last executing test programs: 25.127437024s ago: executing program 1 (id=34): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{0x100000000, 0x405}, {0x54, 0x8}, 0x8, 0x4}) 25.059756764s ago: executing program 1 (id=35): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000880)={[{@delalloc}, {@nogrpid}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@oldalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x40}, {0x6, 0x0, 0x40}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaae130aeaaba3086dd606410a60008000000000000000000000000ffff64010102ff02000000000000000000000000000184"], 0x0) 24.629821972s ago: executing program 1 (id=43): capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 24.501446132s ago: executing program 1 (id=47): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0), 0x2e, 0x4d2, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) unlink(&(0x7f0000000100)='./file1\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x3, 0x0, 0x1a00) 24.07934233s ago: executing program 1 (id=52): unshare(0x20040600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002b31ea8bc64b9274104032a24180423c0c636d2bb545d9cdcd1760ddfbb0b139f551316b276b4f52229c45c95e52d806ec2c042c"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) 23.89596666s ago: executing program 1 (id=55): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x2) r3 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 23.860542919s ago: executing program 32 (id=55): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x2) r3 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 19.868138776s ago: executing program 4 (id=137): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/68, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000480)=""/83, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r1, 0x0) 19.763910256s ago: executing program 4 (id=138): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 18.805617333s ago: executing program 4 (id=148): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) sendfile(r0, r1, &(0x7f0000000100)=0x6, 0x100000000010001) 18.633759972s ago: executing program 4 (id=151): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1408e, &(0x7f0000000780)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") creat(&(0x7f0000000040)='./bus\x00', 0x100) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x177, &(0x7f0000000240)="$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") unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 18.22526537s ago: executing program 4 (id=159): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x6, 0x1}}, @union]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) 17.751934299s ago: executing program 4 (id=170): socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x6}, {{&(0x7f0000000780)=@un=@abs, 0x80, 0x0}, 0x6}], 0x2, 0x10000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 17.743250749s ago: executing program 33 (id=170): socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x6}, {{&(0x7f0000000780)=@un=@abs, 0x80, 0x0}, 0x6}], 0x2, 0x10000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 6.947980163s ago: executing program 3 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 5.90786427s ago: executing program 3 (id=326): timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000006c0)={{0x77359400}}, &(0x7f0000000700)) 5.764042489s ago: executing program 3 (id=329): mount(&(0x7f00000000c0)=@nullb, 0x0, 0x0, 0x8090, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 5.757601269s ago: executing program 3 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x0) 5.614572459s ago: executing program 3 (id=337): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x82, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1, 0xfffffffe}, 0x1c}}, 0x0) 5.475986868s ago: executing program 3 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r3, 0x2000000, 0x2, 0xf, 0x0, 0x0) 4.437940735s ago: executing program 34 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r3, 0x2000000, 0x2, 0xf, 0x0, 0x0) 3.275669711s ago: executing program 0 (id=355): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@loopback, @dev}, &(0x7f0000000280)=0xc) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 2.487920558s ago: executing program 5 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 2.380414198s ago: executing program 0 (id=359): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 2.185535277s ago: executing program 7 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.802279676s ago: executing program 6 (id=364): dup(0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket(0x1e, 0x1, 0x0) 1.723975105s ago: executing program 0 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="bc", 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 1.636915155s ago: executing program 0 (id=366): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x4040600) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000, 0x2}, 0x20) 1.585449255s ago: executing program 5 (id=367): setfsuid(0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) 1.515980845s ago: executing program 0 (id=368): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 1.493705485s ago: executing program 0 (id=369): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) fadvise64(r2, 0xe0ffff, 0x4101, 0x3) openat(0xffffffffffffff9c, 0x0, 0x2c040, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x3, 0x100, 0xe}) 1.168100983s ago: executing program 7 (id=371): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lseek(0xffffffffffffffff, 0x0, 0x0) 1.167817304s ago: executing program 6 (id=373): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 1.167703564s ago: executing program 7 (id=374): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x0, 0xffffff8f}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c) 1.154603174s ago: executing program 7 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x1c, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x83}}, 0x1c}}, 0x0) 1.154361464s ago: executing program 6 (id=376): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.084221253s ago: executing program 7 (id=377): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 1.015927513s ago: executing program 7 (id=378): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000200)={0x20, 0x3, 0x1, "c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000240)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 919.920173ms ago: executing program 2 (id=383): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3501}) ioctl$TUNSETNOCSUM(r0, 0x8923, 0x20000000) 879.567213ms ago: executing program 2 (id=384): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) write$cgroup_subtree(r0, 0x0, 0xffffffb1) 868.477913ms ago: executing program 2 (id=385): ioperm(0x6, 0x8, 0xb42c) clock_adjtime(0x3, &(0x7f00000003c0)={0x4, 0x48, 0x7fff, 0x3, 0x5, 0x1ff, 0x2, 0x7fff, 0x8, 0x0, 0x10, 0x3, 0x6, 0x81, 0x400, 0xfffffffffffffffc, 0xf, 0x7c22f3a, 0xffff, 0xffffffffffff5304, 0xa, 0x0, 0xd35c, 0x3, 0x0, 0x8}) 811.824252ms ago: executing program 2 (id=386): r0 = getpid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 719.621372ms ago: executing program 2 (id=387): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 620.084712ms ago: executing program 2 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r5, &(0x7f00000004c0)=""/185, 0xb9) 223.985001ms ago: executing program 6 (id=389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 223.848961ms ago: executing program 6 (id=390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 218.593561ms ago: executing program 6 (id=391): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 125.40408ms ago: executing program 5 (id=392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006e00)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0xffed}, {0x5}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) 67.91516ms ago: executing program 5 (id=393): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) 67.73598ms ago: executing program 5 (id=394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 0s ago: executing program 5 (id=395): socketpair(0x23, 0x80009, 0x88, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}}}, 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 20.375963][ T30] audit: type=1400 audit(1738339047.500:66): avc: denied { integrity } for pid=279 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 20.399564][ T30] audit: type=1400 audit(1738339047.530:67): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.400877][ T279] cgroup: Unknown subsys name 'net' [ 20.422038][ T30] audit: type=1400 audit(1738339047.530:68): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.448931][ T30] audit: type=1400 audit(1738339047.560:69): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.449094][ T279] cgroup: Unknown subsys name 'devices' [ 20.647940][ T279] cgroup: Unknown subsys name 'hugetlb' [ 20.653350][ T279] cgroup: Unknown subsys name 'rlimit' [ 20.792945][ T30] audit: type=1400 audit(1738339047.920:70): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.815954][ T30] audit: type=1400 audit(1738339047.920:71): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.822083][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.840381][ T30] audit: type=1400 audit(1738339047.920:72): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.871790][ T30] audit: type=1400 audit(1738339047.980:73): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.897138][ T30] audit: type=1400 audit(1738339047.980:74): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.927641][ T30] audit: type=1400 audit(1738339048.060:75): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.953117][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.843881][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.851160][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.858451][ T290] device bridge_slave_0 entered promiscuous mode [ 21.865324][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.872215][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.879351][ T290] device bridge_slave_1 entered promiscuous mode [ 22.011428][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.018365][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.025411][ T291] device bridge_slave_0 entered promiscuous mode [ 22.032333][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.039199][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.046517][ T291] device bridge_slave_1 entered promiscuous mode [ 22.075671][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.082545][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.089734][ T293] device bridge_slave_0 entered promiscuous mode [ 22.108704][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.115627][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.122930][ T293] device bridge_slave_1 entered promiscuous mode [ 22.139119][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.146082][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.153176][ T292] device bridge_slave_0 entered promiscuous mode [ 22.168104][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.174938][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.182346][ T292] device bridge_slave_1 entered