] syz.1.886[2757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.871035][ T298] hid-steam 0003:28DE:1142.0039: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 130.997154][ T2732] F2FS-fs (loop4): recover fsync data on readonly fs [ 131.003868][ T298] hid-steam 0003:28DE:1142.0038: Steam wireless receiver connected [ 131.013818][ T2732] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 131.023911][ T298] usb 4-1: USB disconnect, device number 20 [ 131.040992][ T298] hid-steam 0003:28DE:1142.0038: Steam wireless receiver disconnected [ 131.042645][ T2762] loop2: detected capacity change from 0 to 2048 [ 131.109488][ T407] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.133367][ T407] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.157816][ T2768] loop1: detected capacity change from 0 to 256 [ 131.165082][ T2762] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.185399][ T2762] tipc: Started in network mode [ 131.190305][ T2762] tipc: Node identity 0000000000000000ffffffffffffffff, cluster identity 4711 [ 131.219756][ T407] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.230065][ T407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.238455][ T407] usb 1-1: SerialNumber: syz [ 131.309963][ T2772] loop4: detected capacity change from 0 to 256 [ 131.345701][ T2772] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 131.410664][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 131.410700][ T30] audit: type=1400 audit(1725478976.909:583): avc: denied { watch } for pid=2771 comm="syz.4.893" path="/60/file2/bus" dev="loop4" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.476834][ T30] audit: type=1400 audit(1725478976.919:584): avc: denied { execute_no_trans } for pid=2771 comm="syz.4.893" path="/60/file2/file1" dev="loop4" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.503087][ T407] usb 1-1: 0:2 : does not exist [ 131.536056][ T2781] loop4: detected capacity change from 0 to 1024 [ 131.550711][ T2781] EXT4-fs (loop4): Ignoring removed nobh option [ 131.557365][ T2781] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.588528][ T2781] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,nodiscard,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 131.719590][ T2748] loop0: detected capacity change from 0 to 512 [ 131.751698][ T2748] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.882: corrupted in-inode xattr [ 131.764768][ T2748] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.882: couldn't read orphan inode 15 (err -117) [ 131.776827][ T2748] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,block_validity,,errors=continue. Quota mode: writeback. [ 131.809341][ T26] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 131.906135][ T2807] loop4: detected capacity change from 0 to 1024 [ 131.971087][ T2807] EXT4-fs (loop4): Ignoring removed orlov option [ 132.009210][ T2807] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,acl,,errors=continue. Quota mode: none. [ 132.110983][ T30] audit: type=1400 audit(1725478977.619:585): avc: denied { set_context_mgr } for pid=2817 comm="syz.2.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.139680][ T764] usb 1-1: USB disconnect, device number 21 [ 132.161722][ T2807] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:69: inode #12: comm syz.4.904: corrupt xattr in inline inode [ 132.189473][ T26] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 132.206911][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.231340][ T2807] EXT4-fs error (device loop4): ext4_check_all_de:656: inode #12: block 7: comm syz.4.904: bad entry in directory: directory entry overrun - offset=0, inode=1793120026, rec_len=34652, size=56 fake=0 [ 132.253690][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.267072][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 132.307338][ T26] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 132.322732][ T1936] EXT4-fs error (device loop4): ext4_lookup:1855: inode #11: comm syz-executor: iget: bad extra_isize 62855 (inode size 256) [ 132.336625][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.349907][ T1936] EXT4-fs error (device loop4): ext4_lookup:1855: inode #11: comm syz-executor: iget: bad extra_isize 62855 (inode size 256) [ 132.368601][ T26] usb 2-1: config 0 descriptor?? [ 132.585931][ T2824] loop2: detected capacity change from 0 to 1024 [ 132.651820][ T2824] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.666954][ T2824] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 132.771531][ T2829] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.851677][ T26] hid-rmi 0003:17EF:6085.003A: unknown main item tag 0x0 [ 132.869638][ T26] hid-rmi 0003:17EF:6085.003A: unknown main item tag 0x0 [ 132.876587][ T26] hid-rmi 0003:17EF:6085.003A: unknown main item tag 0x0 [ 132.900858][ T26] hid-rmi 0003:17EF:6085.003A: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.1-1/input0 [ 132.968324][ T30] audit: type=1326 audit(1725478978.469:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2839 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 133.005588][ T30] audit: type=1326 audit(1725478978.499:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2839 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 133.033764][ T30] audit: type=1326 audit(1725478978.499:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2839 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 133.038674][ T2844] loop3: detected capacity change from 0 to 512 [ 133.062245][ T30] audit: type=1326 audit(1725478978.499:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2839 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 133.097742][ T26] usb 2-1: USB disconnect, device number 20 [ 133.099693][ T30] audit: type=1326 audit(1725478978.499:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2839 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 133.127187][ T30] audit: type=1326 audit(1725478978.499:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2839 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 133.150562][ T30] audit: type=1326 audit(1725478978.499:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2839 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e846ef9 code=0x7ffc0000 [ 133.179440][ T2835] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.186650][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.194938][ T2835] device bridge_slave_0 entered promiscuous mode [ 133.196759][ T2844] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.205332][ T2835] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.218958][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.227658][ T2835] device bridge_slave_1 entered promiscuous mode [ 133.230345][ T2844] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff) [ 133.243924][ T764] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 133.466005][ T2859] loop3: detected capacity change from 0 to 1024 [ 133.489416][ T764] usb 3-1: Using ep0 maxpacket: 8 [ 133.523954][ T2859] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 133.545241][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.555266][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.561793][ T2859] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 133.572074][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.586306][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.595210][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.602243][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.609802][ T764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.629489][ T764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.655447][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.674150][ T764] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 133.685217][ T2868] loop1: detected capacity change from 0 to 512 [ 133.688734][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.701100][ T764] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 133.710706][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.717972][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.725577][ T764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.740161][ T764] usb 3-1: config 0 descriptor?? [ 133.749572][ T2868] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz.1.926: inode #0: comm syz.1.926: iget: illegal inode # [ 133.763074][ T2868] EXT4-fs (loop1): get orphan inode failed [ 133.769977][ T2868] EXT4-fs (loop1): mount failed [ 133.776798][ T2859] Disabled LAPIC found during irq injection [ 133.783130][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.791092][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.806461][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.815217][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.828776][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.858378][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.869046][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.887928][ T2835] device veth0_vlan entered promiscuous mode [ 133.912712][ T2835] device veth1_macvtap entered promiscuous mode [ 133.920724][ T2868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.926'. [ 133.931392][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.939640][ T2868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 133.940972][ T2877] loop3: detected capacity change from 0 to 512 [ 133.948507][ T2868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'. [ 133.955094][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.964441][ T2868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'. [ 133.982555][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.992347][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.001048][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.008827][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.026232][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.037354][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.053008][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.063612][ T2877] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.075214][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.080415][ T2877] ext4 filesystem being mounted at /87/bus supports timestamps until 2038 (0x7fffffff) [ 134.242058][ T764] apple 0003:05AC:0274.003B: unexpected long global item [ 134.252907][ T764] apple 0003:05AC:0274.003B: parse failed [ 134.266624][ T764] apple: probe of 0003:05AC:0274.003B failed with error -22 [ 134.278668][ T2899] syz.3.933[2899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.278827][ T2899] syz.3.933[2899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.348168][ T2902] loop3: detected capacity change from 0 to 2048 [ 134.412903][ T2902] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 134.423750][ T2902] EXT4-fs (loop3): Ignoring removed orlov option [ 134.451021][ T299] usb 3-1: USB disconnect, device number 18 [ 134.463683][ T2902] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,discard,norecovery,abort,usrjquota=,mblk_io_submit,dioread_lock,orlov,bsddf,,errors=continue. Quota mode: none. [ 134.545449][ T1791] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /89/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 134.599653][ T1791] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 134.634140][ T1791] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /89/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 134.706414][ T1791] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 134.750845][ T1791] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /89/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 134.751633][ T2910] input: syz0 as /devices/virtual/input/input28 [ 134.782192][ T1791] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 134.803254][ T1791] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /89/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 134.827736][ T1791] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 134.847215][ T1791] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /89/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 134.883847][ T1791] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 135.535427][ T2942] loop4: detected capacity change from 0 to 512 [ 135.543215][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 135.608229][ T2942] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.618648][ T2942] EXT4-fs (loop4): 1 orphan inode deleted [ 135.627704][ T2942] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.639517][ T10] device bridge_slave_1 left promiscuous mode [ 135.645836][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.654442][ T10] device bridge_slave_0 left promiscuous mode [ 135.661474][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.672905][ T10] device veth1_macvtap left promiscuous mode [ 135.678800][ T10] device veth0_vlan left promiscuous mode [ 135.722563][ T2953] loop4: detected capacity change from 0 to 512 [ 135.754973][ T2953] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.767264][ T2953] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 136.070072][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.077094][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.086787][ T2937] device bridge_slave_0 entered promiscuous mode [ 136.095011][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.101905][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.109812][ T2937] device bridge_slave_1 entered promiscuous mode [ 136.199511][ T2968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 136.445305][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 136.445341][ T30] audit: type=1400 audit(1725478981.949:606): avc: denied { mount } for pid=2975 comm="syz.2.963" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 136.550311][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.550405][ T2980] loop2: detected capacity change from 0 to 16 [ 136.558878][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.581698][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.590740][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.599239][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.606202][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.615085][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.623507][ T2980] erofs: (device loop2): mounted with root inode @ nid 36. [ 136.624165][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.641694][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.648035][ T30] audit: type=1400 audit(1725478982.149:607): avc: denied { write } for pid=2979 comm="syz.2.965" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.648620][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.689201][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.704552][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.706134][ T30] audit: type=1400 audit(1725478982.179:608): avc: denied { add_name } for pid=2979 comm="syz.2.965" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.741779][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.770956][ T30] audit: type=1400 audit(1725478982.179:609): avc: denied { create } for pid=2979 comm="syz.2.965" name="#30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.777845][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.821304][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.828946][ T30] audit: type=1400 audit(1725478982.179:610): avc: denied { associate } for pid=2979 comm="syz.2.965" name="#30" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.829547][ T764] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 136.859749][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.867729][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.878632][ T2937] device veth0_vlan entered promiscuous mode [ 136.897515][ T30] audit: type=1400 audit(1725478982.179:611): avc: denied { setattr } for pid=2979 comm="syz.2.965" name="#30" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.903073][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.932349][ T2937] device veth1_macvtap entered promiscuous mode [ 136.952055][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.959378][ T30] audit: type=1400 audit(1725478982.179:612): avc: denied { rename } for pid=2979 comm="syz.2.965" name="#30" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.990340][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.008376][ T30] audit: type=1400 audit(1725478982.179:613): avc: denied { reparent } for pid=2979 comm="syz.2.965" name="#30" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.084751][ T30] audit: type=1400 audit(1725478982.189:614): avc: denied { mounton } for pid=2979 comm="syz.2.965" path="/16/bus/file0/file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.141957][ T30] audit: type=1400 audit(1725478982.249:615): avc: denied { remove_name } for pid=2704 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.247414][ T2992] loop1: detected capacity change from 0 to 512 [ 137.259960][ T764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.278794][ T764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.298675][ T764] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 137.318743][ T764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.330572][ T2992] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 137.348920][ T764] usb 1-1: config 0 descriptor?? [ 137.366219][ T2992] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 137.379391][ T2992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1802c01c, mo2=0002] [ 137.400491][ T2992] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 137.429620][ T2992] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 137.438464][ T2992] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 137.490408][ T2992] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 137.578419][ T2982] loop2: detected capacity change from 0 to 40427 [ 137.585414][ T3001] loop4: detected capacity change from 0 to 2048 [ 137.622936][ T2982] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 137.630990][ T2982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.650387][ T2982] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.668875][ T3001] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.711283][ T3001] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.749916][ T3001] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 137.770539][ T3001] EXT4-fs (loop4): This should not happen!! Data will be lost [ 137.770539][ T3001] [ 137.781093][ T2982] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 137.788005][ T2982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.795745][ T3001] EXT4-fs (loop4): Total free blocks count 0 [ 137.802144][ T3001] EXT4-fs (loop4): Free/Dirty block details [ 137.808607][ T3001] EXT4-fs (loop4): free_blocks=2415919104 [ 137.814566][ T3001] EXT4-fs (loop4): dirty_blocks=32 [ 137.819763][ T3001] EXT4-fs (loop4): Block reservation details [ 137.825616][ T3001] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 137.861328][ T764] belkin 0003:1020:0006.003C: item fetching failed at offset 3/5 [ 137.874962][ T764] belkin 0003:1020:0006.003C: parse failed [ 137.888698][ T764] belkin: probe of 0003:1020:0006.003C failed with error -22 [ 137.902312][ T2982] attempt to access beyond end of device [ 137.902312][ T2982] loop2: rw=2049, want=45104, limit=40427 [ 138.096608][ T764] usb 1-1: USB disconnect, device number 22 [ 138.931813][ T3044] loop2: detected capacity change from 0 to 512 [ 138.993213][ T3046] loop7: detected capacity change from 0 to 16384 [ 139.001334][ T3044] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.985: bad orphan inode 15 [ 139.022957][ T3044] ext4_test_bit(bit=14, block=5) = 0 [ 139.035015][ T3044] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 139.131275][ T3044] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 139.219755][ T3049] loop_set_block_size: loop7 () has still dirty pages (nrpages=192) [ 139.529368][ T26] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 139.739605][ T3042] loop0: detected capacity change from 0 to 40427 [ 139.809445][ T3042] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 139.817092][ T3042] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 139.835116][ T3057] loop3: detected capacity change from 0 to 512 [ 139.843999][ T3042] F2FS-fs (loop0): invalid crc value [ 139.853923][ T3042] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.909770][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.929344][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.939077][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 139.956326][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.958950][ T3057] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.968914][ T26] usb 3-1: config 0 descriptor?? [ 139.982063][ T3057] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 139.993396][ T3042] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 140.000393][ T3042] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 140.073630][ T3057] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #2: comm syz.3.991: corrupted inode contents [ 140.099672][ T3057] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz.3.991: mark_inode_dirty error [ 140.115598][ T3057] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #2: comm syz.3.991: corrupted inode contents [ 140.129637][ T3057] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.991: mark_inode_dirty error [ 140.182158][ T3057] EXT4-fs error (device loop3): ext4_lookup:1852: inode #19: comm syz.3.991: 'file1' linked to parent dir [ 140.213073][ T2937] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 140.247314][ T2937] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 140.249451][ T316] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 140.270238][ T2937] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 140.318622][ T2937] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 140.340688][ T2937] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 140.462388][ T26] logitech-djreceiver 0003:046D:C71B.003D: item fetching failed at offset 6/7 [ 140.480206][ T26] logitech-djreceiver 0003:046D:C71B.003D: logi_dj_probe: parse failed [ 140.488362][ T26] logitech-djreceiver: probe of 0003:046D:C71B.003D failed with error -22 [ 140.616398][ T3081] loop0: detected capacity change from 0 to 16 [ 140.659509][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.680573][ T3081] erofs: (device loop0): mounted with root inode @ nid 36. [ 140.690094][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.709406][ T316] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 140.720795][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.730374][ T316] usb 5-1: config 0 descriptor?? [ 140.745371][ T26] usb 3-1: USB disconnect, device number 19 [ 140.981066][ T3090] loop1: detected capacity change from 0 to 512 [ 141.032839][ T3090] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1004: invalid indirect mapped block 256 (level 2) [ 141.065885][ T3090] EXT4-fs (loop1): 2 truncates cleaned up [ 141.079432][ T3090] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.221633][ T316] elo 0003:04E7:0030.003E: item fetching failed at offset 5/7 [ 141.245595][ T316] elo 0003:04E7:0030.003E: parse failed [ 141.259405][ T316] elo: probe of 0003:04E7:0030.003E failed with error -22 [ 141.308370][ T3094] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 141.351628][ T3094] tipc: Enabled bearer , priority 10 [ 141.722198][ T20] usb 5-1: USB disconnect, device number 17 [ 141.928174][ T10] device bridge_slave_1 left promiscuous mode [ 141.934452][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.967141][ T10] device bridge_slave_0 left promiscuous mode [ 141.979590][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.002109][ T10] device veth1_macvtap left promiscuous mode [ 142.008224][ T10] device veth0_vlan left promiscuous mode [ 142.469423][ T444] tipc: Node number set to 4294967295 [ 143.005460][ T3125] loop2: detected capacity change from 0 to 4096 [ 143.083721][ T3125] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.664039][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 143.664628][ T30] audit: type=1404 