last executing test programs: 1m16.670526213s ago: executing program 32 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x20040840) 53.776998485s ago: executing program 33 (id=741): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 42.224661017s ago: executing program 2 (id=953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x1}) 42.123423528s ago: executing program 2 (id=954): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x22, 0xf, {[@local=@item_012={0x2, 0x2, 0xa, "15d4"}, @local=@item_012={0x2, 0x2, 0x8, "c1a1"}, @global=@item_012={0x2, 0x1, 0x1, "7093"}, @main=@item_012={0x2, 0x0, 0x9, 'V\x00'}, @global=@item_012={0x2, 0x1, 0x3, "9c56"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0x1, 0x200, 0x0, 0x8, 0x0, 0xac5, 0xa, 0x4, 0x1, 0x4, 0x8, 0x9, 0xfffffffa, 0x9}) 40.295296209s ago: executing program 2 (id=961): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)={0x28, 0x4, 0x0, {0x0, 0x9a45}}, 0x28) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 40.20830708s ago: executing program 2 (id=962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) 40.19511117s ago: executing program 2 (id=963): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 40.13879775s ago: executing program 2 (id=964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x2c, r2, 0xcd3a991b146a25f, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) 32.10552515s ago: executing program 34 (id=857): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) 25.999718078s ago: executing program 4 (id=1119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x2c, r2, 0x405, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 25.967390729s ago: executing program 4 (id=1122): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0, 0x0, 0x9}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x8, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) 25.938654929s ago: executing program 4 (id=1123): ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000000c0)={'\x00', 0x1ff, 0x0, 0x7f, 0x0, 0x401, 0x4, 0x2, '\x00', 0x59ac}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) 25.892200219s ago: executing program 4 (id=1125): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x50, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x4, 0x5522, &(0x7f00000014c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 25.243943513s ago: executing program 4 (id=1142): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x51d, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 25.097289374s ago: executing program 35 (id=964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x2c, r2, 0xcd3a991b146a25f, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) 24.373218048s ago: executing program 4 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.370172039s ago: executing program 36 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.357286779s ago: executing program 6 (id=1325): unshare(0x2c020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r0}, 0xc) 19.32695106s ago: executing program 6 (id=1326): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 19.28798391s ago: executing program 6 (id=1328): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000200)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2050) 19.25624757s ago: executing program 6 (id=1333): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) newfstatat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', &(0x7f0000000280), 0x800) 18.693907284s ago: executing program 6 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40046721, &(0x7f00000000c0)) 18.275477986s ago: executing program 6 (id=1351): r0 = syz_io_uring_setup(0x5bbd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x10b}, &(0x7f0000000280), &(0x7f0000000440)) r1 = syz_io_uring_setup(0x3a12, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x74d9, &(0x7f00000007c0)={0x0, 0x5197, 0x2, 0x3, 0x0, 0x0, r1}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r0, 0x46, 0xfffffffc, 0x0, 0x0, 0x0) 18.259975926s ago: executing program 37 (id=1351): r0 = syz_io_uring_setup(0x5bbd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x10b}, &(0x7f0000000280), &(0x7f0000000440)) r1 = syz_io_uring_setup(0x3a12, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x74d9, &(0x7f00000007c0)={0x0, 0x5197, 0x2, 0x3, 0x0, 0x0, r1}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r0, 0x46, 0xfffffffc, 0x0, 0x0, 0x0) 11.377859079s ago: executing program 8 (id=1525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000002085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 11.358358239s ago: executing program 8 (id=1528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 11.342568929s ago: executing program 8 (id=1529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 11.31305691s ago: executing program 8 (id=1530): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x15e, &(0x7f00000001c0)="$eJzs27+KE1EUB+AzSdSoTWqxGLCxCmplqUgEcUBRUmilEG0SCZhmtAo+ia0PJ0iqFMIVHUlijMj+mZ3dzfc1OfDjhnuKO5czMK+uvxuPprO306eL6GZZdO5FHsssetGKdlTmAQCcJ8uU4ltKKV2ax+XPkVJqekcAQN3c/wCwf/57/99taGMAQG3M/wCwf56/ePn4flEMnuV5N+LrvByWw+q3yh8+Kga38l9661WLshy2V/ntKs//zC/Eld/5nZ35xbh5o8p/Zg+eFFv51RjV3z4AAADshX6+snO+7/f/zlsb6zfeD2zN75241jmZHgCAg5l9+Dh+PZm8ea9QnNHie0rpEMs/famOwCnp4niLLCKO9j9NP5mAuq0PfdM7AQAAAAAAAAAAAAAA/qXer5HaTbcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO/0IAAD//yX+TAI=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 11.24037355s ago: executing program 8 (id=1532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000300)) 11.23438248s ago: executing program 8 (id=1533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 11.21126151s ago: executing program 38 (id=1533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 5.275788357s ago: executing program 3 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) 5.184268658s ago: executing program 3 (id=1715): sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x1f) 5.005245849s ago: executing program 3 (id=1722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x0, 0xc267, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x107a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x0, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4.900424019s ago: executing program 3 (id=1724): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15e, &(0x7f00000001c0)="$eJzs27+KE1EUB+AzSdSoTWqxGLCxCmplqUgEcUBRUmilEG0SCZhmtAo+ia0PJ0iqFMIVHUlijMj+mZ3dzfc1OfDjhnuKO5czMK+uvxuPprO306eL6GZZdO5FHsssetGKdlTmAQCcJ8uU4ltKKV2ax+XPkVJqekcAQN3c/wCwf/57/99taGMAQG3M/wCwf56/ePn4flEMnuV5N+LrvByWw+q3yh8+Kga38l9661WLshy2V/ntKs//zC/Eld/5nZ35xbh5o8p/Zg+eFFv51RjV3z4AAADshX6+snO+7/f/zlsb6zfeD2zN75241jmZHgCAg5l9+Dh+PZm8ea9QnNHie0rpEMs/famOwCnp4niLLCKO9j9NP5mAuq0PfdM7AQAAAAAAAAAAAAAA/qXer5HaTbcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO/0IAAD//yX+TAI=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4.84058398s ago: executing program 3 (id=1728): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',cache=loose,subj_role=rfdno,fsmagic=0x000000000000008e,defcontext=u']) 4.744695481s ago: executing program 3 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb, 0x3d3}) r1 = io_uring_setup(0x4dc2, &(0x7f0000000400)={0x0, 0x34cd, 0x100, 0x0, 0x1}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 4.674056051s ago: executing program 39 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb, 0x3d3}) r1 = io_uring_setup(0x4dc2, &(0x7f0000000400)={0x0, 0x34cd, 0x100, 0x0, 0x1}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 2.961213301s ago: executing program 9 (id=1800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.960812621s ago: executing program 9 (id=1802): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[], 0x1, 0x5578, &(0x7f0000002480)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.581701994s ago: executing program 9 (id=1815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x103, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x5af, 0x89, 0x2, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f0000000340)={0x40, 0x2, 0x3, {0x3, 0x21, "a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c00198008"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) 980.889364ms ago: executing program 7 (id=1847): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/169, 0xa9}], 0x0, 0x1}, 0x20) 959.433114ms ago: executing program 7 (id=1848): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0x2001c1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 959.066204ms ago: executing program 7 (id=1850): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10e00) poll(&(0x7f0000000100)=[{r1, 0x100}], 0x1, 0x800) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x0, {0x8001}}, 0x18) read$FUSE(r0, &(0x7f00000038c0)={0x2020}, 0x2020) 904.319414ms ago: executing program 0 (id=1851): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 852.948664ms ago: executing program 0 (id=1852): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 797.984705ms ago: executing program 0 (id=1854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 792.237375ms ago: executing program 7 (id=1856): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018"], 0x0, 0x37, 0x0, 0x9}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000009c000040"]) 744.213145ms ago: executing program 0 (id=1858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg0\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 734.670325ms ago: executing program 7 (id=1862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x10000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11) 725.222865ms ago: executing program 7 (id=1863): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 645.801766ms ago: executing program 0 (id=1864): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 645.663286ms ago: executing program 0 (id=1865): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 314.220698ms ago: executing program 1 (id=1881): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x800}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 304.715898ms ago: executing program 1 (id=1882): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x5, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 292.052428ms ago: executing program 1 (id=1883): mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x3ae4c21, 0x0) 291.113038ms ago: executing program 9 (id=1884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0xb0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000106000000002179fde746e8"], 0x14}], 0x1, 0x0, 0x0, 0x800}, 0x800) 239.261949ms ago: executing program 1 (id=1885): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f00000004c0)={[{@utf8}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_lower}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@utf8}, {@shortname_lower}]}, 0x82, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x13, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) 239.114438ms ago: executing program 9 (id=1886): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000018000000324901008200000001"], 0x50) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 238.885848ms ago: executing program 5 (id=1887): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 192.346759ms ago: executing program 9 (id=1888): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000000}) 165.296689ms ago: executing program 5 (id=1889): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 70.628239ms ago: executing program 5 (id=1890): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) ustat(0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 70.464059ms ago: executing program 5 (id=1891): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "fa0cf9222d85a61cc31081d088545b7bb0"}, 0x21) 366.55µs ago: executing program 5 (id=1892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) setfsuid(0x0) 217.64µs ago: executing program 1 (id=1893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000600), &(0x7f0000000000)=@udp6=r2, 0x2}, 0x20) 93.58µs ago: executing program 5 (id=1894): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$TCSBRKP(r0, 0x5425, 0x6) ioctl$TCSBRKP(r0, 0x5425, 0x80000000) 0s ago: executing program 1 (id=1895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x103, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x5af, 0x89, 0x2, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f0000000340)={0x40, 0x2, 0x3, {0x3, 0x21, "a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c00198008"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 21.166411][ T28] audit: type=1400 audit(1762325141.646:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.167407][ T275] cgroup: Unknown subsys name 'net' [ 21.189084][ T28] audit: type=1400 audit(1762325141.646:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.216341][ T28] audit: type=1400 audit(1762325141.686:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.216518][ T275] cgroup: Unknown subsys name 'devices' [ 21.371394][ T275] cgroup: Unknown subsys name 'hugetlb' [ 21.376996][ T275] cgroup: Unknown subsys name 'rlimit' [ 21.479117][ T28] audit: type=1400 audit(1762325141.956:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.502315][ T28] audit: type=1400 audit(1762325141.956:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.510289][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.527174][ T28] audit: type=1400 audit(1762325141.956:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.558656][ T28] audit: type=1400 audit(1762325142.026:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.584173][ T28] audit: type=1400 audit(1762325142.026:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.620638][ T28] audit: type=1400 audit(1762325142.106:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.621040][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.646151][ T28] audit: type=1400 audit(1762325142.106:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.349784][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.356853][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.364286][ T284] device bridge_slave_0 entered promiscuous mode [ 22.392703][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.399785][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.407050][ T284] device bridge_slave_1 entered promiscuous mode [ 22.433726][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.440811][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.448085][ T283] device bridge_slave_0 entered promiscuous mode [ 22.466911][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.474034][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.481392][ T283] device bridge_slave_1 entered promiscuous mode [ 22.514643][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.521720][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.529122][ T285] device bridge_slave_0 entered promiscuous mode [ 22.536352][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.543439][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.550810][ T285] device bridge_slave_1 entered promiscuous mode [ 22.562708][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.569822][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.577229][ T286] device bridge_slave_0 entered promiscuous mode [ 22.595473][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.602546][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.609907][ T286] device bridge_slave_1 entered promiscuous mode [ 22.655315][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.662413][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.670050][ T287] device bridge_slave_0 entered promiscuous mode [ 22.676992][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.684153][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.691611][ T287] device bridge_slave_1 entered promiscuous mode [ 22.798319][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.806091][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.813425][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.820456][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.863824][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.870874][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.878144][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.885183][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.907510][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.914801][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.922221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.929758][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.937028][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.965694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.973913][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.980937][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.988389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.996703][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.003732][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.030366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.038253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.059103][ T283] device veth0_vlan entered promiscuous mode [ 23.067885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.076384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.084441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.092309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.100432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.107816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.134022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.141668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.150038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.158188][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.165225][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.172697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.181142][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.188146][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.195492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.203718][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.210747][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.219375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.231144][ T283] device veth1_macvtap entered promiscuous mode [ 23.244639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.252788][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.259816][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.279237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.287721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.295980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.304094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.330740][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 23.339332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.348345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.356510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.364113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.371677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.379635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.387767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.396203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.404492][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.411523][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.418885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.427236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.435458][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.442483][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.450013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.458266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.466720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.485571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.493067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.500804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.509169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.518471][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.522422][ T43] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 23.525574][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.535156][ T337] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 23.540732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.547395][ T43] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 23.554986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.570419][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.577426][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.584870][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.593088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.601129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.609376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.617728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.629063][ T284] device veth0_vlan entered promiscuous mode [ 23.638750][ T287] device veth0_vlan entered promiscuous mode [ 23.645941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.654100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.662340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.670386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.678292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.686399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.694512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.702029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.709434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.717006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.729649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.737804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.745879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.754078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.767479][ T284] device veth1_macvtap entered promiscuous mode [ 