promiscuous mode [ 22.212205][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.219054][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.226173][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.232928][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.261955][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.268906][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.276297][ T294] device bridge_slave_0 entered promiscuous mode [ 22.282993][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.290012][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.297250][ T294] device bridge_slave_1 entered promiscuous mode [ 22.404158][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.411125][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.418221][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.424995][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.459310][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.466273][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.473357][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.480170][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.489433][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.496280][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.503343][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.510184][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.526982][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.534160][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.541741][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.549077][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.556113][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.563084][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.570203][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.577235][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.585980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.593358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.620466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.628514][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.635362][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.643267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.651233][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.658075][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.680290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.688076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.696457][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.703273][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.710727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.718214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.726213][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.733043][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.752023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.760144][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.766998][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.774149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.782528][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.789374][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.796939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.805717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.819538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.836776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.844524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.852410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.867002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.874821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.882632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.890726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.898687][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.905503][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.912719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.920953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.929019][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.935918][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.949684][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.956953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.970652][ T291] device veth0_vlan entered promiscuous mode [ 22.977771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.985998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.994070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.001903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.018716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.026135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.033317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.041639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.049747][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.056602][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.063857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.071954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.079878][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.086718][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.094047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.102230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.110375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.118086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.126096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.133604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.140987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.151009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.159048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.167435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.175589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.187012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.194891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.203611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.211829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.220301][ T293] device veth0_vlan entered promiscuous mode [ 23.228109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.243005][ T291] device veth1_macvtap entered promiscuous mode [ 23.252094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.260603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.268950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.279133][ T290] device veth0_vlan entered promiscuous mode [ 23.285261][ T293] device veth1_macvtap entered promiscuous mode [ 23.294370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.302439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.310136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.318037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.325286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.341629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.349783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.358032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.367056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.379725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.388519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.396830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.404796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.419319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.430596][ T290] device veth1_macvtap entered promiscuous mode [ 23.441085][ T294] device veth0_vlan entered promiscuous mode [ 23.448493][ T291] request_module fs-gadgetfs succeeded, but still no fs? [ 23.458328][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.469492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.477558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.484901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.493426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.501780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.509678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.517029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.543617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.567130][ T315] loop3: detected capacity change from 0 to 512 [ 23.574236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.586614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.597137][ T315] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 23.628289][ T292] device veth0_vlan entered promiscuous mode [ 23.634123][ T315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 23.635581][ T294] device veth1_macvtap entered promiscuous mode [ 23.655393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.663637][ T315] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.4: corrupted in-inode xattr [ 23.666238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.683562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.691718][ T315] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 23.703500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.711774][ T315] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,min_batch_time=0x0000000000007dc8,quota,,errors=continue. Quota mode: writeback. [ 23.740467][ T292] device veth1_macvtap entered promiscuous mode [ 23.756758][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.764329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.771975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.800785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.818956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.828922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.837606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.845976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.853996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.898884][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.920277][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.929400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.937566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.965491][ T328] loop0: detected capacity change from 0 to 512 [ 23.970986][ T331] loop1: detected capacity change from 0 to 512 [ 23.975619][ T333] loop4: detected capacity change from 0 to 512 [ 24.034320][ T333] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 24.043578][ T328] EXT4-fs (loop0): Mount option "journal_checksum" incompatible with ext3 [ 24.052119][ T335] loop2: detected capacity change from 0 to 512 [ 24.058584][ T333] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 24.058584][ T333] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 24.058584][ T333] [ 24.078278][ T331] EXT4-fs (loop1): 1 orphan inode deleted [ 24.083879][ T331] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 24.094852][ T331] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.107748][ T333] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,jqfmt=vfsv1,grpquota,user_xattr,noblock_validity,nouser_xattr,,errors=continue. Quota mode: writeback. [ 24.126815][ T333] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.139385][ T335] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.7: corrupted in-inode xattr [ 24.145913][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.158380][ T335] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.7: couldn't read orphan inode 15 (err -117) [ 24.170365][ T335] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000400000,dioread_lock,,errors=continue. Quota mode: writeback. [ 24.222505][ T347] loop0: detected capacity change from 0 to 512 [ 24.242225][ T349] loop1: detected capacity change from 0 to 512 [ 24.248663][ T347] ======================================================= [ 24.248663][ T347] WARNING: The mand mount option has been deprecated and [ 24.248663][ T347] and is ignored by this kernel. Remove the mand [ 24.248663][ T347] option from the mount to silence this warning. [ 24.248663][ T347] ======================================================= [ 24.292550][ T351] loop2: detected capacity change from 0 to 2048 [ 24.319365][ T349] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 24.339347][ T349] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 24.340517][ T347] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.9: Failed to acquire dquot type 0 [ 24.366754][ T351] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,journal_dev=0x000000000000009b,nobarrier,,errors=continue. Quota mode: none. [ 24.381847][ T362] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 24.393043][ T349] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 24.401759][ T347] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.9: bg 0: block 64: padding at end of block bitmap is not set [ 24.409629][ T362] syz.4.14 (362) used greatest stack depth: 21168 bytes left [ 24.416826][ T349] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 24.433019][ T347] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 24.438572][ T364] loop4: detected capacity change from 0 to 128 [ 24.441893][ T349] System zones: [ 24.448409][ T347] EXT4-fs (loop0): 1 truncate cleaned up [ 24.451814][ T349] 0-2, 18-18, 34-34 [ 24.459052][ T364] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 24.461733][ T347] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 24.482291][ T364] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 24.506623][ T349] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 24.515963][ T347] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.521545][ T349] EXT4-fs (loop1): 1 truncate cleaned up [ 24.548288][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.555967][ T349] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 24.566560][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 24.596275][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.609168][ T6] usb 4-1: config 0 descriptor?? [ 24.640012][ T372] loop0: detected capacity change from 0 to 2048 [ 24.680633][ T372] Alternate GPT is invalid, using primary GPT. [ 24.699158][ T372] loop0: p2 p3 p7 [ 24.703910][ T376] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.836965][ T384] loop1: detected capacity change from 0 to 256 [ 24.871854][ T387] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 24.947639][ T384] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 25.087172][ T6] logitech-hidpp-device 0003:046D:C262.0001: item fetching failed at offset 5/7 [ 25.104392][ T6] logitech-hidpp-device 0003:046D:C262.0001: hidpp_probe:parse failed [ 25.116047][ T6] logitech-hidpp-device: probe of 0003:046D:C262.0001 failed with error -22 [ 25.139252][ T354] udevd[354]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 25.151944][ T318] udevd[318]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 25.170019][ T345] udevd[345]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 25.209827][ T399] loop1: detected capacity change from 0 to 512 [ 25.220247][ T400] loop0: detected capacity change from 0 to 1024 [ 25.318504][ T6] usb 4-1: USB disconnect, device number 2 [ 25.344262][ T406] loop4: detected capacity change from 0 to 512 [ 25.351584][ T399] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.28: casefold flag without casefold feature [ 25.365891][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.384728][ T399] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.28: couldn't read orphan inode 15 (err -117) [ 25.397327][ T399] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.412742][ T400] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,abort,,errors=continue. Quota mode: none. [ 25.418848][ T406] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.30: casefold flag without casefold feature [ 25.438864][ T400] capability: warning: `syz.0.26' uses deprecated v2 capabilities in a way that may be insecure [ 25.455558][ T406] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.30: couldn't read orphan inode 15 (err -117) [ 25.470588][ T406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.503666][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 25.503682][ T30] audit: type=1400 audit(1738339052.630:151): avc: denied { create } for pid=405 comm="syz.4.30" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 25.505587][ T411] loop0: detected capacity change from 0 to 256 [ 25.511794][ T30] audit: type=1400 audit(1738339052.640:152): avc: denied { setattr } for pid=405 comm="syz.4.30" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 25.558368][ T30] audit: type=1400 audit(1738339052.660:153): avc: denied { ioctl } for pid=405 comm="syz.4.30" path="/11/file0/cpu.stat" dev="loop4" ino=20 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.585127][ T30] audit: type=1400 audit(1738339052.710:154): avc: denied { write } for pid=412 comm="syz.1.32" name="tcp6" dev="proc" ino=4026532526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 25.616041][ T30] audit: type=1400 audit(1738339052.740:155): avc: denied { read } for pid=415 comm="syz.1.34" name="ptp0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.616638][ T411] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 25.640302][ T30] audit: type=1400 audit(1738339052.740:156): avc: denied { open } for pid=415 comm="syz.1.34" path="/dev/ptp0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.691853][ T420] loop1: detected capacity change from 0 to 1024 [ 25.716927][ T30] audit: type=1400 audit(1738339052.740:157): avc: denied { ioctl } for pid=415 comm="syz.1.34" path="/dev/ptp0" dev="devtmpfs" ino=256 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.727374][ T411] attempt to access beyond end of device [ 25.727374][ T411] loop0: rw=0, want=34359738489, limit=256 [ 25.743250][ T30] audit: type=1400 audit(1738339052.830:158): avc: denied { setopt } for pid=421 comm="syz.4.36" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.778473][ T30] audit: type=1400 audit(1738339052.830:159): avc: denied { getopt } for pid=421 comm="syz.4.36" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.800235][ T30] audit: type=1400 audit(1738339052.830:160): avc: denied { ioctl } for pid=421 comm="syz.4.36" path="socket:[16023]" dev="sockfs" ino=16023 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.802307][ T428] loop4: detected capacity change from 0 to 512 [ 25.839242][ T420] EXT4-fs (loop1): Ignoring removed nobh option [ 25.844750][ T430] loop0: detected capacity change from 0 to 1024 [ 25.845427][ T420] EXT4-fs (loop1): Ignoring removed oldalloc option [ 25.858928][ T428] EXT4-fs (loop4): Ignoring removed orlov option [ 25.865399][ T428] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.868247][ T432] loop3: detected capacity change from 0 to 256 [ 25.883273][ T428] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.40: casefold flag without casefold feature [ 25.883525][ T39] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 25.896136][ T428] EXT4-fs (loop4): Remounting filesystem read-only [ 25.905389][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 25.910106][ T428] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.40: couldn't read orphan inode 15 (err -117) [ 25.928858][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 25.933180][ T428] EXT4-fs (loop4): Remounting filesystem read-only [ 25.943872][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.949905][ T428] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,. Quota mode: writeback. [ 25.963358][ T430] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.002114][ T432] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 26.006514][ T430] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 26.019680][ T432] FAT-fs (loop3): Filesystem has been set read-only [ 26.027377][ T420] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,nogrpid,nobarrier,dioread_lock,norecovery,max_dir_size_kb=0x0000000000000009,data_err=ignore,grpquota,nobh,delalloc,barrier=0x0000000000000002,oldalloc,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 26.051851][ T430] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,minixdf,stripe=0x0000000000000007,barrier=0x0000000000000081,inlinecrypt,mblk_io_submit,max_dir_size_kb=0x0000000000000002,norecovery,,errors=continue. Quota mode: writeback. [ 26.056965][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.104763][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.123992][ T39] usb 3-1: config 0 descriptor?? [ 26.145928][ T367] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.168728][ T443] loop1: detected capacity change from 0 to 128 [ 26.175677][ T446] loop4: detected capacity change from 0 to 512 [ 26.226367][ T448] loop3: detected capacity change from 0 to 8192 [ 26.234949][ T446] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,abort,errors=remount-ro,. Quota mode: writeback. [ 26.239096][ T452] loop0: detected capacity change from 0 to 512 [ 26.248439][ T446] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.286846][ T452] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 26.295371][ T454] loop1: detected capacity change from 0 to 512 [ 26.295556][ T452] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.46: invalid block [ 26.312962][ T452] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.46: invalid indirect mapped block 10 (level 1) [ 26.316753][ T448] process 'syz.3.44' launched './file1' with NULL argv: empty string added [ 26.326921][ T452] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.46: invalid indirect mapped block 8 (level 1) [ 26.347724][ T452] EXT4-fs (loop0): 1 truncate cleaned up [ 26.353216][ T452] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 26.388142][ T454] EXT4-fs (loop1): 1 orphan inode deleted [ 26.393708][ T454] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.404664][ T454] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.440730][ T460] loop0: detected capacity change from 0 to 512 [ 26.456437][ T454] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #16: block 42: comm syz.1.47: lblock 1 mapped to illegal pblock 42 (length 1) [ 26.470858][ T454] EXT4-fs error (device loop1): ext4_discard_preallocations:5123: comm syz.1.47: Error -117 loading buddy information for 523466497 [ 26.484610][ T454] EXT4-fs error (device loop1): ext4_ext_remove_space:2844: inode #16: comm syz.1.47: path[1].p_hdr == NULL [ 26.485499][ T460] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.497179][ T454] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm syz.1.47: Invalid inode table block 0 in block_group 0 [ 26.516774][ T460] EXT4-fs (loop0): orphan cleanup on readonly fs [ 26.522970][ T460] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.49: inline data xattr refers to an external xattr inode [ 26.525254][ T454] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 26.546107][ T460] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.49: couldn't read orphan inode 12 (err -117) [ 26.558885][ T454] EXT4-fs error (device loop1): ext4_punch_hole:4143: inode #16: comm syz.1.47: mark_inode_dirty error [ 26.575776][ T460] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,mb_optimize_scan=0x0000000000000000,nolazytime,grpid,inlinecrypt,usrjquota=,lazytime,errors=continue,test_dummy_encryption,data_err=abort,,errors=continue. Quota mode: none. [ 26.580462][ T468] loop3: detected capacity change from 0 to 512 [ 26.616857][ T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 26.622501][ T460] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.627202][ T39] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 26.642215][ T39] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 26.648821][ T294] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 26.670438][ T460] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 26.688519][ T444] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm syz.1.43: Invalid inode table block 0 in block_group 0 [ 26.701210][ T444] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 26.710766][ T444] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.43: mark_inode_dirty error [ 26.726239][ T468] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 26.736271][ T468] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 26.756136][ T468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 26.763983][ T468] System zones: 0-2, 18-18, 34-34 [ 26.771165][ T468] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 26.788504][ T294] syz-executor (294) used greatest stack depth: 20688 bytes left [ 26.805090][ T468] EXT4-fs (loop3): 1 truncate cleaned up [ 26.811524][ T468] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.874121][ T468] EXT4-fs (loop3): shut down requested (2) [ 26.907845][ T477] 9pnet: bogus RWRITE count (2 > 1) [ 26.936712][ T39] usb 3-1: USB disconnect, device number 2 [ 26.978471][ T480] loop3: detected capacity change from 0 to 2048 [ 27.006446][ T480] Alternate GPT is invalid, using primary GPT. [ 27.012526][ T480] loop3: p2 p3 p7 [ 27.033751][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.040647][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.058201][ T478] device bridge_slave_0 entered promiscuous mode [ 27.065263][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.072575][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.080075][ T478] device bridge_slave_1 entered promiscuous mode [ 27.104205][ T488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'. [ 27.151519][ T494] bridge_slave_0: default FDB implementation only supports local addresses [ 27.202200][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.209100][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.216194][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.222951][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.240638][ T502] xt_NFQUEUE: number of queues (65532) out of range (got 65786) [ 27.269391][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.280916][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.288680][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.307013][ T326] device bridge_slave_1 left promiscuous mode [ 27.313192][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.320933][ T326] device bridge_slave_0 left promiscuous mode [ 27.326872][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.334660][ T326] device veth1_macvtap left promiscuous mode [ 27.340661][ T326] device veth0_vlan left promiscuous mode [ 27.434704][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.446167][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.453044][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.461445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.469971][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.476838][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.484435][ T512] xt_CONNSECMARK: invalid mode: 0 [ 27.493615][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.503108][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.515723][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.537650][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.545731][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.554360][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.566623][ T478] device veth0_vlan entered promiscuous mode [ 27.579007][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.588622][ T478] device veth1_macvtap entered promiscuous mode [ 27.599144][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.612157][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.675071][ T521] loop5: detected capacity change from 0 to 512 [ 27.848032][ T521] EXT4-fs (loop5): 1 orphan inode deleted [ 27.853921][ T521] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 27.865473][ T521] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.941095][ T386] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.992317][ T530] loop4: detected capacity change from 0 to 256 [ 28.019136][ T532] loop0: detected capacity change from 0 to 512 [ 28.056363][ T530] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.066874][ T530] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 28.072707][ T534] loop5: detected capacity change from 0 to 1024 [ 28.077765][ T530] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 28.108676][ T532] EXT4-fs (loop0): 1 orphan inode deleted [ 28.114240][ T532] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.125090][ T532] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.146931][ T534] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 28.157164][ T534] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 28.166869][ T534] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.178990][ T540] loop4: detected capacity change from 0 to 256 [ 28.186178][ T386] usb 3-1: Using ep0 maxpacket: 32 [ 28.191434][ T534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 28.199688][ T534] System zones: 0-1, 3-36 [ 28.205797][ T540] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 28.218897][ T534] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 28.315966][ T386] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 28.320865][ T549] loop5: detected capacity change from 0 to 2048 [ 28.329016][ T386] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 28.343765][ T386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.359116][ T549] Alternate GPT is invalid, using primary GPT. [ 28.362122][ T386] usb 3-1: config 0 descriptor?? [ 28.365268][ T549] loop5: p2 p3 p7 [ 28.422990][ T551] 9pnet: bogus RWRITE count (2 > 1) [ 28.507213][ T325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.598325][ T558] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 28.649595][ T577] loop4: detected capacity change from 0 to 512 [ 28.682111][ T577] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 28.682703][ T580] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QhQI¸¥01777777777777777777777 [ 28.703917][ T577] EXT4-fs (loop4): 1 truncate cleaned up [ 28.709570][ T577] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,dioread_lock,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000040,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 28.732400][ T577] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.95: corrupted in-inode xattr [ 28.744320][ T577] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1751: inode #15: comm syz.4.95: unable to update i_inline_off [ 28.756712][ T577] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.770038][ T577] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.95: corrupted in-inode xattr [ 28.842946][ T593] loop5: detected capacity change from 0 to 1024 [ 28.856661][ T386] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 28.863768][ T386] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 28.871077][ T386] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 28.878252][ T325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.888198][ T386] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 28.895085][ T386] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 28.902252][ T325] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 28.912033][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.919637][ T593] EXT4-fs (loop5): Ignoring removed orlov option [ 28.919909][ T386] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 28.934092][ T386] logitech 0003:046D:C626.0003: hidraw0: USB HID v0.03 Device [HID 046d:c626] on usb-dummy_hcd.2-1/input0 [ 28.945492][ T325] usb 1-1: config 0 descriptor?? [ 28.952012][ T593] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,sb=0x0000000000000cbb,init_itable,debug_want_extra_isize=0x0000000000000040,nobarrier,,errors=continue. Quota mode: none. [ 28.976007][ T593] EXT4-fs error (device loop5): ext4_free_inode:355: comm syz.5.102: bit already cleared for inode 13 [ 28.989308][ T593] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 29.044818][ T597] loop5: detected capacity change from 0 to 256 [ 29.064877][ T386] usb 3-1: USB disconnect, device number 3 [ 29.109318][ T597] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 29.121263][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.131739][ T597] exFAT-fs (loop5): hint_cluster is invalid (17) [ 29.139954][ T597] exFAT-fs (loop5): error, broken FAT chain. [ 29.145786][ T597] exFAT-fs (loop5): Filesystem has been set read-only [ 29.153184][ T597] exFAT-fs (loop5): error, failed to bmap (inode : ffff8881284db040 iblock : 8, err : -5) [ 29.190431][ T39] usb 1-1: USB disconnect, device number 2 [ 29.213992][ T599] loop5: detected capacity change from 0 to 256 [ 29.236397][ T599] exfat: Deprecated parameter 'utf8' [ 29.241689][ T599] exfat: Deprecated parameter 'namecase' [ 29.247368][ T599] exfat: Deprecated parameter 'utf8' [ 29.268623][ T599] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 29.283166][ T599] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 29.365915][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 29.485971][ T20] usb 5-1: config 253 has an invalid interface number: 72 but max is 0 [ 29.494336][ T20] usb 5-1: config 253 has no interface number 0 [ 29.515776][ T20] usb 5-1: config 253 interface 72 altsetting 0 endpoint 0xF has invalid maxpacket 1104, setting to 64 [ 29.686001][ T20] usb 5-1: New USB device found, idVendor=15c2, idProduct=0037, bcdDevice=bd.d1 [ 29.697091][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.709401][ T637] loop0: detected capacity change from 0 to 1024 [ 29.715594][ T20] usb 5-1: Product: syz [ 29.719755][ T20] usb 5-1: Manufacturer: syz [ 29.724204][ T20] usb 5-1: SerialNumber: syz [ 29.753565][ T637] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.776223][ T20] hub 5-1:253.72: bad descriptor, ignoring hub [ 29.782409][ T20] hub: probe of 5-1:253.72 failed with error -5 [ 29.903978][ T645] loop0: detected capacity change from 0 to 256 [ 29.926765][ T645] exfat: Deprecated parameter 'namecase' [ 29.968561][ T645] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 30.053795][ T652] loop0: detected capacity change from 0 to 256 [ 30.105921][ T26] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.113395][ T39] usb 5-1: USB disconnect, device number 2 [ 30.128317][ T652] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 30.144253][ T652] exFAT-fs (loop0): hint_cluster is invalid (17) [ 30.152527][ T652] exFAT-fs (loop0): error, broken FAT chain. [ 30.158349][ T652] exFAT-fs (loop0): Filesystem has been set read-only [ 30.164969][ T652] exFAT-fs (loop0): error, failed to bmap (inode : ffff888128729210 iblock : 13, err : -5) [ 30.355909][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 30.476143][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.494168][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.510856][ T26] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 30.526631][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.545119][ T26] usb 3-1: config 0 descriptor?? [ 30.552367][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 30.552381][ T30] audit: type=1400 audit(1738339057.680:220): avc: denied { confidentiality } for pid=663 comm="syz.4.131" lockdown_reason="xfrm SA secret" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 30.612642][ T668] loop4: detected capacity change from 0 to 128 [ 30.698312][ T668] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 30.709437][ T668] FAT-fs (loop4): Filesystem has been set read-only [ 30.897787][ T30] audit: type=1400 audit(1738339058.030:221): avc: denied { execute } for pid=680 comm="syz.4.137" path="/36/hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.945932][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 30.966818][ T30] audit: type=1400 audit(1738339058.100:222): avc: denied { append } for pid=683 comm="syz.4.138" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.053671][ T26] savu 0003:1E7D:2D5A.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 31.316390][ T20] usb 3-1: USB disconnect, device number 4 [ 31.325980][ T39] usb 6-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 31.336585][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.345019][ T39] usb 6-1: config 0 descriptor?? [ 31.358584][ T30] audit: type=1400 audit(1738339058.490:223): avc: denied { create } for pid=697 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 31.378858][ T30] audit: type=1400 audit(1738339058.490:224): avc: denied { write } for pid=697 comm="syz.0.143" path="socket:[17875]" dev="sockfs" ino=17875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 31.383523][ T700] loop0: detected capacity change from 0 to 2048 [ 31.404081][ T30] audit: type=1400 audit(1738339058.490:225): avc: denied { nlmsg_read } for pid=697 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 31.437380][ T700] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.454232][ T700] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.469019][ T700] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 5 with error 28 [ 31.481208][ T700] EXT4-fs (loop0): This should not happen!! Data will be lost [ 31.481208][ T700] [ 31.490706][ T700] EXT4-fs (loop0): Total free blocks count 0 [ 31.496496][ T700] EXT4-fs (loop0): Free/Dirty block details [ 31.502201][ T700] EXT4-fs (loop0): free_blocks=2415919104 [ 31.507892][ T700] EXT4-fs (loop0): dirty_blocks=32 [ 31.512809][ T700] EXT4-fs (loop0): Block reservation details [ 31.518713][ T700] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 31.524604][ T703] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 31.536659][ T703] EXT4-fs (loop0): This should not happen!! Data will be lost [ 31.536659][ T703] [ 31.606333][ T707] loop0: detected capacity change from 0 to 16 [ 31.686369][ T707] erofs: (device loop0): mounted with root inode @ nid 36. [ 31.696081][ T39] usbhid 6-1:0.0: can't add hid device: -71 [ 31.701922][ T39] usbhid: probe of 6-1:0.0 failed with error -71 [ 31.709153][ T39] usb 6-1: USB disconnect, device number 2 [ 31.803906][ T687] syz.4.138 (687) used greatest stack depth: 20560 bytes left [ 31.857627][ T711] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.133988][ T722] loop4: detected capacity change from 0 to 512 [ 32.164477][ T30] audit: type=1400 audit(1738339059.290:226): avc: denied { getopt } for pid=723 comm="syz.5.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.187575][ T722] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.230131][ T722] EXT4-fs (loop4): 1 truncate cleaned up [ 32.242054][ T730] device batadv_slave_0 entered promiscuous mode [ 32.246468][ T722] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,resgid=0x0000000000000000,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 32.319960][ T30] audit: type=1400 audit(1738339059.410:227): avc: denied { map } for pid=721 comm="syz.4.151" path="/39/file1/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.348419][ T722] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm syz.4.151: Invalid inode table block 3268168182 in block_group 0 [ 32.396672][ T722] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 32.435018][ T722] EXT4-fs error (device loop4): __ext4_unlink:3327: inode #2: comm syz.4.151: mark_inode_dirty error [ 32.502993][ T735] kvm: emulating exchange as write [ 32.511896][ T292] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 3268168182 in block_group 0 [ 32.546526][ T30] audit: type=1400 audit(1738339059.440:228): avc: denied { create } for pid=721 comm="syz.4.151" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.597760][ T292] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 32.621267][ T292] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz-executor: mark_inode_dirty error [ 32.669351][ T292] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 3268168182 in block_group 0 [ 32.697476][ T752] loop0: detected capacity change from 0 to 512 [ 32.713719][ T292] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 32.723236][ T30] audit: type=1400 audit(1738339059.480:229): avc: denied { unlink } for pid=721 comm="syz.4.151" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.727188][ T292] EXT4-fs error (device loop4): __ext4_unlink:3327: inode #2: comm syz-executor: mark_inode_dirty error [ 32.785593][ T760] loop5: detected capacity change from 0 to 512 [ 32.795734][ T752] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.804546][ T752] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 32.826377][ T752] EXT4-fs (loop0): 1 truncate cleaned up [ 32.831839][ T752] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 32.857218][ T45] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm kworker/u4:2: Invalid inode table block 3268168182 in block_group 0 [ 32.877438][ T760] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.888808][ T752] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 32.897087][ T760] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.976345][ T767] loop5: detected capacity change from 0 to 1024 [ 33.003327][ T767] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 33.011711][ T767] EXT4-fs (loop5): orphan cleanup on readonly fs [ 33.018698][ T767] EXT4-fs warning (device loop5): ext4_enable_quotas:6423: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 33.033441][ T767] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 33.041507][ T767] EXT4-fs (loop5): 1 truncate cleaned up [ 33.047202][ T767] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 33.206762][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.213623][ T776] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.222471][ T776] device bridge_slave_0 entered promiscuous mode [ 33.231601][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.239262][ T776] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.246919][ T776] device bridge_slave_1 entered promiscuous mode [ 33.316321][ T791] loop2: detected capacity change from 0 to 1024 [ 33.336758][ T791] EXT4-fs (loop2): Ignoring removed nobh option [ 33.342913][ T791] EXT4-fs (loop2): Ignoring removed bh option [ 33.348824][ T791] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.360612][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.367912][ T791] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 33.393979][ T794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.181'. [ 33.407356][ T794] netlink: 75 bytes leftover after parsing attributes in process `syz.3.181'. [ 33.421187][ T326] device bridge_slave_1 left promiscuous mode [ 33.427463][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.446059][ T326] device bridge_slave_0 left promiscuous mode [ 33.455215][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.483628][ T326] device veth1_macvtap left promiscuous mode [ 33.489514][ T326] device veth0_vlan left promiscuous mode [ 33.536010][ T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 33.665433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.673411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.689186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.697358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.705365][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.712228][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.722130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.730564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.738830][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.745677][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.755960][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 33.762277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.772531][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 33.774376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.794356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.798361][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.802648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.825880][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 33.830155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.836399][ T60] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.847828][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.857700][ T776] device veth0_vlan entered promiscuous mode [ 33.859626][ T60] usb 1-1: config 0 descriptor?? [ 33.866760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.886577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.896198][ T773] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.896486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.930302][ T776] device veth1_macvtap entered promiscuous mode [ 33.953731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.965960][ T26] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.969303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.989797][ T26] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.996775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.999480][ T26] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 34.007864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.016294][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.036335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.076482][ T26] hub 6-1:4.0: USB hub found [ 34.295946][ T26] hub 6-1:4.0: 2 ports detected [ 34.302991][ T26] usb 6-1: selecting invalid