audit(1725478989.169:663): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 143.721902][ T30] audit: type=1400 audit(1725478989.169:665): avc: denied { name_bind } for pid=3138 comm="syz.4.1025" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 143.766878][ T30] audit: type=1400 audit(1725478989.169:664): avc: denied { mount } for pid=3139 comm="syz.2.1024" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=0 [ 143.789476][ T30] audit: type=1400 audit(1725478989.199:666): avc: denied { integrity } for pid=3137 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=0 [ 143.813141][ T30] audit: type=1404 audit(1725478989.209:667): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 143.827996][ T30] audit: type=1400 audit(1725478989.249:668): avc: denied { read write } for pid=2835 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.852815][ T30] audit: type=1400 audit(1725478989.249:669): avc: denied { open } for pid=2835 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.877482][ T30] audit: type=1400 audit(1725478989.249:670): avc: denied { ioctl } for pid=2835 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.903230][ T30] audit: type=1400 audit(1725478989.269:671): avc: denied { name_bind } for pid=3144 comm="syz.4.1026" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 144.134722][ T30] audit: type=1400 audit(1725478989.639:672): avc: denied { read } for pid=81 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 144.497088][ T3156] loop0: detected capacity change from 0 to 2048 [ 144.576400][ T3156] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.602216][ T3156] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.617676][ T3156] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 144.630067][ T3156] EXT4-fs (loop0): This should not happen!! Data will be lost [ 144.630067][ T3156] [ 144.639671][ T3156] EXT4-fs (loop0): Total free blocks count 0 [ 144.645582][ T3156] EXT4-fs (loop0): Free/Dirty block details [ 144.651366][ T3156] EXT4-fs (loop0): free_blocks=2415919104 [ 144.657199][ T3156] EXT4-fs (loop0): dirty_blocks=16 [ 144.662213][ T3156] EXT4-fs (loop0): Block reservation details [ 144.668042][ T3156] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 145.521926][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.528923][ T3177] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.536802][ T3177] device bridge_slave_0 entered promiscuous mode [ 145.550841][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.557843][ T3177] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.565757][ T3177] device bridge_slave_1 entered promiscuous mode [ 145.649400][ T299] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 145.668777][ T10] device bridge_slave_1 left promiscuous mode [ 145.674921][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.683279][ T10] device bridge_slave_0 left promiscuous mode [ 145.689477][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.698665][ T10] device veth1_macvtap left promiscuous mode [ 145.704761][ T10] device veth0_vlan left promiscuous mode [ 145.924336][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.931470][ T3177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.940015][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.947114][ T3177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.993259][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.002729][ T764] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.010649][ T764] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.029373][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.038008][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.046615][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.049476][ T299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.053540][ T764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.064536][ T299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.072010][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.081556][ T299] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.090177][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.102744][ T299] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 146.111295][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.119668][ T299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.126433][ T764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.137943][ T299] usb 3-1: config 0 descriptor?? [ 146.160458][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.168756][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.177079][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.186318][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.206577][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.215698][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.235710][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.245291][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.255883][ T3177] device veth0_vlan entered promiscuous mode [ 146.263290][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.271129][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.309754][ T3190] loop0: detected capacity change from 0 to 256 [ 146.326241][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.340228][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.362282][ T3177] device veth1_macvtap entered promiscuous mode [ 146.390312][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.390527][ T3190] FAT-fs (loop0): Directory bread(block 64) failed [ 146.398735][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.417403][ T3190] FAT-fs (loop0): Directory bread(block 65) failed [ 146.429596][ T3190] FAT-fs (loop0): Directory bread(block 66) failed [ 146.430924][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.436006][ T3190] FAT-fs (loop0): Directory bread(block 67) failed [ 146.475710][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.479437][ T3190] FAT-fs (loop0): Directory bread(block 68) failed [ 146.484807][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.508085][ T3190] FAT-fs (loop0): Directory bread(block 69) failed [ 146.517223][ T3190] FAT-fs (loop0): Directory bread(block 70) failed [ 146.524917][ T3190] FAT-fs (loop0): Directory bread(block 71) failed [ 146.531609][ T3190] FAT-fs (loop0): Directory bread(block 72) failed [ 146.538874][ T3190] FAT-fs (loop0): Directory bread(block 73) failed [ 146.631549][ T299] betop 0003:11C2:2208.003F: item fetching failed at offset 4/5 [ 146.641058][ T299] betop 0003:11C2:2208.003F: parse failed [ 146.646789][ T299] betop: probe of 0003:11C2:2208.003F failed with error -22 [ 146.785553][ T3189] loop4: detected capacity change from 0 to 40427 [ 146.830645][ T3189] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 146.838798][ T3189] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 146.849594][ T3189] F2FS-fs (loop4): invalid crc value [ 146.857809][ T3189] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 146.925042][ T3189] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 146.932508][ T3189] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.932990][ T407] usb 3-1: USB disconnect, device number 20 [ 146.963829][ T3189] attempt to access beyond end of device [ 146.963829][ T3189] loop4: rw=2049, want=45104, limit=40427 [ 146.991296][ T3189] attempt to access beyond end of device [ 146.991296][ T3189] loop4: rw=0, want=45104, limit=40427 [ 147.021935][ T2835] attempt to access beyond end of device [ 147.021935][ T2835] loop4: rw=2049, want=40968, limit=40427 [ 147.520720][ T3205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1046'. [ 147.553297][ T3205] Zero length message leads to an empty skb [ 147.696642][ T3210] loop4: detected capacity change from 0 to 256 [ 147.756024][ T3210] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 147.769874][ T3210] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 147.796723][ T3202] exFAT-fs (loop4): hint_cluster is invalid (17) [ 147.804021][ T3202] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 147.811980][ T3202] exFAT-fs (loop4): Filesystem has been set read-only [ 148.670884][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 148.670919][ T30] audit: type=1400 audit(1725478994.179:772): avc: denied { write } for pid=3217 comm="syz.4.1052" name="tcp6" dev="proc" ino=4026532444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 148.730659][ T30] audit: type=1404 audit(1725478994.209:773): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 148.746436][ T30] audit: type=1404 audit(1725478994.209:774): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 148.762711][ T30] audit: type=1400 audit(1725478994.209:775): avc: denied { read write } for pid=3177 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.804224][ T30] audit: type=1400 audit(1725478994.209:776): avc: denied { open } for pid=3177 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.879418][ T30] audit: type=1400 audit(1725478994.209:777): avc: denied { ioctl } for pid=3177 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.910687][ T30] audit: type=1400 audit(1725478994.269:778): avc: denied { prog_load } for pid=3221 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 148.930252][ T30] audit: type=1400 audit(1725478994.289:779): avc: denied { map_create } for pid=3221 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 148.949710][ T30] audit: type=1400 audit(1725478994.289:780): avc: denied { perfmon } for pid=3221 comm="syz.3.1053" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.970558][ T30] audit: type=1400 audit(1725478994.299:781): avc: denied { map_read map_write } for pid=3221 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 151.457764][ T3250] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3250 comm=syz.0.1062 [ 152.902044][ T3262] loop3: detected capacity change from 0 to 1024 [ 152.916894][ T3259] loop4: detected capacity change from 0 to 2048 [ 152.930209][ T3263] loop2: detected capacity change from 0 to 2048 [ 152.990388][ T3259] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.002615][ T3262] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 153.041967][ T3263] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.087936][ T3263] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 153.103460][ T3263] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 129 with error 28 [ 153.115741][ T3263] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.115741][ T3263] [ 153.125253][ T3263] EXT4-fs (loop2): Total free blocks count 0 [ 153.131421][ T3263] EXT4-fs (loop2): Free/Dirty block details [ 153.137423][ T3263] EXT4-fs (loop2): free_blocks=2415919104 [ 153.143266][ T3263] EXT4-fs (loop2): dirty_blocks=144 [ 153.148686][ T3263] EXT4-fs (loop2): Block reservation details [ 153.155320][ T3263] EXT4-fs (loop2): i_reserved_data_blocks=9 [ 154.523635][ T3281] loop4: detected capacity change from 0 to 512 [ 154.590108][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 154.590144][ T30] audit: type=1326 audit(1725479000.089:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3284 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987de97ef9 code=0x7ffc0000 [ 154.597017][ T3289] loop3: detected capacity change from 0 to 128 [ 154.632037][ T3287] loop0: detected capacity change from 0 to 512 [ 154.648504][ T3281] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.669829][ T3281] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 154.680324][ T30] audit: type=1326 audit(1725479000.129:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3284 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987de97ef9 code=0x7ffc0000 [ 154.704359][ T30] audit: type=1326 audit(1725479000.129:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3284 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f987de97ef9 code=0x7ffc0000 [ 154.730722][ T30] audit: type=1326 audit(1725479000.129:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3284 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987de97ef9 code=0x7ffc0000 [ 154.754877][ T30] audit: type=1326 audit(1725479000.129:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3284 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987de97ef9 