23.776582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.784871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.793008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.800920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.809024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.822198][ T287] device veth1_macvtap entered promiscuous mode [ 23.830974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.838732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.847167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.857146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.865672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.879514][ T285] device veth0_vlan entered promiscuous mode [ 23.887469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.895723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.904348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.912717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.921106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.928897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.936931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.944408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.956716][ T286] device veth0_vlan entered promiscuous mode [ 23.966619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.974944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.983436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.991852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.000391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.008193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.016317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.023933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.037056][ T285] device veth1_macvtap entered promiscuous mode [ 24.048432][ T286] device veth1_macvtap entered promiscuous mode [ 24.056240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.064570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.072919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.080815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.088891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.097236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.114511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.125937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.134468][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.143426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.175558][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.188896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.197408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.210777][ T346] ======================================================= [ 24.210777][ T346] WARNING: The mand mount option has been deprecated and [ 24.210777][ T346] and is ignored by this kernel. Remove the mand [ 24.210777][ T346] option from the mount to silence this warning. [ 24.210777][ T346] ======================================================= [ 24.210785][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.321538][ T360] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.905354][ T417] syz.2.37[417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.905432][ T417] syz.2.37[417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.975692][ T429] loop3: detected capacity change from 0 to 256 [ 25.001592][ T429] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 25.180351][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.188240][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.233446][ T451] netlink: 'syz.2.53': attribute type 16 has an invalid length. [ 25.241641][ T451] netlink: 'syz.2.53': attribute type 17 has an invalid length. [ 25.254357][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 25.261951][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 25.272170][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.279204][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.287965][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.295027][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.313221][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 25.321436][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.331218][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 25.339359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.348299][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.356977][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.365462][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.374074][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.581416][ T340] Bluetooth: hci0: command 0x1003 tx timeout [ 25.587472][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 25.815991][ T505] syz.0.74 uses obsolete (PF_INET,SOCK_PACKET) [ 25.849457][ T509] loop4: detected capacity change from 0 to 512 [ 25.869900][ T509] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 25.957617][ T519] loop4: detected capacity change from 0 to 256 [ 26.007740][ T524] incfs: Options parsing error. -22 [ 26.012320][ T526] loop4: detected capacity change from 0 to 256 [ 26.016502][ T524] incfs: mount failed -22 [ 26.043115][ T530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 26.052170][ T530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 26.067357][ T526] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.082805][ T526] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 26.162093][ T526] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 26.176685][ T535] loop0: detected capacity change from 0 to 128 [ 26.181831][ T457] loop3: detected capacity change from 0 to 131072 [ 26.188869][ T535] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 26.222853][ T535] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 26.244213][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 26.244226][ T28] audit: type=1400 audit(1762325146.726:165): avc: denied { write } for pid=525 comm="syz.4.85" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.267474][ T457] F2FS-fs (loop3): invalid crc value [ 26.276159][ T28] audit: type=1400 audit(1762325146.726:166): avc: denied { add_name } for pid=525 comm="syz.4.85" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.297584][ T10] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 26.299542][ T28] audit: type=1400 audit(1762325146.726:167): avc: denied { create } for pid=525 comm="syz.4.85" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 26.327888][ T457] F2FS-fs (loop3): Found nat_bits in checkpoint [ 26.329244][ T28] audit: type=1400 audit(1762325146.726:168): avc: denied { associate } for pid=525 comm="syz.4.85" name="control" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.364698][ T28] audit: type=1400 audit(1762325146.766:169): avc: denied { create } for pid=525 comm="syz.4.85" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.385886][ T28] audit: type=1400 audit(1762325146.766:170): avc: denied { write open } for pid=525 comm="syz.4.85" path="/16/file0/file0" dev="loop4" ino=1048606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.409720][ T28] audit: type=1400 audit(1762325146.786:171): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.430426][ T28] audit: type=1400 audit(1762325146.846:172): avc: denied { unmount } for pid=538 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.449912][ T457] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 26.505283][ T28] audit: type=1400 audit(1762325146.986:173): avc: denied { write } for pid=456 comm="syz.3.55" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.527255][ T28] audit: type=1400 audit(1762325147.006:174): avc: denied { add_name } for pid=456 comm="syz.3.55" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.535962][ T550] loop2: detected capacity change from 0 to 8192 [ 26.708270][ T566] Illegal XDP return value 4294967294 on prog (id 47) dev N/A, expect packet loss! [ 26.888355][ T584] loop2: detected capacity change from 0 to 1024 [ 26.928678][ T584] EXT4-fs: Ignoring removed orlov option [ 27.006441][ T588] loop1: detected capacity change from 0 to 8192 [ 27.018006][ T584] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.024547][ T284] syz-executor (284) used greatest stack depth: 22016 bytes left [ 27.204973][ T286] EXT4-fs (loop2): unmounting filesystem. [ 27.317970][ T616] syz.4.125 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 27.433491][ T628] capability: warning: `syz.1.131' uses 32-bit capabilities (legacy support in use) [ 27.527365][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.540241][ T623] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.556328][ T623] device bridge_slave_0 entered promiscuous mode [ 27.571754][ T291] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.582662][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.593138][ T623] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.618039][ T623] device bridge_slave_1 entered promiscuous mode [ 27.740684][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.747777][ T623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.755049][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.760739][ T291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.762077][ T623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.778858][ T291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.790791][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.795215][ T291] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.807037][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.814495][ T291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.828074][ T291] usb 3-1: Product: syz [ 27.835572][ T291] usb 3-1: Manufacturer: syz [ 27.840891][ T339] device bridge_slave_1 left promiscuous mode [ 27.842395][ T291] usb 3-1: SerialNumber: syz [ 27.847018][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.860925][ T339] device bridge_slave_0 left promiscuous mode [ 27.871455][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.884225][ T339] device veth1_macvtap left promiscuous mode [ 27.893612][ T339] device veth0_vlan left promiscuous mode [ 27.969744][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.007518][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.014995][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.023789][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.032738][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.041303][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.048348][ T510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.056871][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.065973][ T291] usb 3-1: 0:2 : does not exist [ 28.070545][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.073537][ T291] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 28.079128][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.090760][ T291] usb 3-1: USB disconnect, device number 2 [ 28.093071][ T510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.111728][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.121400][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.131258][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.139273][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.152709][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.161328][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.161999][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.180857][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.185154][ T623] device veth0_vlan entered promiscuous mode [ 28.190809][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.204790][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.209652][ T19] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.238498][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.248471][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.259333][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.266933][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.280560][ T19] usb 2-1: config 0 descriptor?? [ 28.281218][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.294211][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.305536][ T623] device veth1_macvtap entered promiscuous mode [ 28.315927][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.324547][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.333298][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.333492][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.360634][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.372839][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.454964][ T678] mmap: syz.5.149 (678) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 28.483691][ T680] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 28.496018][ T680] SELinux: failed to load policy [ 28.627395][ T695] loop4: detected capacity change from 0 to 256 [ 28.636268][ T695] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 28.684544][ T697] syz.2.157[697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.684615][ T697] syz.2.157[697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.697149][ T19] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xe [ 28.736116][ T19] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.748529][ T19] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 28.765646][ T19] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 28.969646][ T718] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.989592][ T718] FAT-fs (loop5): unable to read boot sector [ 29.062124][ T291] usb 2-1: USB disconnect, device number 2 [ 29.149421][ T727] raw_sendmsg: syz.2.171 forgot to set AF_INET. Fix it! [ 29.149994][ T729] loop4: detected capacity change from 0 to 512 [ 29.165074][ T701] loop0: detected capacity change from 0 to 40427 [ 29.188268][ T701] F2FS-fs (loop0): Image doesn't support compression [ 29.209952][ T729] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.222540][ T701] F2FS-fs (loop0): heap/no_heap options were deprecated [ 29.236927][ T701] F2FS-fs (loop0): invalid crc value [ 29.243342][ T729] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 29.257771][ T701] F2FS-fs (loop0): Found nat_bits in checkpoint [ 29.261747][ T729] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.170: bg 0: block 104: invalid block bitmap [ 29.277437][ T729] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 29.287109][ T729] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.170: invalid indirect mapped block 1 (level 1) [ 29.309786][ T729] EXT4-fs (loop4): 1 truncate cleaned up [ 29.315554][ T729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.342897][ T287] EXT4-fs (loop4): unmounting filesystem. [ 29.352772][ T701] F2FS-fs (loop0): Start checkpoint disabled! [ 29.360944][ T701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 29.419645][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 29.427807][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.445152][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.462876][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.471177][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.471427][ T701] syz.0.160: attempt to access beyond end of device [ 29.471427][ T701] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 29.478657][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.499076][ T691] loop5: detected capacity change from 0 to 131072 [ 29.500610][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.507703][ T691] F2FS-fs (loop5): Invalid segment/section count (31, 24 x 150994945) [ 29.513639][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.522075][ T691] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 29.530319][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 29.538063][ T701] syz.0.160: attempt to access beyond end of device [ 29.538063][ T701] loop0: rw=2049, sector=53264, nr_sectors = 24 limit=40427 [ 29.544923][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.559285][ T691] F2FS-fs (loop5): invalid crc value [ 29.565943][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.571824][ T701] syz.0.160: attempt to access beyond end of device [ 29.571824][ T701] loop0: rw=2049, sector=53304, nr_sectors = 32 limit=40427 [ 29.578616][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.592826][ T701] syz.0.160: attempt to access beyond end of device [ 29.592826][ T701] loop0: rw=2049, sector=53360, nr_sectors = 8 limit=40427 [ 29.600091][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.620288][ T691] F2FS-fs (loop5): Found nat_bits in checkpoint [ 29.622911][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.647992][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.649497][ T701] syz.0.160: attempt to access beyond end of device [ 29.649497][ T701] loop0: rw=2049, sector=53400, nr_sectors = 24 limit=40427 [ 29.657418][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.673712][ T701] syz.0.160: attempt to access beyond end of device [ 29.673712][ T701] loop0: rw=2049, sector=53448, nr_sectors = 24 limit=40427 [ 29.679205][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 29.692944][ T691] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 29.698279][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.705265][ T691] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 29.719996][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.727395][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.735056][ T701] syz.0.160: attempt to access beyond end of device [ 29.735056][ T701] loop0: rw=2049, sector=53480, nr_sectors = 16 limit=40427 [ 29.745062][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.757688][ T691] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 29.767152][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.767178][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.767198][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.767217][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.767237][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.767255][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.775427][ T691] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 29.796836][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.819058][ T691] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 29.821247][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.845263][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.852945][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.859278][ T8] kworker/u4:0: attempt to access beyond end of device [ 29.859278][ T8] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 29.860603][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.874668][ T8] kworker/u4:0: attempt to access beyond end of device [ 29.874668][ T8] loop0: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 29.882669][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.903708][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.911551][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.918973][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.926762][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.934483][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.949997][ T291] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 30.013244][ T756] fido_id[756]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.138759][ T765] loop0: detected capacity change from 0 to 1024 [ 30.173641][ T765] EXT4-fs: Ignoring removed orlov option [ 30.184590][ T765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.276261][ T765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.383591][ T285] EXT4-fs (loop0): unmounting filesystem. [ 30.506936][ T808] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004D†ü0xffffffffffffffff [ 30.733947][ T832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 30.771372][ T832] device gretap0 entered promiscuous mode [ 30.777678][ T832] bridge0: port 3(macsec1) entered blocking state [ 30.791531][ T832] bridge0: port 3(macsec1) entered disabled state [ 30.808638][ T832] device macsec1 entered promiscuous mode [ 30.815063][ T832] bridge0: port 3(macsec1) entered blocking state [ 30.821539][ T832] bridge0: port 3(macsec1) entered forwarding state [ 30.962536][ T855] 9pnet: p9_errstr2errno: server reported unknown error @í [ 30.999594][ T858] binder: 857:858 ioctl c0306201 200000000040 returned -14 [ 31.049853][ T657] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.061585][ T869] device bridge1 entered promiscuous mode [ 31.107907][ T875] loop2: detected capacity change from 0 to 512 [ 31.140329][ T875] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.234: casefold flag without casefold feature [ 31.163207][ T875] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.234: couldn't read orphan inode 15 (err -117) [ 31.189297][ T875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 31.222266][ T286] EXT4-fs (loop2): unmounting filesystem. [ 31.241017][ T657] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.254566][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 31.254581][ T28] audit: type=1326 audit(1762325151.736:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b458f6c9 code=0x7ffc0000 [ 31.289727][ T657] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 31.299716][ T665] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 31.303736][ T657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.322770][ T28] audit: type=1326 audit(1762325151.776:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b458f6c9 code=0x7ffc0000 [ 31.322985][ T657] usb 2-1: config 0 descriptor?? [ 31.352439][ T657] usb 2-1: bad CDC descriptors [ 31.521019][ T665] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.531193][ T665] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.542479][ T665] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.551965][ T665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.560148][ T665] usb 5-1: Product: syz [ 31.564348][ T665] usb 5-1: Manufacturer: syz [ 31.568962][ T665] usb 5-1: SerialNumber: syz [ 31.572196][ T657] usb 2-1: USB disconnect, device number 3 [ 31.605027][ T28] audit: type=1400 audit(1762325152.086:281): avc: denied { ioctl } for pid=897 comm="syz.5.242" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.631317][ T898] input: syz0 as /devices/virtual/input/input4 [ 31.644821][ T28] audit: type=1400 audit(1762325152.116:282): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=628 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.667182][ T902] x_tables: ip6_tables: CT target: only valid in raw table, not ethtool [ 31.668579][ T28] audit: type=1400 audit(1762325152.116:283): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=628 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.699141][ T28] audit: type=1400 audit(1762325152.116:284): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=628 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.777273][ T665] usb 5-1: 0:2 : does not exist [ 31.783857][ T665] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 31.795867][ T665] usb 5-1: USB disconnect, device number 2 [ 31.805807][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.884978][ T657] hid-generic 0001:0009:0001.0003: item fetching failed at offset 0/1 [ 31.893328][ T657] hid-generic: probe of 0001:0009:0001.0003 failed with error -22 [ 32.001886][ T917] loop0: detected capacity change from 0 to 40427 [ 32.009255][ T917] F2FS-fs (loop0): fault_injection options not supported [ 32.016602][ T917] F2FS-fs (loop0): fault_type options not supported [ 32.024014][ T917] F2FS-fs (loop0): invalid crc value [ 32.030465][ T917] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.051201][ T917] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.079037][ T28] audit: type=1400 audit(1762325152.556:285): avc: denied { append } for pid=916 comm="syz.0.249" path="/54/file0/file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.080186][ T917] syz.0.249: attempt to access beyond end of device [ 32.080186][ T917] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 32.103556][ T28] audit: type=1400 audit(1762325152.566:286): avc: denied { setattr } for pid=916 comm="syz.0.249" name="file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.335145][ T942] loop0: detected capacity change from 0 to 512 [ 32.403981][ T28] audit: type=1326 audit(1762325152.886:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897818f6c9 code=0x7ffc0000 [ 32.429052][ T28] audit: type=1326 audit(1762325152.886:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f897818f6c9 code=0x7ffc0000 [ 32.599719][ T665] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.786406][ T960] loop1: detected capacity change from 0 to 40427 [ 32.794665][ T960] F2FS-fs (loop1): fault_injection options not supported [ 32.805727][ T960] F2FS-fs (loop1): invalid crc value [ 32.812798][ T665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.824020][ T960] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 32.835405][ T665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.847563][ T665] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.876845][ T665] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.887143][ T960] F2FS-fs (loop1): Start checkpoint disabled! [ 32.893894][ T665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.902723][ T665] usb 5-1: config 0 descriptor?? [ 32.909947][ T960] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 33.039717][ T657] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 33.220741][ T657] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.227388][ T657] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 33.236683][ T657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.247372][ T657] usb 3-1: config 0 descriptor?? [ 33.289734][ T291] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.321999][ T665] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 33.331065][ T665] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 33.350725][ T665] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 33.371117][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.397641][ T1009] loop5: detected capacity change from 0 to 40427 [ 33.408270][ T1009] F2FS-fs (loop5): Found nat_bits in checkpoint [ 33.440282][ T1009] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 33.471168][ T291] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.479515][ T291] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 33.488233][ T291] usb 1-1: config 6 has no interface number 0 [ 33.494516][ T291] usb 1-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 33.505820][ T291] usb 1-1: config 6 interface 200 has no altsetting 0 [ 33.514057][ T291] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 33.523207][ T291] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 33.538227][ T291] usb 1-1: Product: syz [ 33.542771][ T291] usb 1-1: Manufacturer: syz [ 33.547361][ T291] usb 1-1: SerialNumber: syz [ 33.571354][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.584454][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.610921][ T60] usb 5-1: USB disconnect, device number 3 [ 33.616602][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 33.626439][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 33.636257][ T24] usb 2-1: SerialNumber: syz [ 33.656510][ T657] sony 0003:1345:3008.0005: unbalanced delimiter at end of report description [ 33.665778][ T657] sony 0003:1345:3008.0005: parse failed [ 33.671978][ T657] sony: probe of 0003:1345:3008.0005 failed with error -22 [ 33.844647][ T24] usb 2-1: 0:2 : does not exist [ 33.851214][ T24] usb 2-1: USB disconnect, device number 4 [ 33.871697][ T60] usb 3-1: USB disconnect, device number 3 [ 33.889769][ T19] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 34.060268][ T1018] udevd[1018]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.081109][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.092093][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.102556][ T19] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 34.111621][ T19] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 34.125263][ T291] usb 1-1: USB disconnect, device number 2 [ 34.136195][ T19] usb 6-1: Manufacturer: syz [ 34.137981][ T1023] netlink: 116 bytes leftover after parsing attributes in process `syz.4.289'. [ 34.145282][ T19] usb 6-1: config 0 descriptor?? [ 34.152073][ T1023] Zero length message leads to an empty skb [ 34.414705][ T1033] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.427127][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 34.581231][ T1046] incfs: ino conflict with backing FS 1 [ 34.587529][ T1046] incfs: ino conflict with backing FS 2 [ 34.639798][ T291] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.642484][ T1055] loop2: detected capacity change from 0 to 1024 [ 34.659781][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 34.670759][ T1055] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.680244][ T1059] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.691756][ T1059] FAT-fs (loop1): unable to read boot sector [ 34.714439][ T286] EXT4-fs (loop2): unmounting filesystem. [ 34.723408][ T1064] loop0: detected capacity change from 0 to 512 [ 34.731929][ T1064] EXT4-fs: Ignoring removed oldalloc option [ 34.758235][ T1064] EXT4-fs (loop0): 1 truncate cleaned up [ 34.764147][ T1064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.792700][ T285] EXT4-fs (loop0): unmounting filesystem. [ 34.839816][ T291] usb 2-1: Using ep0 maxpacket: 32 [ 34.845033][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 34.851382][ T291] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 34.859594][ T291] usb 2-1: config 0 has no interface number 0 [ 34.865997][ T39] usb 5-1: config 0 has no interfaces? [ 34.871615][ T39] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.880978][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.890407][ T39] usb 5-1: config 0 descriptor?? [ 34.895467][ T291] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 34.911493][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.922034][ T291] usb 2-1: Product: syz [ 34.927311][ T291] usb 2-1: Manufacturer: syz [ 34.932147][ T291] usb 2-1: SerialNumber: syz [ 34.937503][ T291] usb 2-1: config 0 descriptor?? [ 34.966394][ T19] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0006/input/input6 [ 34.982701][ T19] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0006/input/input7 [ 34.996158][ T1081] loop2: detected capacity change from 0 to 512 [ 35.003772][ T19] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0006/input/input8 [ 35.009643][ T1081] EXT4-fs: Ignoring removed oldalloc option [ 35.021279][ T19] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0006/input/input9 [ 35.040429][ T1081] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.054766][ T19] uclogic 0003:256C:006D.0006: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 35.100707][ T1081] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 35.120406][ T1081] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.314: bg 0: block 248: padding at end of block bitmap is not set [ 35.152325][ T39] usb 5-1: USB disconnect, device number 4 [ 35.162511][ T291] usb 2-1: USB disconnect, device number 5 [ 35.174050][ T1081] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.314: Failed to acquire dquot type 1 [ 35.192068][ T1081] EXT4-fs (loop2): 1 truncate cleaned up [ 35.197733][ T1081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.210708][ T24] usb 6-1: USB disconnect, device number 2 [ 35.229768][ T441] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:4: Failed to release dquot type 1 [ 35.241748][ T1081] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 35.254415][ T286] EXT4-fs (loop2): unmounting filesystem. [ 35.257338][ T1081] syz.2.314 (1081) used greatest stack depth: 20320 bytes left [ 35.410269][ T1106] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.419476][ T1106] FAT-fs (loop5): unable to read boot sector [ 35.430980][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.446875][ T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.590088][ T1125] input: syz1 as /devices/virtual/input/input10 [ 35.596362][ T1125] input: failed to attach handler leds to device input10, error: -6 [ 35.640890][ T19] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 35.650953][ T19] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 35.673192][ T19] usb 1-1: config 1 interface 0 has no altsetting 0 [ 35.690514][ T19] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 35.709646][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.732104][ T1131] loop4: detected capacity change from 0 to 2048 [ 35.739433][ T19] usb 1-1: Product: syz [ 35.744363][ T19] usb 1-1: Manufacturer: syz [ 35.749441][ T1131] EXT4-fs: Ignoring removed bh option [ 35.755166][ T19] usb 1-1: SerialNumber: syz [ 35.761794][ T1091] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 35.769268][ T1091] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 35.780135][ T1131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.805099][ T1131] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.822235][ T1131] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 35.836468][ T1131] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.836468][ T1131] [ 35.850221][ T1131] EXT4-fs (loop4): Total free blocks count 0 [ 35.856687][ T1131] EXT4-fs (loop4): Free/Dirty block details [ 35.875517][ T1131] EXT4-fs (loop4): free_blocks=2415919104 [ 35.881948][ T1131] EXT4-fs (loop4): dirty_blocks=48 [ 35.887383][ T1131] EXT4-fs (loop4): Block reservation details [ 35.893704][ T1131] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 35.925818][ T1152] overlayfs: missing 'lowerdir' [ 35.931799][ T287] EXT4-fs (loop4): unmounting filesystem. [ 35.997888][ T1158] loop4: detected capacity change from 0 to 512 [ 36.008350][ T1158] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.020422][ T1160] input: syz1 as /devices/virtual/input/input11 [ 36.028701][ T1158] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.042493][ T1158] EXT4-fs (loop4): 1 truncate cleaned up [ 36.048238][ T1158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.067194][ T1160] input: failed to attach handler leds to device input11, error: -6 [ 36.076316][ T287] EXT4-fs (loop4): unmounting filesystem. [ 36.245092][ T1185] syz.1.359[1185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.245178][ T1185] syz.1.359[1185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.256810][ T1181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1181 comm=syz.4.358 [ 36.306931][ T1185] netlink: 96 bytes leftover after parsing attributes in process `syz.1.359'. [ 36.360523][ T1194] netlink: 'syz.1.364': attribute type 3 has an invalid length. [ 36.382007][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 36.382020][ T28] audit: type=1400 audit(1762325156.866:320): avc: denied { mounton } for pid=1197 comm="syz.1.365" path=2F35372FE91F7189591E9233614B dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 36.429742][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 36.609716][ T60] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.610733][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.638323][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.658218][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.683372][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.707350][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.716021][ T24] usb 6-1: config 0 descriptor?? [ 36.733343][ T28] audit: type=1400 audit(1762325157.216:321): avc: denied { write } for pid=1217 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.754976][ T28] audit: type=1400 audit(1762325157.216:322): avc: denied { nlmsg_write } for pid=1217 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.782457][ T19] (unnamed net_device) (uninitialized): Assigned a random MAC address: c6:07:dd:49:06:12 [ 36.805790][ T19] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 36.816200][ T19] usb 1-1: USB disconnect, device number 3 [ 36.822677][ T60] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 36.846959][ T28] audit: type=1400 audit(1762325157.326:323): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.852572][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.888857][ T28] audit: type=1400 audit(1762325157.326:324): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.908045][ T60] usb 3-1: Product: syz [ 36.914646][ T60] usb 3-1: Manufacturer: syz [ 36.919240][ T60] usb 3-1: SerialNumber: syz [ 36.949760][ T28] audit: type=1400 audit(1762325157.326:325): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=2482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.999742][ T28] audit: type=1400 audit(1762325157.326:326): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.037421][ T28] audit: type=1400 audit(1762325157.326:327): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.061216][ T28] audit: type=1400 audit(1762325157.416:328): avc: denied { read } for pid=1229 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.084412][ T28] audit: type=1400 audit(1762325157.416:329): avc: denied { open } for pid=1229 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.133256][ T24] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 37.152664][ T24] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 37.456159][ T1296] loop0: detected capacity change from 0 to 512 [ 37.470649][ T1296] EXT4-fs: Ignoring removed oldalloc option [ 37.498932][ T1296] EXT4-fs (loop0): 1 truncate cleaned up [ 37.506523][ T1296] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.561565][ T285] EXT4-fs (loop0): unmounting filesystem. [ 37.571317][ T1309] loop1: detected capacity change from 0 to 2048 [ 37.584155][ T60] rtl8150 3-1:1.0: couldn't reset the device [ 37.591664][ T1311] loop0: detected capacity change from 0 to 16 [ 37.592675][ T60] rtl8150: probe of 3-1:1.0 failed with error -5 [ 37.603313][ T1311] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.615618][ T60] usb 3-1: USB disconnect, device number 4 [ 37.624286][ T1313] tipc: Started in network mode [ 37.629254][ T1313] tipc: Node identity 1, cluster identity 4711 [ 37.637286][ T1313] tipc: Node number set to 1 [ 37.658266][ T1309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.686816][ T1311] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 37.709350][ T1309] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.400: bg 0: block 234: padding at end of block bitmap is not set [ 37.713019][ T1311] bio_check_eod: 3 callbacks suppressed [ 37.713033][ T1311] syz.0.401: attempt to access beyond end of device [ 37.713033][ T1311] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 37.732119][ T1309] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 37.743588][ T1311] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 37.764713][ T1311] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 37.771450][ T1309] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.771450][ T1309] [ 37.774455][ T1320] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 37.784297][ T1309] EXT4-fs (loop1): Total free blocks count 0 [ 37.793550][ T1320] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 37.799461][ T1309] EXT4-fs (loop1): Free/Dirty block details [ 37.813707][ T1309] EXT4-fs (loop1): free_blocks=0 [ 37.818655][ T1309] EXT4-fs (loop1): dirty_blocks=48 [ 37.824084][ T1309] EXT4-fs (loop1): Block reservation details [ 37.830145][ T1309] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 37.871178][ T283] EXT4-fs (loop1): unmounting filesystem. [ 37.973817][ T1343] loop0: detected capacity change from 0 to 256 [ 37.983388][ T1347] loop4: detected capacity change from 0 to 512 [ 38.014074][ T1347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.017764][ T1351] loop1: detected capacity change from 0 to 1024 [ 38.023284][ T1347] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.055270][ T1351] EXT4-fs: Ignoring removed bh option [ 38.062890][ T1351] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.081191][ T1351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 38.092315][ T1347] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.416: invalid size [ 38.112686][ T1347] EXT4-fs (loop4): Remounting filesystem read-only [ 38.114140][ T1351] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.417: Allocating blocks 385-513 which overlap fs metadata [ 38.164724][ T287] EXT4-fs (loop4): unmounting filesystem. [ 38.183347][ T1350] EXT4-fs (loop1): pa ffff8881338a3f18: logic 16, phys. 129, len 24 [ 38.191457][ T1350] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 38.212238][ T283] EXT4-fs (loop1): unmounting filesystem. [ 38.335097][ T1381] x_tables: duplicate underflow at hook 4 [ 38.459796][ C1] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 38.470529][ T6] usb 6-1: USB disconnect, device number 3 [ 38.533094][ T1397] loop2: detected capacity change from 0 to 4096 [ 38.548704][ T1397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.569559][ T286] EXT4-fs (loop2): unmounting filesystem. [ 38.619751][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 38.849741][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.873327][ T1425] loop2: detected capacity change from 0 to 1024 [ 38.882258][ T1425] EXT4-fs: Ignoring removed orlov option [ 38.890335][ T1425] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.029711][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 39.041841][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 39.067190][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 39.094039][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.122284][ T24] usb 2-1: config 0 descriptor?? [ 39.264663][ T1441] loop4: detected capacity change from 0 to 8192 [ 39.506585][ T1462] user requested TSC rate below hardware speed [ 39.535537][ T24] hid (null): invalid report_size 1271304562 [ 39.541958][ T24] hid (null): unknown global tag 0xe [ 39.626256][ T1466] device bridge0 entered promiscuous mode [ 39.632083][ T1466] device macsec1 entered promiscuous mode [ 39.638275][ T1466] bridge0: port 3(macsec1) entered blocking state [ 39.644768][ T1466] bridge0: port 3(macsec1) entered disabled state [ 39.652002][ T1466] device bridge0 left promiscuous mode [ 39.716152][ T286] EXT4-fs (loop2): unmounting filesystem. [ 39.747403][ T60] usb 2-1: USB disconnect, device number 6 [ 39.955946][ T1501] syz.2.484[1501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.956016][ T1501] syz.2.484[1501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.979469][ T1505] device veth0_to_bond entered promiscuous mode [ 39.998166][ T1505] device veth0_to_bond left promiscuous mode [ 40.039743][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.220754][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.231726][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.241480][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.254417][ T6] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.263466][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.274240][ T6] usb 5-1: config 0 descriptor?? [ 40.471818][ T1515] loop2: detected capacity change from 0 to 40427 [ 40.483814][ T1515] F2FS-fs (loop2): Image doesn't support compression [ 40.499445][ T1515] F2FS-fs (loop2): heap/no_heap options were deprecated [ 40.517639][ T1515] F2FS-fs (loop2): invalid crc value [ 40.524457][ T1515] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.600399][ T1515] F2FS-fs (loop2): Start checkpoint disabled! [ 40.630553][ T1515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 40.658291][ T1555] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 40.684934][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xe [ 40.699375][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 40.708792][ T1515] syz.2.491: attempt to access beyond end of device [ 40.708792][ T1515] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 40.713227][ T1564] input: syz0 as /devices/virtual/input/input12 [ 40.722846][ T6] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 40.737277][ T1515] syz.2.491: attempt to access beyond end of device [ 40.737277][ T1515] loop2: rw=2049, sector=53280, nr_sectors = 32 limit=40427 [ 40.752987][ T6] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 40.765792][ T1515] syz.2.491: attempt to access beyond end of device [ 40.765792][ T1515] loop2: rw=2049, sector=53320, nr_sectors = 32 limit=40427 [ 40.789128][ T1515] syz.2.491: attempt to access beyond end of device [ 40.789128][ T1515] loop2: rw=2049, sector=53360, nr_sectors = 24 limit=40427 [ 40.822990][ T1515] syz.2.491: attempt to access beyond end of device [ 40.822990][ T1515] loop2: rw=2049, sector=53416, nr_sectors = 16 limit=40427 [ 40.843680][ T1515] syz.2.491: attempt to access beyond end of device [ 40.843680][ T1515] loop2: rw=2049, sector=53448, nr_sectors = 8 limit=40427 [ 40.869824][ T1515] syz.2.491: attempt to access beyond end of device [ 40.869824][ T1515] loop2: rw=2049, sector=53464, nr_sectors = 16 limit=40427 [ 40.976959][ T510] kworker/u4:5: attempt to access beyond end of device [ 40.976959][ T510] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 40.993959][ T6] usb 5-1: USB disconnect, device number 5 [ 41.003449][ T510] kworker/u4:5: attempt to access beyond end of device [ 41.003449][ T510] loop2: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 41.031731][ T1590] loop0: detected capacity change from 0 to 512 [ 41.069602][ T1593] support for cryptoloop has been removed. Use dm-crypt instead. [ 41.077693][ T1590] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 41.095844][ T1590] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.107899][ T1590] EXT4-fs warning (device loop0): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.194507][ T1590] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 41.215505][ T1590] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.526: bg 0: block 40: padding at end of block bitmap is not set [ 41.239039][ T1590] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 41.248063][ T1590] EXT4-fs (loop0): 1 truncate cleaned up [ 41.253848][ T1590] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.308925][ T285] EXT4-fs (loop0): unmounting filesystem. [ 41.371566][ T1620] netlink: 40 bytes leftover after parsing attributes in process `syz.5.539'. [ 41.394079][ T1624] 9pnet: p9_errstr2errno: server reported unknown error  [ 41.396776][ T1620] netlink: 40 bytes leftover after parsing attributes in process `syz.5.539'. [ 41.414489][ T1620] netlink: 40 bytes leftover after parsing attributes in process `syz.5.539'. [ 41.548294][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 41.548308][ T28] audit: type=1400 audit(1762325162.026:375): avc: denied { mount } for pid=1651 comm="syz.2.553" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.579522][ T1655] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.600343][ T28] audit: type=1400 audit(1762325162.076:376): avc: denied { bind } for pid=1659 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.626659][ T28] audit: type=1400 audit(1762325162.076:377): avc: denied { name_bind } for pid=1659 comm="syz.2.556" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 41.648434][ T1666] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000300000000000000000000003 [ 41.680632][ T28] audit: type=1400 audit(1762325162.086:378): avc: denied { node_bind } for pid=1659 comm="syz.2.556" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 41.760610][ T1674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.767848][ T1674] IPv6: NLM_F_CREATE should be set when creating new route [ 41.775077][ T1674] IPv6: NLM_F_CREATE should be set when creating new route [ 41.775647][ T1683] loop0: detected capacity change from 0 to 128 [ 41.923433][ T1689] syz.5.571[1689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.923506][ T1689] syz.5.571[1689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.979411][ T1696] loop5: detected capacity change from 0 to 512 [ 42.002389][ T1696] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.023509][ T1701] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 42.033016][ T1696] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 42.045579][ T1696] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.064517][ T1696] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.573: corrupted inode contents [ 42.080439][ T1696] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #2: comm syz.5.573: mark_inode_dirty error [ 42.097713][ T1696] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.573: corrupted inode contents [ 42.100306][ T291] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 42.109965][ T1696] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.573: mark_inode_dirty error [ 42.138062][ T28] audit: type=1400 audit(1762325162.616:379): avc: denied { rmdir } for pid=1693 comm="syz.5.573" name="file0" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.161035][ T623] EXT4-fs (loop5): unmounting filesystem. [ 42.218428][ T28] audit: type=1400 audit(1762325162.696:380): avc: denied { bind } for pid=1719 comm="syz.5.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.258330][ T28] audit: type=1400 audit(1762325162.736:381): avc: denied { load_policy } for pid=1723 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.258354][ T1724] SELinux: policydb version 892417561 does not match my version range 15-33 [ 42.289522][ T1724] SELinux: failed to load policy [ 42.320764][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.339719][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.358371][ T291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.374093][ T291] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.383301][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.392280][ T291] usb 5-1: config 0 descriptor?? [ 42.642415][ T1749] loop1: detected capacity change from 0 to 256 [ 42.677742][ T1749] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 42.724422][ T28] audit: type=1400 audit(1762325163.206:382): avc: denied { read append } for pid=1746 comm="syz.1.591" path="/107/file0/hugetlb.2MB.usage_in_bytes" dev="loop1" ino=1048622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.789778][ T39] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 42.802488][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.811140][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.818644][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.836044][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.846124][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.862565][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.879364][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.893736][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.907093][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.914925][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.924106][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.932322][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.940171][ T291] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 42.948659][ T291] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 42.957661][ T291] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 43.000953][ T39] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.003691][ T1775] loop0: detected capacity change from 0 to 128 [ 43.041831][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 43.058035][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 43.079492][ T1775] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 43.091269][ T39] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 43.109705][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.120711][ T39] usb 6-1: Product: syz [ 43.124616][ T1775] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 43.124883][ T39] usb 6-1: Manufacturer: syz [ 43.133222][ T1775] FAT-fs (loop0): Filesystem has been set read-only [ 43.144450][ T1775] syz.0.604: attempt to access beyond end of device [ 43.144450][ T1775] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.157543][ T39] usb 6-1: SerialNumber: syz [ 43.158206][ T39] usb 6-1: config 0 descriptor?? [ 43.167530][ T291] usb 5-1: USB disconnect, device number 6 [ 43.184125][ T39] usb 6-1: Found UVC 34.00 device syz (8086:0b5b) [ 43.199730][ T39] usb 6-1: No valid video chain found. [ 43.247763][ T1787] loop0: detected capacity change from 0 to 512 [ 43.261762][ T1787] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.273621][ T1787] EXT4-fs (loop0): 1 truncate cleaned up [ 43.279319][ T1787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.284917][ T1777] loop1: detected capacity change from 0 to 40427 [ 43.294240][ T28] audit: type=1400 audit(1762325163.776:383): avc: denied { append } for pid=1786 comm="syz.0.608" path="/140/bus/blkio.bfq.io_service_bytes_recursive" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.303067][ T1777] F2FS-fs (loop1): heap/no_heap options were deprecated [ 43.326539][ T1777] F2FS-fs (loop1): fault_injection options not supported [ 43.333758][ T1777] F2FS-fs (loop1): fault_type options not supported [ 43.346714][ T285] EXT4-fs (loop0): unmounting filesystem. [ 43.352927][ T1777] F2FS-fs (loop1): invalid crc value [ 43.363916][ T1777] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.406497][ T1795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 43.416201][ T39] usb 6-1: USB disconnect, device number 4 [ 43.435670][ T1777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.444505][ T1797] loop2: detected capacity change from 0 to 2048 [ 43.461029][ T1797] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.479556][ T1797] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.494006][ T1797] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 9: comm syz.2.611: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 43.512817][ T1797] EXT4-fs (loop2): Remounting filesystem read-only [ 43.521203][ T1797] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 9: comm syz.2.611: path /166/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 43.541892][ T1797] EXT4-fs (loop2): Remounting filesystem read-only [ 43.560668][ T286] EXT4-fs (loop2): unmounting filesystem. [ 43.629764][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 43.655276][ T1815] xt_bpf: check failed: parse error [ 43.730265][ T1821] bridge0: port 4(gretap0) entered blocking state [ 43.736730][ T1821] bridge0: port 4(gretap0) entered disabled state [ 43.788530][ T28] audit: type=1400 audit(1762325164.266:384): avc: denied { map } for pid=1830 comm="syz.2.626" path="socket:[22603]" dev="sockfs" ino=22603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 43.839711][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 43.844795][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.845995][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.863565][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.873485][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.886448][ T6] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.895521][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.907042][ T6] usb 1-1: config 0 descriptor?? [ 44.013275][ T1849] loop5: detected capacity change from 0 to 256 [ 44.047159][ T1847] loop2: detected capacity change from 0 to 8192 [ 44.137252][ T1860] loop5: detected capacity change from 0 to 512 [ 44.141074][ T1862] device pim6reg1 entered promiscuous mode [ 44.163850][ T1860] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 44.173154][ T1860] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.196146][ T623] EXT4-fs (loop5): unmounting filesystem. [ 44.316965][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000B/input/input13 [ 44.340663][ T6] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 46.229668][ C1] sched: RT throttling activated [ 46.229721][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 46.267193][ T1873] loop1: detected capacity change from 0 to 2048 [ 46.699757][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 47.223953][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 47.223967][ T28] audit: type=1400 audit(1762325167.706:388): avc: denied { append } for pid=1872 comm="syz.1.645" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.301386][ T1873] loop1: p1 < > p4 [ 47.316297][ T1873] loop1: p4 size 8388608 extends beyond EOD, truncated [ 47.405069][ T362] udevd[362]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 47.405226][ T1018] udevd[1018]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 47.634600][ T1894] loop1: detected capacity change from 0 to 256 [ 47.657055][ T1882] loop2: detected capacity change from 0 to 40427 [ 47.665029][ T1882] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 47.674805][ T28] audit: type=1400 audit(1762325168.166:389): avc: denied { shutdown } for pid=1895 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.679313][ T1882] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 47.709817][ T1882] F2FS-fs (loop2): invalid crc_offset: 266236 [ 47.741901][ T28] audit: type=1400 audit(1762325168.226:390): avc: denied { accept } for pid=1901 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.769724][ T39] usb 3-1: device not accepting address 5, error -71 [ 47.777136][ T1882] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.840484][ T1882] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 47.849708][ T1882] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.914519][ T1915] loop0: detected capacity change from 0 to 512 [ 47.925341][ T28] audit: type=1400 audit(1762325168.406:391): avc: denied { rename } for pid=1881 comm="syz.2.649" name="file0" dev="loop2" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.939254][ T1915] EXT4-fs: Ignoring removed nobh option [ 47.956659][ T28] audit: type=1400 audit(1762325168.406:392): avc: denied { unlink } for pid=1881 comm="syz.2.649" name="bus" dev="loop2" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.960021][ T19] usb 1-1: USB disconnect, device number 4 [ 47.986543][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 47.995960][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 48.028950][ T1915] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.056712][ T1915] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 48.116301][ T1915] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.661: Corrupt directory, running e2fsck is recommended [ 48.151427][ T1925] loop2: detected capacity change from 0 to 256 [ 48.160760][ T1925] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.193666][ T1915] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 48.199880][ T1925] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 48.220683][ T1929] device sit0 entered promiscuous mode [ 48.226266][ T1915] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.661: corrupted in-inode xattr [ 48.230328][ T1925] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 48.243294][ T1923] loop5: detected capacity change from 0 to 8192 [ 48.250442][ T1929] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 48.264331][ T1915] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.661: couldn't read orphan inode 15 (err -117) [ 48.291574][ T1929] netlink: 1 bytes leftover after parsing attributes in process `syz.1.667'. [ 48.310178][ T1915] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.486894][ T1915] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.508801][ T1915] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 48.531737][ T1915] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.661: Corrupt directory, running e2fsck is recommended [ 48.566296][ T1915] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.584209][ T1915] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 48.595201][ T1915] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.661: Corrupt directory, running e2fsck is recommended [ 48.611862][ T1915] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.623810][ T1915] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 48.634034][ T1915] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.661: Corrupt directory, running e2fsck is recommended [ 48.647441][ T1915] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.692731][ T285] EXT4-fs (loop0): unmounting filesystem. [ 48.706755][ T1959] loop1: detected capacity change from 0 to 512 [ 48.714803][ T1961] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 48.722003][ T1959] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.756074][ T1959] EXT4-fs (loop1): 1 truncate cleaned up [ 48.763232][ T1959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.804760][ T283] EXT4-fs (loop1): unmounting filesystem. [ 48.828202][ T1973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 48.872329][ T28] audit: type=1400 audit(1762325169.356:393): avc: denied { getopt } for pid=1980 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.900504][ T1984] loop1: detected capacity change from 0 to 256 [ 48.907718][ T1984] exfat: Deprecated parameter 'utf8' [ 48.913207][ T1984] exfat: Deprecated parameter 'namecase' [ 48.921388][ T1984] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 48.962019][ T28] audit: type=1400 audit(1762325169.446:394): avc: denied { map } for pid=1983 comm="syz.1.689" path="/130/file1/memory.events" dev="loop1" ino=1048632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.035139][ T28] audit: type=1400 audit(1762325169.516:395): avc: denied { read write } for pid=1993 comm="syz.4.694" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.040158][ T1994] loop4: detected capacity change from 0 to 4096 [ 49.067392][ T28] audit: type=1400 audit(1762325169.526:396): avc: denied { open } for pid=1993 comm="syz.4.694" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.093490][ T1994] EXT4-fs (loop4): Test dummy encryption mode enabled [ 49.109934][ T28] audit: type=1400 audit(1762325169.526:397): avc: denied { ioctl } for pid=1993 comm="syz.4.694" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.135247][ T2003] loop1: detected capacity change from 0 to 256 [ 49.135985][ T1994] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 49.154622][ T2003] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 49.158140][ T1994] System zones: 0-5 [ 49.171807][ T1994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 49.234630][ T287] EXT4-fs (loop4): unmounting filesystem. [ 49.236515][ T2007] loop0: detected capacity change from 0 to 1024 [ 49.266210][ T2007] EXT4-fs: Ignoring removed bh option [ 49.292310][ T2007] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.333607][ T285] EXT4-fs (loop0): unmounting filesystem. [ 49.813166][ T2077] loop1: detected capacity change from 0 to 256 [ 49.839157][ T2077] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd6e00b17, utbl_chksum : 0xe619d30d) [ 50.067878][ T2100] capability: warning: `syz.2.744' uses deprecated v2 capabilities in a way that may be insecure [ 50.255921][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.264228][ T2111] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.272391][ T2111] device bridge_slave_0 entered promiscuous mode [ 50.282467][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.289500][ T2111] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.297198][ T2111] device bridge_slave_1 entered promiscuous mode [ 50.409803][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 50.423198][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.434774][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.442688][ T665] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 50.450686][ T43] device bridge_slave_1 left promiscuous mode [ 50.456887][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.464294][ T43] device bridge_slave_0 left promiscuous mode [ 50.470528][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.478119][ T43] device veth1_macvtap left promiscuous mode [ 50.484197][ T43] device veth0_vlan left promiscuous mode [ 50.563314][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.571898][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.580115][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.587165][ T510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.603521][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.610814][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.611270][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.622294][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.630596][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.639820][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.648745][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.660650][ T19] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.667380][ T510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.676671][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.684166][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.699758][ T665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.702497][ T19] usb 1-1: config 0 descriptor?? [ 50.710802][ T665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.717612][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.725403][ T665] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.746040][ T665] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.754408][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.763534][ T665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.764158][ T665] usb 3-1: config 0 descriptor?? [ 50.777368][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.785722][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.793356][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.802488][ T2111] device veth0_vlan entered promiscuous mode [ 50.814070][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.823417][ T2111] device veth1_macvtap entered promiscuous mode [ 50.834083][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.848964][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.884332][ T2130] loop4: detected capacity change from 0 to 1024 [ 50.922240][ T2130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.949436][ T2130] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.762: Allocating blocks 497-513 which overlap fs metadata [ 50.967255][ T2129] EXT4-fs (loop4): pa ffff8881338a3498: logic 128, phys. 273, len 15 [ 50.975449][ T2129] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 50.993889][ T287] EXT4-fs (loop4): unmounting filesystem. [ 51.119298][ T19] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 51.131104][ T19] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 51.134253][ T2139] loop4: detected capacity change from 0 to 4096 [ 51.147622][ T2139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.162610][ T2139] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.755: corrupted inode contents [ 51.175387][ T19] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 51.188445][ T665] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 51.189066][ T2139] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #15: comm syz.4.755: mark_inode_dirty error [ 51.208050][ T665] plantronics 0003:047F:FFFF.000D: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 51.225326][ T2139] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.755: corrupted inode contents [ 51.239304][ T2145] EXT4-fs (loop4): shut down requested (1) [ 51.290292][ T287] EXT4-fs (loop4): unmounting filesystem. [ 51.296387][ T8] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.430281][ T39] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 51.432635][ T657] usb 1-1: USB disconnect, device number 5 [ 51.441028][ T291] usb 3-1: USB disconnect, device number 7 [ 51.549737][ T19] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.609725][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 51.615905][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.626891][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.636641][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 51.649463][ T39] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 51.658804][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.667297][ T39] usb 6-1: config 0 descriptor?? [ 51.730992][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.742006][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.751994][ T19] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.765081][ T19] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.774138][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.783059][ T19] usb 7-1: config 0 descriptor?? [ 52.000515][ T2162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 52.009418][ T2162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 52.078282][ T39] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000E/input/input15 [ 52.092501][ T39] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 52.162935][ T2176] loop2: detected capacity change from 0 to 2048 [ 52.169819][ T2176] /dev/loop2: Can't open blockdev [ 52.179354][ T2176] overlayfs: filesystem on './file0' not supported as upperdir [ 52.194183][ T19] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 52.214612][ T2179] loop2: detected capacity change from 0 to 1024 [ 52.224769][ T2179] EXT4-fs: Ignoring removed bh option [ 52.230471][ T19] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 52.230617][ T2179] /dev/loop2: Can't open blockdev [ 52.311658][ T39] usb 6-1: USB disconnect, device number 5 [ 52.332114][ T28] kauditd_printk_skb: 118 callbacks suppressed [ 52.332128][ T28] audit: type=1400 audit(1762325172.816:514): avc: denied { setopt } for pid=2183 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.455630][ T2194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.777'. [ 52.465427][ T2194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.777'. [ 52.597772][ T2200] loop4: detected capacity change from 0 to 256 [ 52.613952][ T2200] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 52.648602][ T2200] exFAT-fs (loop4): hint_cluster is invalid (17) [ 52.650958][ T28] audit: type=1400 audit(1762325173.126:515): avc: denied { write } for pid=2199 comm="syz.4.780" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.677122][ T28] audit: type=1400 audit(1762325173.126:516): avc: denied { add_name } for pid=2199 comm="syz.4.780" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.698098][ T28] audit: type=1400 audit(1762325173.126:517): avc: denied { associate } for pid=2199 comm="syz.4.780" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.742588][ T28] audit: type=1400 audit(1762325173.126:518): avc: denied { read write } for pid=2199 comm="syz.4.780" name="file1" dev="loop4" ino=1048644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.766519][ T28] audit: type=1400 audit(1762325173.126:519): avc: denied { open } for pid=2199 comm="syz.4.780" path="/138/file1/file1" dev="loop4" ino=1048644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.805797][ T28] audit: type=1400 audit(1762325173.136:520): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.826215][ T28] audit: type=1400 audit(1762325173.206:521): avc: denied { name_bind } for pid=2201 comm="syz.4.781" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 52.853272][ T28] audit: type=1400 audit(1762325173.206:522): avc: denied { node_bind } for pid=2201 comm="syz.4.781" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.884179][ T2208] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 52.892533][ T2208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 52.944219][ T28] audit: type=1400 audit(1762325173.426:523): avc: denied { read } for pid=2210 comm="syz.4.786" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.432202][ T2234] loop4: detected capacity change from 0 to 1024 [ 53.459328][ T2234] EXT4-fs: Ignoring removed bh option [ 53.474879][ T2234] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.509814][ C1] plantronics 0003:047F:FFFF.000F: usb_submit_urb(ctrl) failed: -1 [ 53.520985][ T665] usb 7-1: USB disconnect, device number 2 [ 53.558611][ T2234] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 53.612645][ T2234] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.796: Allocating blocks 385-513 which overlap fs metadata [ 53.717182][ T2233] EXT4-fs (loop4): pa ffff888117567b28: logic 16, phys. 129, len 24 [ 53.725265][ T2233] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 53.796769][ T287] EXT4-fs (loop4): unmounting filesystem. [ 53.844914][ T2248] xt_bpf: check failed: parse error [ 53.935022][ T2250] loop5: detected capacity change from 0 to 512 [ 53.979912][ T2250] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 53.997870][ T2250] System zones: 0-2, 18-18, 34-34 [ 54.008921][ T2250] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.802: corrupted inode contents [ 54.039840][ T2250] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #3: comm syz.5.802: mark_inode_dirty error [ 54.100410][ T2250] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.802: corrupted inode contents [ 54.145979][ T2250] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.802: mark_inode_dirty error [ 54.160145][ T2250] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.802: Failed to acquire dquot type 0 [ 54.218288][ T2250] EXT4-fs (loop5): 1 orphan inode deleted [ 54.226266][ T8] EXT4-fs error (device loop5): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 54.254612][ T2250] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 54.300043][ T2250] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.304642][ T2270] loop0: detected capacity change from 0 to 1024 [ 54.325078][ T2272] loop4: detected capacity change from 0 to 2048 [ 54.360097][ T2270] EXT4-fs: Ignoring removed bh option [ 54.368228][ T2270] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.385498][ T2272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 54.401970][ T2272] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.812: bg 0: block 234: padding at end of block bitmap is not set [ 54.418747][ T2272] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 54.420792][ T623] EXT4-fs (loop5): unmounting filesystem. [ 54.436797][ T2272] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.436797][ T2272] [ 54.446810][ T2272] EXT4-fs (loop4): Total free blocks count 0 [ 54.453310][ T2272] EXT4-fs (loop4): Free/Dirty block details [ 54.459384][ T2272] EXT4-fs (loop4): free_blocks=0 [ 54.460149][ T2270] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.464420][ T2272] EXT4-fs (loop4): dirty_blocks=48 [ 54.478385][ T2272] EXT4-fs (loop4): Block reservation details [ 54.491668][ T2272] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 54.551007][ T287] EXT4-fs (loop4): unmounting filesystem. [ 54.558063][ T2286] loop6: detected capacity change from 0 to 4096 [ 54.566237][ T2270] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.811: Allocating blocks 385-513 which overlap fs metadata [ 54.588124][ T2286] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 54.647756][ T2111] EXT4-fs (loop6): unmounting filesystem. [ 54.709866][ T2303] TCP: TCP_TX_DELAY enabled [ 54.711788][ T2269] EXT4-fs (loop0): pa ffff8881338a3540: logic 16, phys. 129, len 24 [ 54.722405][ T2269] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 54.755189][ T285] EXT4-fs (loop0): unmounting filesystem. [ 54.789009][ T2313] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 54.801420][ T2313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 55.121646][ T2330] loop5: detected capacity change from 0 to 40427 [ 55.137335][ T2330] F2FS-fs (loop5): Image doesn't support compression [ 55.150313][ T2330] F2FS-fs (loop5): heap/no_heap options were deprecated [ 55.157140][ T2344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.841'. [ 55.161485][ T2330] F2FS-fs (loop5): invalid crc value [ 55.172538][ T2330] F2FS-fs (loop5): Found nat_bits in checkpoint [ 55.190196][ T2344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.841'. [ 55.206933][ T2330] F2FS-fs (loop5): Start checkpoint disabled! [ 55.221714][ T2330] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 55.247875][ T2330] syz.5.834: attempt to access beyond end of device [ 55.247875][ T2330] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 55.261797][ T2330] syz.5.834: attempt to access beyond end of device [ 55.261797][ T2330] loop5: rw=2049, sector=53280, nr_sectors = 8 limit=40427 [ 55.275715][ T2330] syz.5.834: attempt to access beyond end of device [ 55.275715][ T2330] loop5: rw=2049, sector=53304, nr_sectors = 24 limit=40427 [ 55.289652][ T2330] syz.5.834: attempt to access beyond end of device [ 55.289652][ T2330] loop5: rw=2049, sector=53360, nr_sectors = 16 limit=40427 [ 55.303603][ T2330] syz.5.834: attempt to access beyond end of device [ 55.303603][ T2330] loop5: rw=2049, sector=53384, nr_sectors = 24 limit=40427 [ 55.317572][ T2330] syz.5.834: attempt to access beyond end of device [ 55.317572][ T2330] loop5: rw=2049, sector=53432, nr_sectors = 32 limit=40427 [ 55.331536][ T2330] syz.5.834: attempt to access beyond end of device [ 55.331536][ T2330] loop5: rw=2049, sector=53488, nr_sectors = 24 limit=40427 [ 55.379789][ T441] kworker/u4:4: attempt to access beyond end of device [ 55.379789][ T441] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 55.395622][ T441] kworker/u4:4: attempt to access beyond end of device [ 55.395622][ T441] loop5: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 55.568624][ T2351] loop4: detected capacity change from 0 to 40427 [ 55.569121][ T2359] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 55.586312][ T2351] F2FS-fs (loop4): Image doesn't support compression [ 55.607326][ T2351] F2FS-fs (loop4): heap/no_heap options were deprecated [ 55.613030][ T2359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.842'. [ 55.615865][ T2351] F2FS-fs (loop4): invalid crc value [ 55.644680][ T2351] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.687794][ T2351] F2FS-fs (loop4): Start checkpoint disabled! [ 55.715682][ T2351] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 55.789740][ T657] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 55.817947][ T2351] syz.4.854: attempt to access beyond end of device [ 55.817947][ T2351] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 55.965167][ T2373] loop6: detected capacity change from 0 to 40427 [ 55.979807][ T657] usb 1-1: Using ep0 maxpacket: 32 [ 55.987904][ T657] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 55.994365][ T2373] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 56.024839][ T657] usb 1-1: config 2 has no interface number 0 [ 56.041079][ T657] usb 1-1: config 2 interface 88 has no altsetting 0 [ 56.048888][ T2381] loop2: detected capacity change from 0 to 128 [ 56.069333][ T2373] F2FS-fs (loop6): invalid crc value [ 56.069743][ T657] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 56.085203][ T2373] F2FS-fs (loop6): Found nat_bits in checkpoint [ 56.094053][ T1018] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.113811][ T657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.142119][ T657] usb 1-1: Product: syz [ 56.146368][ T657] usb 1-1: Manufacturer: syz [ 56.156468][ T657] usb 1-1: SerialNumber: syz [ 56.173134][ T2373] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 56.254534][ T2373] F2FS-fs (loop6): Try to recover all the superblocks, ret: 0 [ 56.570075][ T2400] loop6: detected capacity change from 0 to 1024 [ 56.587361][ T2400] EXT4-fs: Ignoring removed i_version option [ 56.601135][ T2400] EXT4-fs (loop6): Test dummy encryption mode enabled [ 56.623806][ T2400] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 56.651789][ T2400] EXT4-fs error (device loop6): ext4_xattr_ibody_list:748: inode #2: comm syz.6.865: corrupted in-inode xattr [ 56.685471][ T2111] EXT4-fs (loop6): unmounting filesystem. [ 56.713477][ T2403] loop6: detected capacity change from 0 to 256 [ 56.748387][ T2403] FAT-fs (loop6): Directory bread(block 64) failed [ 56.763665][ T2403] FAT-fs (loop6): Directory bread(block 65) failed [ 56.780038][ T2403] FAT-fs (loop6): Directory bread(block 66) failed [ 56.795324][ T2403] FAT-fs (loop6): Directory bread(block 67) failed [ 56.811670][ T2403] FAT-fs (loop6): Directory bread(block 68) failed [ 56.825841][ T2403] FAT-fs (loop6): Directory bread(block 69) failed [ 56.840031][ T2403] FAT-fs (loop6): Directory bread(block 70) failed [ 56.854200][ T2403] FAT-fs (loop6): Directory bread(block 71) failed [ 56.868382][ T2403] FAT-fs (loop6): Directory bread(block 72) failed [ 56.883608][ T2403] FAT-fs (loop6): Directory bread(block 73) failed [ 57.084913][ T2409] netlink: 32 bytes leftover after parsing attributes in process `syz.4.870'. [ 57.184208][ T657] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 57.209731][ T657] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 57.230985][ T657] asix: probe of 1-1:2.88 failed with error -71 [ 57.256016][ T657] usb 1-1: USB disconnect, device number 6 [ 57.398553][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 57.398568][ T28] audit: type=1400 audit(1762325178.882:571): avc: denied { ioctl } for pid=2420 comm="syz.4.876" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.475931][ T2428] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.538347][ T28] audit: type=1400 audit(1762325179.022:572): avc: denied { read } for pid=2433 comm="syz.4.881" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.567221][ T28] audit: type=1400 audit(1762325179.052:573): avc: denied { open } for pid=2433 comm="syz.4.881" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.600417][ T28] audit: type=1400 audit(1762325179.052:574): avc: denied { ioctl } for pid=2433 comm="syz.4.881" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.626276][ T28] audit: type=1400 audit(1762325179.052:575): avc: denied { set_context_mgr } for pid=2433 comm="syz.4.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.724043][ T2442] loop0: detected capacity change from 0 to 256 [ 57.752513][ T2442] FAT-fs (loop0): Directory bread(block 64) failed [ 57.760184][ T2442] FAT-fs (loop0): Directory bread(block 65) failed [ 57.762929][ T2446] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 57.783885][ T2442] FAT-fs (loop0): Directory bread(block 66) failed [ 57.791418][ T2442] FAT-fs (loop0): Directory bread(block 67) failed [ 57.798023][ T2442] FAT-fs (loop0): Directory bread(block 68) failed [ 57.804767][ T2442] FAT-fs (loop0): Directory bread(block 69) failed [ 57.812493][ T2442] FAT-fs (loop0): Directory bread(block 70) failed [ 57.824564][ T2442] FAT-fs (loop0): Directory bread(block 71) failed [ 57.838016][ T2442] FAT-fs (loop0): Directory bread(block 72) failed [ 57.844869][ T2442] FAT-fs (loop0): Directory bread(block 73) failed [ 57.941077][ T28] audit: type=1400 audit(1762325179.432:576): avc: denied { mount } for pid=2451 comm="syz.0.890" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.985700][ T28] audit: type=1400 audit(1762325179.432:577): avc: denied { create } for pid=2453 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.007774][ T28] audit: type=1400 audit(1762325179.432:578): avc: denied { setopt } for pid=2453 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.019833][ T657] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 58.043098][ T28] audit: type=1400 audit(1762325179.432:579): avc: denied { write } for pid=2453 comm="syz.2.891" path="socket:[25711]" dev="sockfs" ino=25711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.043351][ T2462] xt_hashlimit: max too large, truncated to 1048576 [ 58.077344][ T28] audit: type=1400 audit(1762325179.472:580): avc: denied { bind } for pid=2457 comm="syz.0.893" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.138356][ T2467] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.188202][ T2467] FAT-fs (loop13): unable to read boot sector [ 58.280342][ T657] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.299895][ T657] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.325997][ T657] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.355801][ T657] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.367972][ T657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.389016][ T657] usb 5-1: config 0 descriptor?? [ 58.654194][ T2491] loop6: detected capacity change from 0 to 40427 [ 58.683951][ T2491] F2FS-fs (loop6): Found nat_bits in checkpoint [ 58.728542][ T2491] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 58.743659][ T2491] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 58.813796][ T657] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 58.823863][ T657] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 58.930320][ T2498] loop6: detected capacity change from 0 to 512 [ 58.980889][ T2498] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 58.990004][ T2498] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.032754][ T2111] EXT4-fs (loop6): unmounting filesystem. [ 59.239799][ T291] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 59.432826][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.454450][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.465545][ T291] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice=d1.00 [ 59.477747][ T2524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.918'. [ 59.486656][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.501498][ T291] usb 3-1: config 0 descriptor?? [ 59.554755][ T2529] loop6: detected capacity change from 0 to 512 [ 59.601860][ T2529] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.920: couldn't read orphan inode 26 (err -116) [ 59.614069][ T2529] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 59.623151][ T2529] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.660952][ T2529] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.920: corrupted inode contents [ 59.674000][ T2529] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #3: comm syz.6.920: mark_inode_dirty error [ 59.685643][ T2529] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.920: bg 0: block 64: padding at end of block bitmap is not set [ 59.701621][ T2529] EXT4-fs error (device loop6): ext4_acquire_dquot:6803: comm syz.6.920: Failed to acquire dquot type 0 [ 59.741550][ T2111] EXT4-fs (loop6): unmounting filesystem. [ 59.764353][ T2541] loop6: detected capacity change from 0 to 256 [ 59.782077][ T2541] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 59.884781][ T2546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'. [ 59.914181][ T291] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 59.932855][ T291] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 59.944067][ T291] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 59.954000][ T291] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 59.961356][ T291] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 59.972691][ T291] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 59.979658][ T291] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 59.987593][ T291] isku 0003:1E7D:319C.0011: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 60.001358][ T2557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'. [ 60.113887][ T291] isku 0003:1E7D:319C.0011: couldn't init struct isku_device [ 60.124087][ T291] isku 0003:1E7D:319C.0011: couldn't install keyboard [ 60.129836][ C0] plantronics 0003:047F:FFFF.0010: usb_submit_urb(ctrl) failed: -1 [ 60.140808][ T291] isku: probe of 0003:1E7D:319C.0011 failed with error -71 [ 60.166710][ T291] usb 3-1: USB disconnect, device number 8 [ 60.209882][ T2574] fido_id[2574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 60.459772][ T39] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 60.640155][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 60.646660][ T39] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 60.661349][ T2584] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.670625][ T2584] FAT-fs (loop9): unable to read boot sector [ 60.678411][ T39] usb 1-1: config 0 has no interface number 0 [ 60.701331][ T39] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 60.727841][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.746286][ T39] usb 1-1: Product: syz [ 60.756348][ T39] usb 1-1: Manufacturer: syz [ 60.761425][ T39] usb 1-1: SerialNumber: syz [ 60.768967][ T39] usb 1-1: config 0 descriptor?? [ 60.778740][ T39] smsc95xx v2.0.0 [ 60.840097][ T2591] kvm [2590]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 60.857728][ T2591] kvm [2590]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 60.868630][ T2591] kvm [2590]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 60.892718][ T2591] kvm [2590]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 60.914342][ T2591] kvm [2590]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 60.924681][ T2591] kvm [2590]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 60.939867][ T2591] kvm [2590]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 60.960088][ T657] usb 5-1: USB disconnect, device number 7 [ 60.965839][ T2591] kvm [2590]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 60.992327][ T2591] kvm [2590]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 61.001416][ T2591] kvm [2590]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 61.277059][ T2595] input: syz1 as /devices/virtual/input/input16 [ 61.579791][ T2589] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.769737][ T2589] usb 7-1: Using ep0 maxpacket: 16 [ 61.776084][ T2589] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.782967][ T2589] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 61.793491][ T39] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 61.804296][ T2589] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.812635][ T39] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 61.822965][ T2589] usb 7-1: config 0 descriptor?? [ 61.828010][ T39] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 61.839904][ T39] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 61.847680][ T39] usb 1-1: USB disconnect, device number 7 [ 61.999779][ T334] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 62.059758][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 62.180861][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.191981][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.202114][ T334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.215549][ T334] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.224807][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.243475][ T2589] hid (null): invalid report_size 1271304562 [ 62.249541][ T2589] hid (null): unknown global tag 0xe [ 62.257738][ T334] usb 3-1: config 0 descriptor?? [ 62.448232][ T6] usb 7-1: USB disconnect, device number 3 [ 62.666755][ T334] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 62.691507][ T334] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 62.942856][ T665] usb 3-1: USB disconnect, device number 9 [ 62.993750][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 62.993765][ T28] audit: type=1326 audit(1762325184.482:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.4.