altsetting 1 [ 34.308646][ T26] hub 6-1:4.0: Using single TT (err -22) [ 34.347689][ T60] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 34.357789][ T60] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 34.366726][ T60] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 34.389542][ T818] loop6: detected capacity change from 0 to 512 [ 34.416250][ T822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=822 comm=syz.2.185 [ 34.454102][ T818] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 34.469740][ T818] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.506305][ T26] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 34.514089][ T26] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 34.561878][ T26] usb 6-1: USB disconnect, device number 3 [ 34.584941][ T833] loop2: detected capacity change from 0 to 512 [ 34.616559][ T60] usb 1-1: USB disconnect, device number 3 [ 34.679379][ T833] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 34.700218][ T833] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.729319][ T10] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 34.743857][ T839] loop3: detected capacity change from 0 to 2048 [ 34.746422][ T10] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 34.762464][ T10] EXT4-fs (loop6): This should not happen!! Data will be lost [ 34.762464][ T10] [ 34.771987][ T10] EXT4-fs (loop6): Total free blocks count 0 [ 34.778087][ T10] EXT4-fs (loop6): Free/Dirty block details [ 34.783836][ T10] EXT4-fs (loop6): free_blocks=65280 [ 34.788964][ T10] EXT4-fs (loop6): dirty_blocks=8189 [ 34.794156][ T10] EXT4-fs (loop6): Block reservation details [ 34.800182][ T10] EXT4-fs (loop6): i_reserved_data_blocks=8189 [ 34.812077][ T839] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.823666][ T10] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 34.838572][ T10] EXT4-fs (loop6): This should not happen!! Data will be lost [ 34.838572][ T10] [ 35.012750][ T861] loop5: detected capacity change from 0 to 16 [ 35.086600][ T861] erofs: (device loop5): mounted with root inode @ nid 36. [ 35.099807][ T861] erofs: (device loop5): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 35.108050][ T872] loop3: detected capacity change from 0 to 512 [ 35.197411][ T879] loop5: detected capacity change from 0 to 1024 [ 35.238184][ T872] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.208: casefold flag without casefold feature [ 35.250763][ T872] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.208: couldn't read orphan inode 15 (err -117) [ 35.263560][ T872] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 35.395949][ T386] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.544986][ T887] loop3: detected capacity change from 0 to 512 [ 35.567969][ T887] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 35.588753][ T887] EXT4-fs (loop3): Ignoring removed bh option [ 35.603630][ T887] EXT4-fs (loop3): Unrecognized mount option "subj_user=acl" or missing value [ 35.635926][ T386] usb 1-1: Using ep0 maxpacket: 32 [ 35.702314][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 35.702357][ T30] audit: type=1400 audit(1738339062.830:248): avc: denied { watch } for pid=886 comm="syz.3.213" path="/37/file1" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.765928][ T386] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 35.779290][ T386] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.792835][ T30] audit: type=1400 audit(1738339062.910:249): avc: denied { read } for pid=893 comm="syz.3.216" name="usbmon0" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.816286][ T386] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 35.827497][ T386] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 35.837417][ T30] audit: type=1400 audit(1738339062.910:250): avc: denied { open } for pid=893 comm="syz.3.216" path="/dev/usbmon0" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.873774][ T386] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.896343][ T30] audit: type=1326 audit(1738339063.020:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=867 comm="syz.6.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb673a44da9 code=0x7fc00000 [ 35.965672][ T899] loop3: detected capacity change from 0 to 512 [ 36.057272][ T386] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.067966][ T386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.075773][ T386] usb 1-1: Product: syz [ 36.083996][ T386] usb 1-1: Manufacturer: syz [ 36.089176][ T386] usb 1-1: SerialNumber: syz [ 36.107581][ T899] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.124421][ T906] loop5: detected capacity change from 0 to 256 [ 36.152214][ T899] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 36.162373][ T913] loop2: detected capacity change from 0 to 256 [ 36.169411][ T899] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.218: invalid indirect mapped block 2683928664 (level 1) [ 36.181930][ T915] loop6: detected capacity change from 0 to 256 [ 36.185153][ T899] EXT4-fs (loop3): 1 truncate cleaned up [ 36.195877][ T899] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,sysvgroups,minixdf,jqfmt=vfsv0,usrjquota=.,,errors=continue. Quota mode: writeback. [ 36.215531][ T30] audit: type=1400 audit(1738339063.340:252): avc: denied { create } for pid=898 comm="syz.3.218" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 36.217738][ T913] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 36.236056][ T915] exfat: Deprecated parameter 'namecase' [ 36.247431][ T906] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 36.254291][ T899] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.218: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 36.268474][ T30] audit: type=1400 audit(1738339063.390:253): avc: denied { execute } for pid=905 comm="syz.5.220" name="file0" dev="loop5" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.286183][ T916] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.218: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 36.323500][ T30] audit: type=1400 audit(1738339063.410:254): avc: denied { execute_no_trans } for pid=905 comm="syz.5.220" path="/44/file1/file0" dev="loop5" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.337112][ T915] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 36.410193][ T30] audit: type=1400 audit(1738339063.530:255): avc: denied { mounton } for pid=914 comm="syz.6.224" path="/10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop6" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.411509][ T920] loop2: detected capacity change from 0 to 512 [ 36.460399][ T922] 9pnet: Insufficient options for proto=fd [ 36.485234][ T30] audit: type=1400 audit(1738339063.610:256): avc: denied { getopt } for pid=925 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.500531][ T928] loop3: detected capacity change from 0 to 256 [ 36.516256][ T920] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 36.529907][ T920] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.532461][ T386] usb 1-1: USB disconnect, device number 4 [ 36.805814][ T928] FAT-fs (loop3): Directory bread(block 64) failed [ 36.814262][ T942] loop5: detected capacity change from 0 to 16 [ 36.827987][ T941] loop6: detected capacity change from 0 to 512 [ 36.834120][ T30] audit: type=1400 audit(1738339063.650:257): avc: denied { mount } for pid=930 comm="syz.5.231" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 36.856159][ T928] FAT-fs (loop3): Directory bread(block 65) failed [ 36.862530][ T928] FAT-fs (loop3): Directory bread(block 66) failed [ 36.891424][ T928] FAT-fs (loop3): Directory bread(block 67) failed [ 36.898077][ T928] FAT-fs (loop3): Directory bread(block 68) failed [ 36.904511][ T928] FAT-fs (loop3): Directory bread(block 69) failed [ 36.911166][ T928] FAT-fs (loop3): Directory bread(block 70) failed [ 36.926275][ T942] erofs: (device loop5): mounted with root inode @ nid 36. [ 36.935324][ T928] FAT-fs (loop3): Directory bread(block 71) failed [ 36.949124][ T928] FAT-fs (loop3): Directory bread(block 72) failed [ 36.962547][ T928] FAT-fs (loop3): Directory bread(block 73) failed [ 36.974234][ T928] attempt to access beyond end of device [ 36.974234][ T928] loop3: rw=2051, want=1832, limit=256 [ 37.057041][ T941] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 37.085998][ T941] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.187101][ T941] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #2: comm syz.6.235: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 37.425776][ T981] loop5: detected capacity change from 0 to 512 [ 37.475531][ T981] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.518747][ T981] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.675893][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 37.969461][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.976583][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.158941][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.357830][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.367809][ T60] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 38.376947][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.389708][ T60] usb 7-1: config 0 descriptor?? [ 39.060269][ T1016] loop3: detected capacity change from 0 to 1024 [ 39.096847][ T60] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 39.107516][ T60] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 39.220732][ T1016] EXT4-fs (loop3): Ignoring removed orlov option [ 39.240408][ T1016] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 39.305993][ T60] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 39.366134][ T1016] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 39.458533][ T1033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'. [ 39.549057][ T804] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.825935][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 39.873163][ T1043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.272'. [ 39.985978][ T804] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 39.996467][ T804] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.008273][ T804] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.195948][ T804] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.204978][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.213083][ T804] usb 3-1: Product: syz [ 40.213725][ T1059] loop0: detected capacity change from 0 to 40427 [ 40.217449][ T804] usb 3-1: Manufacturer: syz [ 40.228332][ T804] usb 3-1: SerialNumber: syz [ 40.276553][ T1059] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 40.284162][ T1059] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.295093][ T1059] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.327549][ T1059] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.334444][ T1059] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.368843][ T1059] attempt to access beyond end of device [ 40.368843][ T1059] loop0: rw=2049, want=45104, limit=40427 [ 40.586141][ T804] usb 3-1: 0:2 : does not exist [ 40.614986][ T804] usb 3-1: USB disconnect, device number 5 [ 40.672714][ T1075] loop3: detected capacity change from 0 to 512 [ 40.711180][ T1079] loop6: detected capacity change from 0 to 512 [ 40.729897][ T1075] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 40.746128][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 40.746144][ T30] audit: type=1400 audit(1738339067.880:287): avc: denied { mounton } for pid=1074 comm="syz.3.283" path="/54/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.777997][ T1079] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 40.802726][ T1079] EXT4-fs (loop6): 1 truncate cleaned up [ 40.805552][ T1083] loop5: detected capacity change from 0 to 2048 [ 40.809171][ T1079] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,grpquota,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 40.837405][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.896051][ T300] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.947014][ T1083] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.977455][ T30] audit: type=1400 audit(1738339068.110:288): avc: denied { execute } for pid=1081 comm="syz.5.286" path="/61/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.006425][ T60] usb 7-1: USB disconnect, device number 2 [ 41.057999][ T30] audit: type=1400 audit(1738339068.190:289): avc: denied { connect } for pid=1090 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.071180][ T1093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.288'. [ 41.122375][ T1093] Zero length message leads to an empty skb [ 41.405932][ T300] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 41.413811][ T1103] loop5: detected capacity change from 0 to 256 [ 42.421176][ T30] audit: type=1400 audit(1738339068.610:290): avc: denied { create } for pid=1097 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.455857][ T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.469748][ T300] usb 1-1: config 0 descriptor?? [ 42.474607][ T30] audit: type=1400 audit(1738339068.640:291): avc: denied { create } for pid=1097 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 42.512107][ T1103] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 42.527808][ T30] audit: type=1400 audit(1738339069.590:292): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.564628][ T30] audit: type=1400 audit(1738339069.690:293): avc: denied { block_suspend } for pid=1112 comm="syz.3.295" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.635673][ T1116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1116 comm=syz.2.298 [ 42.698269][ T1110] loop6: detected capacity change from 0 to 40427 [ 42.751757][ T1124] loop5: detected capacity change from 0 to 512 [ 42.768580][ T1110] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 0) [ 42.775972][ T1110] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 42.784005][ T1110] F2FS-fs (loop6): Unrecognized mount option "age_extent_cache" or missing value [ 42.829407][ T1124] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 42.840532][ T1124] EXT4-fs error (device loop5): __ext4_iget:4903: inode #2: block 3072: comm syz.5.301: invalid block [ 42.919335][ T1124] EXT4-fs (loop5): get root inode failed [ 42.944573][ T1124] EXT4-fs (loop5): mount failed [ 43.275086][ T30] audit: type=1400 audit(1738339070.380:294): avc: denied { shutdown } for pid=1123 comm="syz.5.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.825594][ T30] audit: type=1400 audit(1738339070.390:295): avc: denied { create } for pid=1123 comm="syz.5.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 43.875383][ T1144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'. [ 43.889504][ T30] audit: type=1400 audit(1738339070.950:296): avc: denied { name_bind } for pid=1137 comm="syz.2.306" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 43.893346][ T1148] loop6: detected capacity change from 0 to 16 [ 43.957939][ T1148] erofs: dax options not supported [ 44.002031][ T1159] loop5: detected capacity change from 0 to 512 [ 44.050842][ T1159] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 44.062440][ T1159] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.088937][ T1159] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.314: bg 0: block 18: invalid block bitmap [ 44.101544][ T1159] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.314: Failed to acquire dquot type 1 [ 44.114185][ T1159] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.5.314: bad entry in directory: inode out of bounds - offset=24, inode=1048587, rec_len=20, size=4096 fake=0 [ 44.136132][ T1159] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem [ 44.149744][ T1159] syz.5.314 (1159) used greatest stack depth: 19504 bytes left [ 44.336151][ T300] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 44.346768][ T300] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 44.357807][ T300] asix: probe of 1-1:0.0 failed with error -71 [ 44.367255][ T300] usb 1-1: USB disconnect, device number 5 [ 44.480908][ T1178] syz.5.321 uses obsolete (PF_INET,SOCK_PACKET) [ 45.104889][ T1212] loop2: detected capacity change from 0 to 512 [ 45.212700][ T1212] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.253260][ T1212] EXT4-fs (loop2): 1 truncate cleaned up [ 45.258947][ T1212] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 46.253318][ T1212] syz.2.336 (pid 1212) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 46.486518][ T1236] loop2: detected capacity change from 0 to 512 [ 46.500618][ T1231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.344'. [ 46.573659][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.580857][ T1224] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.591699][ T1224] device bridge_slave_0 entered promiscuous mode [ 46.594075][ T1236] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.347: bg 0: block 248: padding at end of block bitmap is not set [ 46.613245][ T1236] __quota_error: 16 callbacks suppressed [ 46.613264][ T1236] Quota error (device loop2): write_blk: dquota write failed [ 46.626299][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.627809][ T1236] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 46.633319][ T1224] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.642991][ T1236] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.347: Failed to acquire dquot type 1 [ 46.643763][ T1236] EXT4-fs (loop2): 1 truncate cleaned up [ 46.651218][ T1224] device bridge_slave_1 entered promiscuous mode [ 46.660971][ T1236] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 46.686670][ T1236] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.794037][ T1236] syz.2.347 (1236) used greatest stack depth: 18752 bytes left [ 47.197191][ T8] Quota error (device loop2): remove_tree: Getting block too big (0 >= 6) [ 47.211159][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6211: comm kworker/u4:0: Failed to release dquot type 1 [ 47.250676][ T30] audit: type=1400 audit(1738339074.380:311): avc: denied { mounton } for pid=1252 comm="syz.6.351" path="/proc/75/task" dev="proc" ino=20299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 47.332400][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.414771][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.440139][ T322] device bridge_slave_1 left promiscuous mode [ 47.446405][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.481739][ T322] device bridge_slave_0 left promiscuous mode [ 47.495263][ T1263] loop0: detected capacity change from 0 to 512 [ 47.502158][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.524948][ T322] device veth1_macvtap left promiscuous mode [ 47.530906][ T322] device veth0_vlan left promiscuous mode [ 47.618604][ T1263] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 47.666070][ T1263] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.756103][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.782400][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.791198][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.798103][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.806286][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.814752][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.823659][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.830590][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.152867][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.161203][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.169758][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.177871][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.189896][ T1224] device veth0_vlan entered promiscuous mode [ 48.212155][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.221360][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.302680][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.384252][ T1224] device veth1_macvtap entered promiscuous mode [ 48.456409][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.340'. [ 48.480278][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.497649][ T1286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1286 comm=syz.0.359 [ 48.503418][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.578756][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.587045][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.595191][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.603633][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.611744][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.793969][ T1299] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 48.800849][ T1299] overlayfs: failed to set xattr on upper [ 48.809226][ T30] audit: type=1400 audit(1738339075.920:312): avc: denied { mount } for pid=1290 comm="syz.7.362" name="/" dev="ramfs" ino=20462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.831541][ T1286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 48.836252][ T30] audit: type=1400 audit(1738339075.920:313): avc: denied { mounton } for pid=1290 comm="syz.7.362" path="/2/file0/bus" dev="ramfs" ino=20465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 48.862822][ T30] audit: type=1400 audit(1738339075.940:314): avc: denied { create } for pid=1290 comm="syz.7.362" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 48.883600][ T30] audit: type=1400 audit(1738339075.940:315): avc: denied { link } for pid=1290 comm="syz.7.362" name="file1" dev="overlay" ino=20469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 48.988572][ T30] audit: type=1400 audit(1738339075.940:316): avc: denied { setattr } for pid=1290 comm="syz.7.362" name="#e" dev="ramfs" ino=20470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 49.065498][ T30] audit: type=1400 audit(1738339075.940:317): avc: denied { rename } for pid=1290 comm="syz.7.362" name="#e" dev="ramfs" ino=20470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 49.455927][ T300] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 49.535969][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 49.713902][ T1334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'. [ 49.752693][ T1338] capability: warning: `syz.2.381' uses 32-bit capabilities (legacy support in use) [ 49.791436][ T1343] : renamed from ipvlan1 [ 49.825981][ T300] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 49.834927][ T300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.843395][ T300] usb 6-1: config 0 descriptor?? [ 