code=0x7ffc0000 [ 154.778419][ T30] audit: type=1326 audit(1725479000.129:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3284 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f987de97ef9 code=0x7ffc0000 [ 154.802441][ T30] audit: type=1326 audit(1725479000.129:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3284 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987de97ef9 code=0x7ffc0000 [ 154.812629][ T3287] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 154.825936][ T30] audit: type=1326 audit(1725479000.129:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3284 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987de97ef9 code=0x7ffc0000 [ 154.843925][ T3287] ext4 filesystem being mounted at /58/bus supports timestamps until 2038 (0x7fffffff) [ 154.871707][ T3289] attempt to access beyond end of device [ 154.871707][ T3289] loop3: rw=0, want=241, limit=128 [ 154.886391][ T30] audit: type=1326 audit(1725479000.129:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3284 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f987de97ef9 code=0x7ffc0000 [ 154.924734][ T30] audit: type=1326 audit(1725479000.129:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3284 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987de97ef9 code=0x7ffc0000 [ 154.926660][ T1061] attempt to access beyond end of device [ 154.926660][ T1061] loop3: rw=1, want=1041, limit=128 [ 156.327532][ T3309] loop4: detected capacity change from 0 to 1024 [ 156.380660][ T3309] EXT4-fs (loop4): Ignoring removed bh option [ 156.386778][ T3309] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.412737][ T3309] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 156.469353][ T299] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 156.496381][ T3309] EXT4-fs error (device loop4): ext4_get_max_inline_size:116: inode #15: comm syz.4.1082: can't get inode location 15 [ 156.521427][ T2835] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 156.554117][ T2960] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 156.563954][ T2960] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #15: comm syz.4.958: mark_inode_dirty error [ 156.575900][ T2960] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 156.585590][ T2960] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz.4.958: mark_inode_dirty error [ 156.719363][ T299] usb 3-1: Using ep0 maxpacket: 16 [ 156.800418][ T3316] loop0: detected capacity change from 0 to 1024 [ 156.849694][ T299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.861528][ T3316] EXT4-fs (loop0): Ignoring removed orlov option [ 156.867905][ T3316] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 156.912830][ T3316] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 157.018514][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.025587][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.034010][ T3317] device bridge_slave_0 entered promiscuous mode [ 157.042701][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.049814][ T299] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 157.056068][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.058746][ T299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.067892][ T3317] device bridge_slave_1 entered promiscuous mode [ 157.074146][ T299] usb 3-1: Product: syz [ 157.084149][ T299] usb 3-1: Manufacturer: syz [ 157.088824][ T299] usb 3-1: SerialNumber: syz [ 157.097869][ T299] usb 3-1: config 0 descriptor?? [ 157.236850][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.243756][ T3317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.250977][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.257847][ T3317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.281079][ T351] device bridge_slave_1 left promiscuous mode [ 157.287189][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.295240][ T351] device bridge_slave_0 left promiscuous mode [ 157.301502][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.310933][ T351] device veth1_macvtap left promiscuous mode [ 157.316822][ T351] device veth0_vlan left promiscuous mode [ 157.490138][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.498154][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.506754][ T764] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.519095][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.528260][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.535176][ T444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.557069][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.564988][ T299] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 157.572554][ T299] usb 3-1: No valid video chain found. [ 157.579055][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.609622][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.624061][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.634460][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.642292][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.650217][ T3317] device veth0_vlan entered promiscuous mode [ 157.669077][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.677815][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.689407][ T3317] device veth1_macvtap entered promiscuous mode [ 157.705908][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.715121][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.723658][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.743421][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.752382][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.796935][ T299] usb 3-1: USB disconnect, device number 21 [ 158.689744][ T3330] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 158.798552][ T3335] loop3: detected capacity change from 0 to 2048 [ 158.836992][ T3338] loop4: detected capacity change from 0 to 512 [ 158.873753][ T3335] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.950425][ T3338] EXT4-fs (loop4): Ignoring removed nobh option [ 158.959600][ T3338] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 158.959600][ T3338] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 158.959600][ T3338] [ 158.996654][ T3338] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 159.020618][ T3338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=780e801c, mo2=0002] [ 159.028530][ T3338] System zones: 1-12 [ 159.036657][ T3338] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 159.038799][ T3335] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1087: bg 0: block 234: padding at end of block bitmap is not set [ 159.052589][ T3338] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 159.069221][ T3338] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noinit_itable,usrquota,nobh,data_err=abort,usrquota,discard,barrier=0x000000000000d960,nouser_xattr,,errors=continue. Quota mode: writeback. [ 159.099390][ T3335] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1148 with error 117 [ 159.120330][ T3335] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.120330][ T3335] [ 159.155625][ T3338] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 159.164313][ T3338] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 160.716932][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 160.716980][ T30] audit: type=1400 audit(1725479006.219:861): avc: denied { create } for pid=3351 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.779093][ T30] audit: type=1400 audit(1725479006.249:862): avc: denied { connect } for pid=3351 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.819054][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 160.847516][ T30] audit: type=1400 audit(1725479006.259:863): avc: denied { write } for pid=3351 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.885391][ T30] audit: type=1400 audit(1725479006.369:864): avc: denied { create } for pid=3355 comm="syz.3.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.912685][ T30] audit: type=1400 audit(1725479006.379:865): avc: denied { write } for pid=3355 comm="syz.3.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.932762][ T30] audit: type=1400 audit(1725479006.379:866): avc: denied { setopt } for pid=3355 comm="syz.3.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.956408][ T30] audit: type=1400 audit(1725479006.379:867): avc: denied { unlink } for pid=3361 comm="syz.0.1096" name="#37" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.939828][ T30] audit: type=1400 audit(1725479008.449:868): avc: denied { ioctl } for pid=3368 comm="syz.3.1100" path="socket:[34962]" dev="sockfs" ino=34962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.940291][ T3372] netem: change failed [ 163.117681][ T3378] loop2: detected capacity change from 0 to 2048 [ 163.213894][ T3378] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.229839][ T3378] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 163.244738][ T3378] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 163.257842][ T3378] EXT4-fs (loop2): This should not happen!! Data will be lost [ 163.257842][ T3378] [ 163.267355][ T3378] EXT4-fs (loop2): Total free blocks count 0 [ 163.273212][ T3378] EXT4-fs (loop2): Free/Dirty block details [ 163.278871][ T3378] EXT4-fs (loop2): free_blocks=2415919104 [ 163.284970][ T3378] EXT4-fs (loop2): dirty_blocks=16 [ 163.290024][ T3378] EXT4-fs (loop2): Block reservation details [ 163.295783][ T3378] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 163.303003][ T3387] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 163.315384][ T3387] EXT4-fs (loop2): This should not happen!! Data will be lost [ 163.315384][ T3387] [ 165.197440][ T30] audit: type=1400 audit(1725479010.699:869): avc: denied { block_suspend } for pid=3390 comm="syz.0.1105" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 1: Operation not permitted) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=1 req=1008 state=1 status=1 (errno 9: Bad file descriptor) [ 165.292489][ T30] audit: type=1400 audit(1725479010.799:870): avc: denied { read } for pid=3401 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.314345][ T3400] loop0: detected capacity change from 0 to 1024 [ 165.361539][ T3400] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.1110: casefold flag without casefold feature [ 165.374644][ T3400] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 165.386357][ T3400] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.459330][ T407] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 166.129405][ T407] usb 3-1: device not accepting address 22, error -71 [ 166.560551][ T10] device bridge_slave_1 left promiscuous mode [ 166.566589][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.574687][ T10] device bridge_slave_0 left promiscuous mode [ 166.581046][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.590703][ T10] device veth1_macvtap left promiscuous mode [ 166.596615][ T10] device veth0_vlan left promiscuous mode [ 167.125856][ T10] tipc: Disabling bearer [ 167.131219][ T10] tipc: Left network mode [ 167.921549][ T10] device bridge_slave_1 left promiscuous mode [ 167.927580][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.935675][ T10] device bridge_slave_0 left promiscuous mode [ 167.942024][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.951385][ T10] device bridge_slave_1 left promiscuous mode [ 167.957425][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.965766][ T10] device bridge_slave_0 left promiscuous mode [ 167.972342][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.982276][ T10] device bridge_slave_1 left promiscuous mode [ 167.988426][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.996892][ T10] device bridge_slave_0 left promiscuous mode [ 168.003290][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.013863][ T10] device veth1_macvtap left promiscuous mode [ 168.019985][ T10] device veth0_vlan left promiscuous mode [ 168.026258][ T10] device veth1_macvtap left promiscuous mode [ 168.032178][ T10] device veth0_vlan left promiscuous mode [ 168.038455][ T10] device veth1_macvtap left promiscuous mode [ 168.044528][ T10] device veth0_vlan left promiscuous mode