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cef8f6c9 code=0x7ffc0000 [ 63.028331][ T28] audit: type=1326 audit(1762325184.482:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.4.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cef8f6c9 code=0x7ffc0000 [ 63.054561][ T28] audit: type=1326 audit(1762325184.512:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.4.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd2cef8f6c9 code=0x7ffc0000 [ 63.079052][ T28] audit: type=1326 audit(1762325184.512:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.4.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cef8f6c9 code=0x7ffc0000 [ 63.103420][ T28] audit: type=1326 audit(1762325184.512:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2617 comm="syz.4.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2cefc1f85 code=0x7ffc0000 [ 63.126850][ T28] audit: type=1326 audit(1762325184.512:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.4.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cef8f6c9 code=0x7ffc0000 [ 63.156274][ T28] audit: type=1326 audit(1762325184.542:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.4.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd2cef8f6c9 code=0x7ffc0000 [ 63.208122][ T28] audit: type=1326 audit(1762325184.662:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2617 comm="syz.4.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd2cef8f6c9 code=0x7ffc0000 [ 63.270534][ T28] audit: type=1326 audit(1762325184.662:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.4.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cef8f6c9 code=0x7ffc0000 [ 63.303521][ T28] audit: type=1326 audit(1762325184.662:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.4.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cef8f6c9 code=0x7ffc0000 [ 63.629090][ T2624] loop4: detected capacity change from 0 to 40427 [ 63.670497][ T2624] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 63.702151][ T2624] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 63.729873][ T2624] F2FS-fs (loop4): invalid crc value [ 63.763476][ T2624] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.881127][ T2624] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 63.908499][ T2624] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 63.912701][ T2628] loop0: detected capacity change from 0 to 131072 [ 63.925801][ T2628] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 63.932546][ T2628] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.951898][ T2628] F2FS-fs (loop0): invalid crc value [ 63.990637][ T2628] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.039892][ T2628] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 64.046954][ T2628] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 64.080030][ T2624] bio_check_eod: 14 callbacks suppressed [ 64.080050][ T2624] syz.4.958: attempt to access beyond end of device [ 64.080050][ T2624] loop4: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 64.131444][ T2628] F2FS-fs (loop0): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:10232 [ 64.171611][ T2646] device pim6reg1 entered promiscuous mode [ 64.799715][ T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 64.981094][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.995578][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.016001][ T6] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.034844][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.051583][ T6] usb 1-1: SerialNumber: syz [ 65.274255][ T6] usb 1-1: 0:2 : does not exist [ 65.302754][ T6] usb 1-1: USB disconnect, device number 8 [ 65.512150][ T2696] loop6: detected capacity change from 0 to 512 [ 65.525572][ T1018] udevd[1018]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.566741][ T2696] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.991: bg 0: block 393: padding at end of block bitmap is not set [ 65.632993][ T2696] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 65.650642][ T2696] EXT4-fs (loop6): 2 truncates cleaned up [ 65.656505][ T2696] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 65.680504][ T2696] EXT4-fs (loop6): unmounting filesystem. [ 65.820249][ T665] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 66.010772][ T665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.039704][ T665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.059733][ T665] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.089781][ T334] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 66.097641][ T665] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.116392][ T665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.128791][ T665] usb 5-1: config 0 descriptor?? [ 66.161592][ T2711] binder: 2710:2711 ioctl c0306201 0 returned -14 [ 66.168446][ T2711] binder: 2710:2711 ioctl c0306201 200000000540 returned -11 [ 66.280578][ T334] usb 1-1: Using ep0 maxpacket: 32 [ 66.287243][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.319712][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.335711][ T334] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 66.359950][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.381497][ T334] usb 1-1: config 0 descriptor?? [ 66.547155][ T665] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 66.560380][ T665] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 66.587098][ T665] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 66.801047][ T334] lenovo 0003:17EF:6062.0015: unknown main item tag 0x2 [ 66.821281][ T334] lenovo 0003:17EF:6062.0015: hidraw1: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 66.841230][ T60] usb 5-1: USB disconnect, device number 8 [ 67.007344][ T6] usb 1-1: USB disconnect, device number 9 [ 67.393510][ T2736] loop4: detected capacity change from 0 to 256 [ 67.410253][ T2736] exfat: Deprecated parameter 'utf8' [ 67.431237][ T2736] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 67.759712][ T19] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 67.842293][ T2762] sch_fq: defrate 1025 ignored. [ 67.959702][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 67.967351][ T19] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 67.985164][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.001872][ T19] usb 5-1: Product: syz [ 68.012180][ T19] usb 5-1: Manufacturer: syz [ 68.021136][ T19] usb 5-1: SerialNumber: syz [ 68.040264][ T19] usb 5-1: config 0 descriptor?? [ 68.054062][ T19] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 68.123730][ T2783] loop6: detected capacity change from 0 to 512 [ 68.140949][ T2783] ext3: Unknown parameter 'uid<00000000000000000000' [ 68.247614][ T19] usb 5-1: USB disconnect, device number 9 [ 68.679553][ T2786] loop0: detected capacity change from 0 to 131072 [ 68.689004][ T2786] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 68.697155][ T2786] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 68.706218][ T2786] F2FS-fs (loop0): invalid crc value [ 68.724467][ T2786] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.774683][ T2786] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 68.781813][ T2786] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 68.796338][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 68.796351][ T28] audit: type=1400 audit(1762325190.282:635): avc: denied { setattr } for pid=2785 comm="syz.0.1030" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.138095][ T2819] futex_wake_op: syz.4.1045 tries to shift op by 32; fix this program [ 69.248425][ T28] audit: type=1400 audit(1762325190.732:636): avc: denied { write } for pid=2827 comm="syz.6.1050" name="raw6" dev="proc" ino=4026533081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.325096][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.350659][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 69.379902][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.390058][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 69.408391][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.428629][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.448796][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.458870][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.479071][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.749127][ T28] audit: type=1400 audit(1762325193.232:637): avc: denied { create } for pid=2840 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.818880][ T2849] loop0: detected capacity change from 0 to 128 [ 71.830010][ T28] audit: type=1400 audit(1762325193.282:638): avc: denied { relabelfrom } for pid=2845 comm="syz.4.1058" name="" dev="pipefs" ino=26616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 72.221783][ T2858] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.228840][ T2858] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.280599][ T2858] device bridge_slave_0 entered promiscuous mode [ 72.302439][ T2858] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.320127][ T2868] loop0: detected capacity change from 0 to 4096 [ 72.339754][ T2858] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.347230][ T2858] device bridge_slave_1 entered promiscuous mode [ 72.354068][ T2868] EXT4-fs: Ignoring removed bh option [ 72.357432][ T2863] loop6: detected capacity change from 0 to 40427 [ 72.366251][ T2868] EXT4-fs (loop0): Test dummy encryption mode enabled [ 72.375488][ T2863] F2FS-fs (loop6): fault_injection options not supported [ 72.403275][ T2868] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 72.413183][ T2863] F2FS-fs (loop6): fault_type options not supported [ 72.420137][ T2868] System zones: 0-5 [ 72.424632][ T2863] F2FS-fs (loop6): invalid crc value [ 72.455201][ T2868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.464871][ T2863] F2FS-fs (loop6): Found nat_bits in checkpoint [ 72.533726][ T28] audit: type=1400 audit(1762325194.022:639): avc: denied { create } for pid=2867 comm="syz.0.1066" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.559977][ T2868] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 72.598585][ T2868] EXT4-fs: Ignoring removed orlov option [ 72.613001][ T2868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.632227][ T2863] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 72.639760][ T2868] EXT4-fs (loop0): can't enable nombcache during remount [ 72.647972][ T28] audit: type=1400 audit(1762325194.132:640): avc: denied { mounton } for pid=2867 comm="syz.0.1066" path="/247/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.659775][ T2868] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 72.695206][ T28] audit: type=1400 audit(1762325194.132:641): avc: denied { write } for pid=2867 comm="syz.0.1066" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.724167][ T441] device bridge_slave_1 left promiscuous mode [ 72.750290][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.760012][ T28] audit: type=1400 audit(1762325194.132:642): avc: denied { add_name } for pid=2867 comm="syz.0.1066" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.760256][ T285] EXT4-fs (loop0): unmounting filesystem. [ 72.786680][ T441] device bridge_slave_0 left promiscuous mode [ 72.799754][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.818103][ T28] audit: type=1400 audit(1762325194.132:643): avc: denied { setattr } for pid=2867 comm="syz.0.1066" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.822728][ T441] device veth1_macvtap left promiscuous mode [ 72.859761][ T28] audit: type=1400 audit(1762325194.162:644): avc: denied { remove_name } for pid=2867 comm="syz.0.1066" name="#13" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.909800][ T441] device veth0_vlan left promiscuous mode [ 72.989824][ T2882] loop6: detected capacity change from 0 to 256 [ 73.198728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.208465][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.255917][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.275159][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.299905][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.306978][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.339781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.358304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.371354][ T2905] loop6: detected capacity change from 0 to 4096 [ 73.376808][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.384739][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.397343][ T2905] EXT4-fs (loop6): Test dummy encryption mode enabled [ 73.409820][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.419554][ T2905] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 73.428263][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.434549][ T2905] System zones: 0-5 [ 73.449265][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.458818][ T2905] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 73.478633][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.488775][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.504832][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.520054][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.532362][ T2858] device veth0_vlan entered promiscuous mode [ 73.546537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.571200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.598495][ T2858] device veth1_macvtap entered promiscuous mode [ 73.618652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.627982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.635803][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.644790][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.652874][ T2111] EXT4-fs (loop6): unmounting filesystem. [ 73.678827][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.697671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.720378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.729037][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.740007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.835678][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 73.835693][ T28] audit: type=1400 audit(1762325195.322:655): avc: denied { append } for pid=2918 comm="syz.0.1082" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 73.873527][ T2919] random: crng reseeded on system resumption [ 73.912337][ T28] audit: type=1400 audit(1762325195.362:656): avc: denied { open } for pid=2918 comm="syz.0.1082" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.057335][ T28] audit: type=1400 audit(1762325195.542:657): avc: denied { mount } for pid=2924 comm="syz.0.1084" name="/" dev="configfs" ino=14231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.178144][ T2852] loop4: detected capacity change from 0 to 262144 [ 74.190438][ T2852] F2FS-fs (loop4): invalid crc value [ 74.210430][ T2852] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.244934][ T2852] F2FS-fs (loop4): Start checkpoint disabled! [ 74.253354][ T2852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 74.439772][ T6] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 74.640755][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.659731][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.679694][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.702865][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.722784][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.738242][ T2937] loop4: detected capacity change from 0 to 256 [ 74.748801][ T6] usb 1-1: config 0 descriptor?? [ 74.782760][ T2937] FAT-fs (loop4): Directory bread(block 64) failed [ 74.789316][ T2937] FAT-fs (loop4): Directory bread(block 65) failed [ 74.796794][ T2937] FAT-fs (loop4): Directory bread(block 66) failed [ 74.814224][ T2937] FAT-fs (loop4): Directory bread(block 67) failed [ 74.826870][ T2937] FAT-fs (loop4): Directory bread(block 68) failed [ 74.839087][ T2937] FAT-fs (loop4): Directory bread(block 69) failed [ 74.851677][ T2937] FAT-fs (loop4): Directory bread(block 70) failed [ 74.858224][ T2937] FAT-fs (loop4): Directory bread(block 71) failed [ 74.878293][ T2937] FAT-fs (loop4): Directory bread(block 72) failed [ 74.892068][ T2937] FAT-fs (loop4): Directory bread(block 73) failed [ 75.019812][ T19] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 75.043348][ T2946] loop4: detected capacity change from 0 to 512 [ 75.060039][ T2946] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.071430][ T2946] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.104239][ T287] EXT4-fs (loop4): unmounting filesystem. [ 75.143962][ T2950] loop4: detected capacity change from 0 to 2048 [ 75.157963][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.166722][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.174593][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.182753][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.195149][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.202868][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.210899][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.219402][ T2950] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 75.228273][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.235847][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.243551][ T2950] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.254319][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.266677][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.274141][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.284040][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.301056][ T19] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.322676][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.331384][ T8] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 345: padding at end of block bitmap is not set [ 75.346340][ T6] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 75.353972][ T8] EXT4-fs (loop4): Remounting filesystem read-only [ 75.364552][ T19] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.373990][ T6] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 75.383217][ T287] EXT4-fs (loop4): unmounting filesystem. [ 75.389454][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.416140][ T19] usb 8-1: config 0 descriptor?? [ 75.422210][ T6] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 75.441453][ T6] usb 1-1: USB disconnect, device number 10 [ 75.493747][ T2956] fido_id[2956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 75.634036][ T2964] loop4: detected capacity change from 0 to 512 [ 75.661499][ T2964] EXT4-fs: Ignoring removed nobh option [ 75.669165][ T2964] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.680816][ T2964] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 75.691023][ T2964] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1097: Corrupt directory, running e2fsck is recommended [ 75.704488][ T2964] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 75.717124][ T2964] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1097: corrupted in-inode xattr [ 75.729341][ T2964] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1097: couldn't read orphan inode 15 (err -117) [ 75.741805][ T2964] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.766759][ T2964] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.779078][ T2964] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 75.793955][ T2964] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1097: Corrupt directory, running e2fsck is recommended [ 75.810319][ T2964] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.822130][ T2964] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 75.832468][ T2964] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1097: Corrupt directory, running e2fsck is recommended [ 75.848808][ T19] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 75.856902][ T2964] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.869532][ T2964] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 75.880531][ T19] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 75.935300][ T2964] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1097: Corrupt directory, running e2fsck is recommended [ 75.968668][ T2964] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 76.021914][ T287] EXT4-fs (loop4): unmounting filesystem. [ 76.269722][ T19] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.459718][ T19] usb 7-1: Using ep0 maxpacket: 16 [ 76.466957][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.488755][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.509663][ T19] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.534439][ T19] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.552198][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.569466][ T19] usb 7-1: config 0 descriptor?? [ 77.009466][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0018/input/input18 [ 77.035437][ T19] microsoft 0003:045E:07DA.0018: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 77.142952][ T2988] loop4: detected capacity change from 0 to 512 [ 77.149852][ C0] plantronics 0003:047F:FFFF.0017: usb_submit_urb(ctrl) failed: -1 [ 77.217482][ T334] usb 7-1: USB disconnect, device number 4 [ 77.259944][ T2988] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.1107: corrupted inode contents [ 77.292212][ T2988] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.1107: mark_inode_dirty error [ 77.329908][ T2988] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.1107: corrupted inode contents [ 77.362197][ T2988] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.1107: mark_inode_dirty error [ 77.394035][ T2988] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.1107: corrupted inode contents [ 77.426466][ T2988] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 77.446660][ T2988] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.1107: corrupted inode contents [ 77.469038][ T2988] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.1107: mark_inode_dirty error [ 77.501423][ T2988] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 77.520841][ T2988] EXT4-fs (loop4): 1 truncate cleaned up [ 77.526536][ T2988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.537399][ T2988] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.548269][ T510] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 77.578395][ T510] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 77.611062][ T287] EXT4-fs (loop4): unmounting filesystem. [ 77.691022][ T2997] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1110'. [ 77.972939][ T28] audit: type=1400 audit(1762325199.462:658): avc: denied { create } for pid=3035 comm="syz.6.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.023090][ T3038] loop6: detected capacity change from 0 to 256 [ 78.039717][ T19] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 78.075305][ T28] audit: type=1400 audit(1762325199.562:659): avc: denied { shutdown } for pid=3041 comm="syz.0.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.081463][ T3038] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 78.119883][ T28] audit: type=1400 audit(1762325199.582:660): avc: denied { read } for pid=3041 comm="syz.0.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.212199][ T3048] netlink: 'syz.6.1132': attribute type 1 has an invalid length. [ 78.229775][ T3048] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1132'. [ 78.242616][ T19] usb 8-1: device firmware changed [ 78.247853][ T6] usb 8-1: USB disconnect, device number 2 [ 78.263187][ T3033] loop4: detected capacity change from 0 to 40427 [ 78.271209][ T3033] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 78.280674][ T3033] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 78.288943][ T3033] F2FS-fs (loop4): fault_type options not supported [ 78.313591][ T3033] F2FS-fs (loop4): fault_injection options not supported [ 78.322988][ T3033] F2FS-fs (loop4): Image doesn't support compression [ 78.348937][ T3033] F2FS-fs (loop4): invalid crc value [ 78.377838][ T28] audit: type=1326 audit(1762325199.862:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3059 comm="syz.6.1137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95ecf8f6c9 code=0x0 [ 78.401336][ T3033] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.422367][ T6] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.456541][ T3033] F2FS-fs (loop4): Start checkpoint disabled! [ 78.473577][ T3033] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 78.481452][ T3033] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 78.520119][ T28] audit: type=1400 audit(1762325200.012:662): avc: denied { relabelfrom } for pid=3069 comm="syz.0.1141" name="UDP" dev="sockfs" ino=27647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 78.544354][ T3070] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 78.554249][ T28] audit: type=1400 audit(1762325200.042:663): avc: denied { relabelto } for pid=3069 comm="syz.0.1141" name="UDP" dev="sockfs" ino=27647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 78.586316][ T287] F2FS-fs (loop4): access invalid blkaddr:4043309056 [ 78.599346][ T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 78.606825][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.610747][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.616892][ T287] Call Trace: [ 78.616901][ T287] [ 78.633903][ T287] __dump_stack+0x21/0x24 [ 78.638235][ T287] dump_stack_lvl+0xee/0x150 [ 78.639599][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.642827][ T287] ? __cfi_dump_stack_lvl+0x8/0x8 [ 78.642848][ T287] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 78.642868][ T287] dump_stack+0x15/0x24 [ 78.642888][ T287] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 78.642917][ T287] f2fs_is_valid_blkaddr+0x23/0x30 [ 78.642938][ T287] f2fs_map_blocks+0xc93/0x3a50 [ 78.667750][ T6] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.673152][ T287] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 78.673176][ T287] ? xas_start+0x317/0x3e0 [ 78.673194][ T287] ? xas_load+0x39e/0x3b0 [ 78.683735][ T6] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.695961][ T287] ? xa_load+0xad/0xd0 [ 78.695990][ T287] f2fs_mpage_readpages+0xa3a/0x1b70 [ 78.696013][ T287] ? dquot_release_reservation_block+0xa0/0xa0 [ 78.696030][ T287] ? cgroup_rstat_updated+0xf5/0x370 [ 78.721028][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.723040][ T287] ? xas_nomem+0x6b/0x1f0 [ 78.748303][ T6] usb 8-1: config 0 descriptor?? [ 78.751966][ T287] f2fs_readahead+0xfc/0x240 [ 78.751990][ T287] ? __cfi_f2fs_readahead+0x10/0x10 [ 78.752006][ T287] read_pages+0x1b0/0xdd0 [ 78.752025][ T287] ? __cfi___filemap_add_folio+0x10/0x10 [ 78.776594][ T287] ? page_cache_ra_unbounded+0x720/0x720 [ 78.782237][ T287] ? folio_add_lru+0x260/0x390 [ 78.787012][ T287] ? filemap_add_folio+0x105/0x150 [ 78.792137][ T287] page_cache_ra_unbounded+0x5d1/0x720 [ 78.797594][ T287] ? __kernel_text_address+0xd/0x30 [ 78.802803][ T287] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 78.808795][ T287] ? stack_trace_save+0x98/0xe0 [ 78.813656][ T287] page_cache_ra_order+0x36a/0xb70 [ 78.818777][ T287] ? slab_free_freelist_hook+0xc2/0x190 [ 78.824332][ T287] ? kmem_cache_free+0x12d/0x300 [ 78.829276][ T287] ? __x64_sys_newfstatat+0x9b/0xb0 [ 78.834476][ T287] ? x64_sys_call+0x77c/0x9a0 [ 78.839152][ T287] ? __cfi_page_cache_ra_order+0x10/0x10 [ 78.844780][ T287] ondemand_readahead+0x817/0xdb0 [ 78.849805][ T287] ? page_cache_sync_ra+0x490/0x490 [ 78.855000][ T287] page_cache_sync_ra+0x41b/0x490 [ 78.860015][ T287] f2fs_readdir+0x444/0x940 [ 78.864515][ T287] ? cgroup_rstat_updated+0xf5/0x370 [ 78.869791][ T287] ? __cfi_f2fs_readdir+0x10/0x10 [ 78.874805][ T287] ? handle_mm_fault+0x17be/0x2640 [ 78.879907][ T287] ? down_read_killable+0xb6/0x100 [ 78.885009][ T287] ? __cfi_down_read_killable+0x10/0x10 [ 78.890536][ T287] ? fsnotify_perm+0x269/0x5b0 [ 78.895290][ T287] ? security_file_permission+0x94/0xb0 [ 78.900817][ T287] iterate_dir+0x271/0x610 [ 78.905214][ T287] ? __cfi_f2fs_readdir+0x10/0x10 [ 78.910220][ T287] __se_sys_getdents64+0xe5/0x240 [ 78.915224][ T287] ? __x64_sys_getdents64+0x90/0x90 [ 78.920402][ T287] ? __cfi_filldir64+0x10/0x10 [ 78.925152][ T287] ? do_user_addr_fault+0x9ac/0x1050 [ 78.930430][ T287] ? debug_smp_processor_id+0x17/0x20 [ 78.935819][ T287] __x64_sys_getdents64+0x7b/0x90 [ 78.940878][ T287] x64_sys_call+0x15c/0x9a0 [ 78.945544][ T287] do_syscall_64+0x4c/0xa0 [ 78.949944][ T287] ? clear_bhb_loop+0x30/0x80 [ 78.954608][ T287] ? clear_bhb_loop+0x30/0x80 [ 78.959273][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.965155][ T287] RIP: 0033:0x7fd2cefc2033 [ 78.969552][ T287] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 32 3d f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 78.989143][ T287] RSP: 002b:00007ffc7800b308 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 78.997548][ T287] RAX: ffffffffffffffda RBX: 00005555783f54e0 RCX: 00007fd2cefc2033 [ 79.005505][ T287] RDX: 0000000000008000 RSI: 00005555783f54e0 RDI: 0000000000000005 [ 79.013457][ T287] RBP: 00005555783f54b4 R08: 0000000000000000 R09: 0000000000000000 [ 79.021413][ T287] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 79.029366][ T287] R13: 0000000000000010 R14: 00005555783f54b0 R15: 00007ffc7800d5c0 [ 79.037322][ T287] [ 79.068140][ T3076] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1145'. [ 79.082082][ T287] syz-executor: attempt to access beyond end of device [ 79.082082][ T287] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 79.122778][ T287] syz-executor: attempt to access beyond end of device [ 79.122778][ T287] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 79.176311][ T510] kworker/u4:5: attempt to access beyond end of device [ 79.176311][ T510] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 79.237964][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.247116][ T28] audit: type=1400 audit(1762325200.732:664): avc: denied { create } for pid=3089 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.249738][ T3078] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.282541][ T3078] device bridge_slave_0 entered promiscuous mode [ 79.286293][ T28] audit: type=1400 audit(1762325200.762:665): avc: denied { connect } for pid=3089 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.310291][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.312990][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.317689][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.336005][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.343483][ T3078] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.343917][ T3078] device bridge_slave_1 entered promiscuous mode [ 79.351397][ T28] audit: type=1400 audit(1762325200.762:666): avc: denied { ioctl } for pid=3089 comm="syz.0.1149" path="socket:[28228]" dev="sockfs" ino=28228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.351422][ T28] audit: type=1400 audit(1762325200.762:667): avc: denied { write } for pid=3089 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.351470][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.375003][ T3092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'. [ 79.382589][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.427622][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.435115][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.442682][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.450160][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.457941][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.473163][ T441] tipc: Left network mode [ 79.478286][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.488386][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.508570][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 79.516269][ T6] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 79.525233][ T6] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 79.628412][ T28] audit: type=1400 audit(1762325201.112:668): avc: denied { ioctl } for pid=3104 comm="syz.0.1158" path="socket:[28752]" dev="sockfs" ino=28752 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.697433][ T6] usb 8-1: USB disconnect, device number 3 [ 79.734888][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.741973][ T3078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.749245][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.756315][ T3078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.834608][ T28] audit: type=1400 audit(1762325201.322:669): avc: denied { watch } for pid=3118 comm="syz.6.1160" path="/136/file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.874792][ T3099] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.882048][ T28] audit: type=1400 audit(1762325201.352:670): avc: denied { watch_reads } for pid=3118 comm="syz.6.1160" path="/136/file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.906563][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.916223][ T28] audit: type=1400 audit(1762325201.402:671): avc: denied { read write } for pid=3120 comm="syz.6.1161" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.921123][ T3099] device bridge_slave_0 entered promiscuous mode [ 79.945527][ T28] audit: type=1400 audit(1762325201.402:672): avc: denied { open } for pid=3120 comm="syz.6.1161" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.966632][ T3099] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.979455][ T28] audit: type=1400 audit(1762325201.402:673): avc: denied { ioctl } for pid=3120 comm="syz.6.1161" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.999356][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.027854][ T3099] device bridge_slave_1 entered promiscuous mode [ 80.053217][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.066833][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.074503][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.112635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.121540][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.128591][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.136367][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.146350][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.153400][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.170349][ T441] bridge0: port 3(macsec1) entered disabled state [ 80.177439][ T441] device macsec1 left promiscuous mode [ 80.182934][ T441] bridge0: port 3(macsec1) entered disabled state [ 80.193417][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.201531][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.243020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.265734][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.324795][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.338004][ T3149] loop0: detected capacity change from 0 to 512 [ 80.351004][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.377133][ T3149] ext3: Unknown parameter 'uid<00000000000000000000' [ 80.399245][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.407286][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.423805][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.431360][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.439471][ T441] device bridge_slave_1 left promiscuous mode [ 80.450068][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.463002][ T441] device bridge_slave_0 left promiscuous mode [ 80.478753][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.496637][ T441] device bridge_slave_1 left promiscuous mode [ 80.515187][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.531384][ T441] device bridge_slave_0 left promiscuous mode [ 80.545371][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.560293][ T441] device veth1_macvtap left promiscuous mode [ 80.573122][ T441] device veth0_vlan left promiscuous mode [ 80.583551][ T441] device veth1_macvtap left promiscuous mode [ 80.595013][ T441] device veth0_vlan left promiscuous mode [ 80.873527][ T3078] device veth0_vlan entered promiscuous mode [ 80.909610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.918262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.931599][ T3078] device veth1_macvtap entered promiscuous mode [ 80.939901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.964606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.980011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.994893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.007781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.022541][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.029615][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.049104][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.067317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.085337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.100096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.116259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.131248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.149322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.169980][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.177028][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.209042][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.220744][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.262275][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.275317][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.311524][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.335042][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.345325][ T3099] device veth0_vlan entered promiscuous mode [ 81.364806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.390723][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.408923][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.420227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.438748][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.446600][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.454329][ T3207] incfs: Options parsing error. -22 [ 81.471819][ T3207] incfs: mount failed -22 [ 81.472043][ T3099] device veth1_macvtap entered promiscuous mode [ 81.514028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.523547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.533747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.562100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.587206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.846729][ T3266] loop6: detected capacity change from 0 to 256 [ 81.893733][ T3274] incfs: iterate_incfs_dir / -22 [ 82.065543][ T3266] exFAT-fs (loop6): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 82.311754][ T3362] loop8: detected capacity change from 0 to 1024 [ 82.378922][ T3362] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 82.471168][ T3393] 9pnet_fd: Insufficient options for proto=fd [ 82.526451][ T3404] loop7: detected capacity change from 0 to 256 [ 82.585610][ T3412] loop0: detected capacity change from 0 to 2048 [ 82.654944][ T3412] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.705892][ T3412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.769091][ T285] EXT4-fs (loop0): unmounting filesystem. [ 82.797735][ T3445] loop9: detected capacity change from 0 to 256 [ 82.843785][ T3445] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 83.033595][ T3479] loop7: detected capacity change from 0 to 512 [ 83.080352][ T3479] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 83.113670][ T3479] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.178496][ T3490] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.185715][ T3490] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.262640][ T3495] input: syz0 as /devices/virtual/input/input19 [ 83.268359][ T2858] EXT4-fs (loop7): unmounting filesystem. [ 83.283058][ T665] kernel write not supported for file /uhid (pid: 665 comm: kworker/1:4) [ 83.348605][ T3511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1297'. [ 83.364573][ T3513] input: syz1 as /devices/virtual/input/input20 [ 83.610262][ T3541] incfs: mount failed -22 [ 83.666214][ T3547] sch_fq: defrate 1025 ignored. [ 84.276925][ T3566] loop7: detected capacity change from 0 to 256 [ 84.288705][ T3566] exFAT-fs (loop7): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 84.311505][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 84.311520][ T28] audit: type=1400 audit(1762325205.802:730): avc: denied { write } for pid=3565 comm="syz.7.1320" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.359371][ T28] audit: type=1400 audit(1762325205.802:731): avc: denied { add_name } for pid=3565 comm="syz.7.1320" name=F3BBBBBB726574617030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.397892][ T28] audit: type=1400 audit(1762325205.802:732): avc: denied { create } for pid=3565 comm="syz.7.1320" name=F3BBBBBB726574617030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 84.399910][ T3574] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1324'. [ 84.419726][ T28] audit: type=1400 audit(1762325205.802:733): avc: denied { associate } for pid=3565 comm="syz.7.1320" name=F3BBBBBB726574617030 scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.451382][ T28] audit: type=1400 audit(1762325205.842:734): avc: denied { name_bind } for pid=3568 comm="syz.6.1321" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 84.473216][ T28] audit: type=1400 audit(1762325205.842:735): avc: denied { node_bind } for pid=3568 comm="syz.6.1321" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 84.496510][ T28] audit: type=1400 audit(1762325205.842:736): avc: denied { create } for pid=3568 comm="syz.6.