49.895949][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.910838][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.927665][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.948694][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.964778][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.973586][ T6] usb 1-1: config 0 descriptor?? [ 49.975876][ T26] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.086734][ T300] usb 6-1: USB disconnect, device number 4 [ 50.405967][ T26] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.416436][ T26] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 50.457103][ T6] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 50.469837][ T6] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 50.474194][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.493759][ T26] usb 8-1: config 0 descriptor?? [ 50.643374][ T1369] tipc: Started in network mode [ 50.648181][ T1369] tipc: Node identity 720412aea75d, cluster identity 4711 [ 50.655195][ T1369] tipc: Enabled bearer , priority 0 [ 50.671903][ T1369] device syzkaller0 entered promiscuous mode [ 50.680310][ T1368] tipc: Resetting bearer [ 50.691563][ T1368] tipc: Disabling bearer [ 50.741383][ T1371] ================================================================== [ 50.749257][ T1371] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 50.758285][ T1371] Read of size 1 at addr ffff888118838bf8 by task syz.5.395/1371 [ 50.765843][ T1371] [ 50.768003][ T1371] CPU: 0 PID: 1371 Comm: syz.5.395 Not tainted 5.15.176-syzkaller-00066-gd1a25a6a4b3b #0 [ 50.777638][ T1371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 50.787548][ T1371] Call Trace: [ 50.790656][ T1371] [ 50.793436][ T1371] dump_stack_lvl+0x151/0x1c0 [ 50.797950][ T1371] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.803415][ T1371] ? panic+0x760/0x760 [ 50.807331][ T1371] print_address_description+0x87/0x3b0 [ 50.812701][ T1371] ? stack_trace_save+0x113/0x1c0 [ 50.817563][ T1371] kasan_report+0x179/0x1c0 [ 50.821904][ T1371] ? xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 50.828248][ T1371] ? xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 50.834575][ T1371] __asan_report_load1_noabort+0x14/0x20 [ 50.840040][ T1371] xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 50.846208][ T1371] ? ____kasan_kmalloc+0xed/0x110 [ 50.851063][ T1371] ? ____kasan_kmalloc+0xdb/0x110 [ 50.855927][ T1371] ? xfrm_policy_addr_delta+0x23b/0x370 [ 50.861307][ T1371] xfrm_policy_inexact_insert_node+0x917/0xb00 [ 50.867295][ T1371] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.873196][ T1371] ? xfrm_policy_inexact_alloc_bin+0x5ad/0x13f0 [ 50.879273][ T1371] xfrm_policy_inexact_alloc_chain+0x4ec/0xaf0 [ 50.885291][ T1371] xfrm_policy_inexact_insert+0x6a/0x1160 [ 50.890815][ T1371] ? __kasan_check_write+0x14/0x20 [ 50.895760][ T1371] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 50.900621][ T1371] ? policy_hash_bysel+0x137/0x700 [ 50.905571][ T1371] xfrm_policy_insert+0xe7/0x940 [ 50.910342][ T1371] xfrm_add_policy+0x4f2/0x980 [ 50.914941][ T1371] ? cap_capable+0x1d2/0x270 [ 50.919370][ T1371] ? xfrm_dump_sa_done+0xc0/0xc0 [ 50.924143][ T1371] xfrm_user_rcv_msg+0x4f3/0x7d0 [ 50.928923][ T1371] ? xfrm_netlink_rcv+0x90/0x90 [ 50.933603][ T1371] ? avc_has_perm+0x16f/0x260 [ 50.938113][ T1371] ? ____kasan_kmalloc+0xed/0x110 [ 50.942980][ T1371] ? avc_has_perm_noaudit+0x430/0x430 [ 50.948181][ T1371] ? x64_sys_call+0x16a/0x9a0 [ 50.952697][ T1371] netlink_rcv_skb+0x1cf/0x410 [ 50.957295][ T1371] ? xfrm_netlink_rcv+0x90/0x90 [ 50.961985][ T1371] ? netlink_ack+0xb10/0xb10 [ 50.966415][ T1371] ? mutex_lock+0xb6/0x1e0 [ 50.970665][ T1371] ? wait_for_completion_killable_timeout+0x10/0x10 [ 50.977084][ T1371] ? __netlink_lookup+0x37b/0x3a0 [ 50.981945][ T1371] xfrm_netlink_rcv+0x72/0x90 [ 50.986459][ T1371] netlink_unicast+0x8df/0xac0 [ 50.991057][ T1371] ? netlink_detachskb+0x90/0x90 [ 50.995840][ T1371] ? security_netlink_send+0x7b/0xa0 [ 51.000952][ T1371] netlink_sendmsg+0xa0a/0xd20 [ 51.005554][ T1371] ? netlink_getsockopt+0x560/0x560 [ 51.010583][ T1371] ? x64_sys_call+0x147/0x9a0 [ 51.015104][ T1371] ? security_socket_sendmsg+0x82/0xb0 [ 51.020392][ T1371] ? netlink_getsockopt+0x560/0x560 [ 51.025428][ T1371] ____sys_sendmsg+0x59e/0x8f0 [ 51.030030][ T1371] ? __sys_sendmsg_sock+0x40/0x40 [ 51.034890][ T1371] ? import_iovec+0xe5/0x120 [ 51.039314][ T1371] ___sys_sendmsg+0x252/0x2e0 [ 51.043827][ T1371] ? __sys_sendmsg+0x260/0x260 [ 51.048426][ T1371] ? percpu_counter_add_batch+0x13d/0x160 [ 51.053994][ T1371] ? __fdget+0x1bc/0x240 [ 51.058060][ T1371] __se_sys_sendmsg+0x19a/0x260 [ 51.062766][ T1371] ? __x64_sys_sendmsg+0x90/0x90 [ 51.067522][ T1371] ? __kasan_check_write+0x14/0x20 [ 51.072466][ T1371] ? switch_fpu_return+0x15f/0x2e0 [ 51.077419][ T1371] __x64_sys_sendmsg+0x7b/0x90 [ 51.082016][ T1371] x64_sys_call+0x16a/0x9a0 [ 51.086365][ T1371] do_syscall_64+0x3b/0xb0 [ 51.090611][ T1371] ? clear_bhb_loop+0x35/0x90 [ 51.095120][ T1371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.100860][ T1371] RIP: 0033:0x7f0f85a9eda9 [ 51.105103][ T1371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.124671][ T1371] RSP: 002b:00007f0f84109038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.132919][ T1371] RAX: ffffffffffffffda RBX: 00007f0f85cb7fa0 RCX: 00007f0f85a9eda9 [ 51.140730][ T1371] RDX: 0000000000004000 RSI: 0000000020000580 RDI: 0000000000000005 [ 51.148537][ T1371] RBP: 00007f0f85b202a0 R08: 0000000000000000 R09: 0000000000000000 [ 51.156364][ T1371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.164164][ T1371] R13: 0000000000000000 R14: 00007f0f85cb7fa0 R15: 00007ffd395fdb08 [ 51.171996][ T1371] [ 51.174851][ T1371] [ 51.177006][ T1371] Allocated by task 1371: [ 51.181170][ T1371] ____kasan_kmalloc+0xdb/0x110 [ 51.185858][ T1371] __kasan_kmalloc+0x9/0x10 [ 51.190196][ T1371] __kmalloc+0x13f/0x2c0 [ 51.194287][ T1371] sk_prot_alloc+0xf9/0x330 [ 51.198615][ T1371] sk_alloc+0x38/0x430 [ 51.202520][ T1371] pfkey_create+0x12c/0x620 [ 51.206859][ T1371] __sock_create+0x3be/0x7e0 [ 51.211284][ T1371] __sys_socket+0x132/0x370 [ 51.215627][ T1371] __x64_sys_socket+0x7a/0x90 [ 51.220139][ T1371] x64_sys_call+0x147/0x9a0 [ 51.224477][ T1371] do_syscall_64+0x3b/0xb0 [ 51.228731][ T1371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.234457][ T1371] [ 51.236646][ T1371] The buggy address belongs to the object at ffff888118838800 [ 51.236646][ T1371] which belongs to the cache kmalloc-1k of size 1024 [ 51.250517][ T1371] The buggy address is located 1016 bytes inside of [ 51.250517][ T1371] 1024-byte region [ffff888118838800, ffff888118838c00) [ 51.263793][ T1371] The buggy address belongs to the page: [ 51.269265][ T1371] page:ffffea0004620e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118838 [ 51.279333][ T1371] head:ffffea0004620e00 order:3 compound_mapcount:0 compound_pincount:0 [ 51.287490][ T1371] flags: 0x4000000000010200(slab|head|zone=1) [ 51.293404][ T1371] raw: 4000000000010200 ffffea000472d200 0000000200000002 ffff888100043080 [ 51.301818][ T1371] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 51.310227][ T1371] page dumped because: kasan: bad access detected [ 51.316493][ T1371] page_owner tracks the page as allocated [ 51.322032][ T1371] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 318, ts 28175051547, free_ts 27301727875 [ 51.342256][ T1371] post_alloc_hook+0x1a3/0x1b0 [ 51.346852][ T1371] prep_new_page+0x1b/0x110 [ 51.351191][ T1371] get_page_from_freelist+0x3550/0x35d0 [ 51.356572][ T1371] __alloc_pages+0x27e/0x8f0 [ 51.360999][ T1371] new_slab+0x9a/0x4e0 [ 51.364905][ T1371] ___slab_alloc+0x39e/0x830 [ 51.369331][ T1371] __slab_alloc+0x4a/0x90 [ 51.373496][ T1371] __kmalloc_track_caller+0x171/0x2c0 [ 51.378704][ T1371] __alloc_skb+0x10c/0x550 [ 51.382960][ T1371] netlink_sendmsg+0x797/0xd20 [ 51.387557][ T1371] ____sys_sendmsg+0x59e/0x8f0 [ 51.392156][ T1371] ___sys_sendmsg+0x252/0x2e0 [ 51.396673][ T1371] __se_sys_sendmsg+0x19a/0x260 [ 51.401357][ T1371] __x64_sys_sendmsg+0x7b/0x90 [ 51.405958][ T1371] x64_sys_call+0x16a/0x9a0 [ 51.410296][ T1371] do_syscall_64+0x3b/0xb0 [ 51.414554][ T1371] page last free stack trace: [ 51.419065][ T1371] free_unref_page_prepare+0x7c8/0x7d0 [ 51.424358][ T1371] free_unref_page+0xe8/0x750 [ 51.428872][ T1371] __free_pages+0x61/0xf0 [ 51.433037][ T1371] __free_slab+0xec/0x1d0 [ 51.437203][ T1371] __unfreeze_partials+0x165/0x1a0 [ 51.442151][ T1371] put_cpu_partial+0xc4/0x120 [ 51.446664][ T1371] __slab_free+0x1c8/0x290 [ 51.450918][ T1371] ___cache_free+0x109/0x120 [ 51.455355][ T1371] qlink_free+0x4d/0x90 [ 51.459335][ T1371] qlist_free_all+0x44/0xb0 [ 51.463675][ T1371] kasan_quarantine_reduce+0x15a/0x180 [ 51.468967][ T1371] __kasan_slab_alloc+0x2f/0xe0 [ 51.473657][ T1371] slab_post_alloc_hook+0x53/0x2c0 [ 51.478601][ T1371] kmem_cache_alloc+0xf5/0x250 [ 51.483201][ T1371] getname_flags+0xba/0x520 [ 51.487553][ T1371] user_path_at_empty+0x2d/0x1a0 [ 51.492335][ T1371] [ 51.494484][ T1371] Memory state around the buggy address: [ 51.499959][ T1371] ffff888118838a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.507853][ T1371] ffff888118838b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.515752][ T1371] >ffff888118838b80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 51.523646][ T1371] ^ [ 51.531462][ T1371] ffff888118838c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 51.539359][ T1371] ffff888118838c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.547255][ T1371] ================================================================== [ 51.555153][ T1371] Disabling lock debugging due to kernel taint [ 51.686048][ T26] usb 8-1: USB disconnect, device number 2 [ 51.875877][ T6] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 52.536789][ T322] device bridge_slave_1 left promiscuous mode [ 52.542834][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.550266][ T322] device bridge_slave_0 left promiscuous mode [ 52.556271][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.563977][ T322] device veth1_macvtap left promiscuous mode [ 52.569837][ T322] device veth0_vlan left promiscuous mode [ 52.756426][ T300] usb 1-1: USB disconnect, device number 6 [ 53.187784][ T322] tipc: Left network mode [ 53.947948][ T322] device bridge_slave_1 left promiscuous mode [ 53.953869][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.961184][ T322] device bridge_slave_0 left promiscuous mode [ 53.967201][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.974954][ T322] device bridge_slave_1 left promiscuous mode [ 53.980939][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.988060][ T322] device bridge_slave_0 left promiscuous mode [ 53.993957][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.001765][ T322] device bridge_slave_1 left promiscuous mode [ 54.007735][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.014818][ T322] device bridge_slave_0 left promiscuous mode [ 54.020865][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.028847][ T322] device veth1_macvtap left promiscuous mode [ 54.034642][ T322] device veth0_vlan left promiscuous mode [ 54.040494][ T322] device veth1_macvtap left promiscuous mode [ 54.046319][ T322] device veth0_vlan left promiscuous mode [ 54.051932][ T322] device veth1_macvtap left promiscuous mode [ 54.057720][ T322] device veth0_vlan left promiscuous mode