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.652124][ T3592] loop8: detected capacity change from 0 to 256 [ 84.688000][ T3592] exFAT-fs (loop8): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 84.739917][ T28] audit: type=1400 audit(1762325206.232:737): avc: denied { read } for pid=3593 comm="syz.0.1336" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.794777][ T28] audit: type=1400 audit(1762325206.262:738): avc: denied { open } for pid=3593 comm="syz.0.1336" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.830522][ T28] audit: type=1400 audit(1762325206.262:739): avc: denied { ioctl } for pid=3593 comm="syz.0.1336" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.880132][ T3587] loop6: detected capacity change from 0 to 40427 [ 84.904164][ T3587] F2FS-fs (loop6): invalid crc value [ 84.926307][ T3587] F2FS-fs (loop6): Found nat_bits in checkpoint [ 84.973608][ T3609] kvm_pr_unimpl_wrmsr: 21 callbacks suppressed [ 84.973630][ T3609] kvm [3608]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 85.007181][ T3609] kvm [3608]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 85.024634][ T3609] kvm [3608]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 85.034717][ T3609] kvm [3608]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 85.046653][ T3609] kvm [3608]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 85.055665][ T3587] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 85.064643][ T3609] kvm [3608]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 85.088618][ T3609] kvm [3608]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 85.119235][ T3609] kvm [3608]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 85.135942][ T2111] syz-executor: attempt to access beyond end of device [ 85.135942][ T2111] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 85.155054][ T3609] kvm [3608]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 85.164155][ T2111] syz-executor: attempt to access beyond end of device [ 85.164155][ T2111] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 85.178578][ T3609] kvm [3608]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 85.259340][ T3434] kworker/u4:78: attempt to access beyond end of device [ 85.259340][ T3434] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 85.269774][ T3625] loop7: detected capacity change from 0 to 512 [ 85.366884][ T3625] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.1348: corrupted inode contents [ 85.388459][ T3625] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #16: comm syz.7.1348: mark_inode_dirty error [ 85.415120][ T3625] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.1348: corrupted inode contents [ 85.427475][ T3625] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.1348: mark_inode_dirty error [ 85.455729][ T3625] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.1348: corrupted inode contents [ 85.522020][ T3625] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 85.531215][ T3625] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.1348: corrupted inode contents [ 85.543620][ T3625] EXT4-fs error (device loop7): ext4_truncate:4314: inode #16: comm syz.7.1348: mark_inode_dirty error [ 85.565135][ T3625] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 85.588308][ T3625] EXT4-fs (loop7): 1 truncate cleaned up [ 85.594055][ T657] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 85.604352][ T3389] EXT4-fs error (device loop7): ext4_release_dquot:6839: comm kworker/u4:62: Failed to release dquot type 1 [ 85.621324][ T3625] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 85.642286][ T3625] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.724741][ T3637] loop9: detected capacity change from 0 to 256 [ 85.751747][ T3637] exfat: Deprecated parameter 'utf8' [ 85.757522][ T2858] EXT4-fs (loop7): unmounting filesystem. [ 85.775402][ T3637] exfat: Deprecated parameter 'namecase' [ 85.786391][ T3434] device bridge_slave_1 left promiscuous mode [ 85.793814][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.805780][ T3637] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 85.818141][ T3434] device bridge_slave_0 left promiscuous mode [ 85.820636][ T657] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.825356][ T3640] loop7: detected capacity change from 0 to 128 [ 85.845625][ T657] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.855464][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.863572][ T3434] device veth1_macvtap left promiscuous mode [ 85.866083][ T657] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.869836][ T3434] device veth0_vlan left promiscuous mode [ 85.902091][ T657] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 85.913223][ T657] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.925681][ T657] usb 9-1: Product: syz [ 85.930034][ T657] usb 9-1: Manufacturer: syz [ 85.934729][ T657] usb 9-1: SerialNumber: syz [ 85.959338][ T657] hub 9-1:1.0: bad descriptor, ignoring hub [ 85.972370][ T657] hub: probe of 9-1:1.0 failed with error -5 [ 86.161748][ T657] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 86.165136][ T3657] loop7: detected capacity change from 0 to 512 [ 86.198210][ T3657] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 86.210032][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.216446][ T3657] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 86.224501][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.226123][ T3657] EXT4-fs (loop7): 1 truncate cleaned up [ 86.232528][ T3638] device bridge_slave_0 entered promiscuous mode [ 86.237968][ T3657] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 86.245311][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.253074][ T39] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 86.260245][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.284986][ T3638] device bridge_slave_1 entered promiscuous mode [ 86.293215][ T2858] EXT4-fs (loop7): unmounting filesystem. [ 86.450778][ T39] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.478195][ T39] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.488070][ T39] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.497596][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.505874][ T39] usb 10-1: SerialNumber: syz [ 86.567868][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.575916][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.593085][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.601787][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.610439][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.617493][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.625542][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.634393][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.642962][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.650016][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.666511][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.674553][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.683522][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.704948][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.715662][ T39] usb 10-1: 0:2 : does not exist [ 86.727711][ T39] usb 10-1: USB disconnect, device number 2 [ 86.742207][ T3638] device veth0_vlan entered promiscuous mode [ 86.750900][ T1018] udevd[1018]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.751364][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.782378][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.789877][ T3630] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 86.790818][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.812218][ T3638] device veth1_macvtap entered promiscuous mode [ 86.819243][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.854319][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.873044][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.219826][ T665] usb 9-1: USB disconnect, device number 3 [ 87.226284][ T665] usblp0: removed [ 87.256895][ T3716] loop9: detected capacity change from 0 to 256 [ 87.290476][ T3721] loop9: detected capacity change from 0 to 128 [ 87.302048][ T3721] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 87.310775][ T3721] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.334695][ T3099] EXT4-fs (loop9): unmounting filesystem. [ 87.420077][ T2589] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 87.599737][ T2589] usb 1-1: Using ep0 maxpacket: 32 [ 87.605922][ T2589] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 87.614175][ T2589] usb 1-1: config 0 has no interface number 0 [ 87.621669][ T2589] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 87.630775][ T2589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.638757][ T2589] usb 1-1: Product: syz [ 87.642949][ T2589] usb 1-1: Manufacturer: syz [ 87.647535][ T2589] usb 1-1: SerialNumber: syz [ 87.652762][ T2589] usb 1-1: config 0 descriptor?? [ 87.658762][ T2589] smsc95xx v2.0.0 [ 87.713783][ T3731] loop8: detected capacity change from 0 to 2048 [ 87.731276][ T3731] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 87.747094][ T3731] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.804636][ T3078] EXT4-fs (loop8): unmounting filesystem. [ 88.077178][ T3748] loop8: detected capacity change from 0 to 8192 [ 88.110105][ T3748] loop8: p1 p2 p3 p4 [ 88.116114][ T3748] loop8: p3 start 331777 is beyond EOD, truncated [ 88.122772][ T3748] loop8: p4 size 262144 extends beyond EOD, truncated [ 88.133336][ T3748] FAT-fs (loop8p1): bogus number of reserved sectors [ 88.140518][ T3748] FAT-fs (loop8p1): Can't find a valid FAT filesystem [ 88.173906][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1396'. [ 88.215320][ T661] udevd[661]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 88.215514][ T362] udevd[362]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 88.226224][ T335] udevd[335]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 88.416815][ T3756] loop8: detected capacity change from 0 to 40427 [ 88.426332][ T3756] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 88.434455][ T3756] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 88.443571][ T3756] F2FS-fs (loop8): invalid crc value [ 88.450197][ T3756] F2FS-fs (loop8): Found nat_bits in checkpoint [ 88.476996][ T3756] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 88.484494][ T3756] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 88.518441][ T3756] syz.8.1399: attempt to access beyond end of device [ 88.518441][ T3756] loop8: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 88.662955][ T2589] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 88.674883][ T2589] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 88.691702][ T2589] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 88.710687][ T2589] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 88.718481][ T2589] usb 1-1: USB disconnect, device number 11 [ 88.822488][ T3791] loop8: detected capacity change from 0 to 256 [ 88.833598][ T3791] FAT-fs (loop8): Directory bread(block 64) failed [ 88.840410][ T3791] FAT-fs (loop8): Directory bread(block 65) failed [ 88.848138][ T3791] FAT-fs (loop8): Directory bread(block 66) failed [ 88.887591][ T3791] FAT-fs (loop8): Directory bread(block 67) failed [ 88.896952][ T3791] FAT-fs (loop8): Directory bread(block 68) failed [ 88.903723][ T3791] FAT-fs (loop8): Directory bread(block 69) failed [ 88.910553][ T3791] FAT-fs (loop8): Directory bread(block 70) failed [ 88.917158][ T3791] FAT-fs (loop8): Directory bread(block 71) failed [ 88.923910][ T3791] FAT-fs (loop8): Directory bread(block 72) failed [ 88.930731][ T3791] FAT-fs (loop8): Directory bread(block 73) failed [ 88.946824][ T3805] loop3: detected capacity change from 0 to 256 [ 88.962421][ T3805] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.973470][ T3805] FAT-fs (loop3): Filesystem has been set read-only [ 88.980435][ T3805] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.990612][ T3805] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 89.001009][ T3805] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 89.127081][ T3817] loop3: detected capacity change from 0 to 1024 [ 89.140380][ T3817] EXT4-fs: Ignoring removed orlov option [ 89.149732][ T665] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.192045][ T3817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.239022][ T3825] loop0: detected capacity change from 0 to 512 [ 89.290238][ T3825] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.298723][ T3825] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.312883][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 89.331309][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 89.331323][ T28] audit: type=1400 audit(1762325210.822:915): avc: denied { read append } for pid=3824 comm="syz.0.1427" path=2F3335302F66696C65302F02 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.362490][ T665] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.379721][ T665] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.383951][ T3834] loop9: detected capacity change from 0 to 512 [ 89.389608][ T665] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.389644][ T665] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.417903][ T28] audit: type=1400 audit(1762325210.882:916): avc: denied { ioctl } for pid=3831 comm="syz.3.1429" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31916 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.444055][ T665] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.453459][ T285] EXT4-fs (loop0): unmounting filesystem. [ 89.477894][ T665] usb 8-1: config 0 descriptor?? [ 89.501232][ T3834] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 89.514103][ T3834] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.564674][ T28] audit: type=1400 audit(1762325211.052:917): avc: denied { setattr } for pid=3833 comm="syz.9.1431" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.589779][ T3099] EXT4-fs (loop9): unmounting filesystem. [ 89.695740][ T28] audit: type=1400 audit(1762325211.182:918): avc: denied { create } for pid=3852 comm="syz.9.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.759874][ T28] audit: type=1400 audit(1762325211.202:919): avc: denied { bind } for pid=3852 comm="syz.9.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.847830][ T3869] loop9: detected capacity change from 0 to 512 [ 89.875542][ T3869] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 89.886332][ T3869] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.1446: bad orphan inode 15 [ 89.897166][ T665] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 89.897241][ T3869] ext4_test_bit(bit=14, block=5) = 0 [ 89.910629][ T3869] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 89.923603][ T3869] EXT4-fs error (device loop9): __ext4_new_inode:1075: comm syz.9.1446: reserved inode found cleared - inode=1 [ 89.929139][ T665] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 89.949169][ T3869] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 89.949747][ T28] audit: type=1400 audit(1762325211.442:920): avc: denied { remove_name } for pid=3868 comm="syz.9.1446" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.963760][ T3869] EXT4-fs error (device loop9) in ext4_free_inode:362: Corrupt filesystem [ 89.994944][ T28] audit: type=1400 audit(1762325211.442:921): avc: denied { unlink } for pid=3868 comm="syz.9.1446" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.032274][ T3099] EXT4-fs (loop9): unmounting filesystem. [ 90.067912][ T3845] loop0: detected capacity change from 0 to 40427 [ 90.075171][ T3845] F2FS-fs (loop0): Invalid segment/section count (31, 0 x 1) [ 90.083032][ T3878] loop9: detected capacity change from 0 to 512 [ 90.098537][ T3845] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 90.107301][ T3878] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 90.130265][ T3845] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (0, 24) [ 90.139437][ T3845] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 90.158358][ T3878] EXT4-fs (loop9): 1 truncate cleaned up [ 90.165844][ T3878] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 90.182710][ T3878] EXT4-fs (loop9): shut down requested (2) [ 90.186464][ T28] audit: type=1400 audit(1762325211.672:922): avc: denied { bind } for pid=3884 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.199865][ T39] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 90.209113][ T28] audit: type=1400 audit(1762325211.692:923): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 90.230603][ T291] usb 8-1: USB disconnect, device number 4 [ 90.237847][ T28] audit: type=1400 audit(1762325211.692:924): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.265278][ T3099] EXT4-fs (loop9): unmounting filesystem. [ 90.381912][ T3900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1458'. [ 90.398612][ T39] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.410775][ T39] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.433137][ T39] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.448597][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.456876][ T39] usb 9-1: SerialNumber: syz [ 90.668758][ T39] usb 9-1: 0:2 : does not exist [ 90.680949][ T39] usb 9-1: USB disconnect, device number 4 [ 90.693327][ T3909] loop3: detected capacity change from 0 to 40427 [ 90.711516][ T3909] F2FS-fs (loop3): invalid crc value [ 90.728109][ T3910] loop9: detected capacity change from 0 to 40427 [ 90.740600][ T3909] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.763751][ T3910] F2FS-fs (loop9): Found nat_bits in checkpoint [ 90.816581][ T3910] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 90.821515][ T3931] loop7: detected capacity change from 0 to 1024 [ 90.837878][ T3931] EXT4-fs: Ignoring removed orlov option [ 90.843894][ T3099] syz-executor: attempt to access beyond end of device [ 90.843894][ T3099] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.843904][ T3909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.873922][ T3931] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.887936][ T3638] syz-executor: attempt to access beyond end of device [ 90.887936][ T3638] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.904624][ T19] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 90.931427][ T3931] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 90.967316][ T2858] EXT4-fs (loop7): unmounting filesystem. [ 91.090814][ T19] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 91.108387][ T19] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.137486][ T19] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.152060][ T19] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 91.170176][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.189317][ T19] usb 1-1: config 0 descriptor?? [ 91.201404][ T3916] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.308099][ T3956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3956 comm=syz.8.1477 [ 91.321316][ T3956] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1477'. [ 91.539748][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.625915][ T19] waltop 0003:172F:0501.001B: item fetching failed at offset 0/3 [ 91.638315][ T19] waltop: probe of 0003:172F:0501.001B failed with error -22 [ 91.731216][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.746703][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.765197][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.775516][ T3991] loop9: detected capacity change from 0 to 256 [ 91.778485][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.794952][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.805979][ T6] usb 4-1: config 0 descriptor?? [ 91.808567][ T3991] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 91.845237][ T657] usb 1-1: USB disconnect, device number 12 [ 91.895404][ T3998] loop9: detected capacity change from 0 to 8192 [ 91.958132][ T4004] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1500'. [ 92.010326][ T4010] device syz_tun entered promiscuous mode [ 92.082220][ T4020] incfs: Options parsing error. -22 [ 92.087500][ T4020] incfs: mount failed -22 [ 92.216189][ T6] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 92.225938][ T6] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 92.357555][ T4045] loop0: detected capacity change from 0 to 512 [ 92.364270][ T4045] EXT4-fs: Ignoring removed bh option [ 92.382686][ T4045] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.391879][ T4045] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.420880][ T39] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 92.429572][ T285] EXT4-fs (loop0): unmounting filesystem. [ 92.500661][ T6] usb 4-1: USB disconnect, device number 3 [ 92.533807][ T4069] loop8: detected capacity change from 0 to 128 [ 92.619886][ T39] usb 10-1: Using ep0 maxpacket: 8 [ 92.626555][ T39] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 92.634944][ T39] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.645337][ T39] usb 10-1: config 0 has no interface number 0 [ 92.653370][ T39] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 92.662751][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.671002][ T39] usb 10-1: Product: syz [ 92.675351][ T39] usb 10-1: Manufacturer: syz [ 92.680209][ T39] usb 10-1: SerialNumber: syz [ 92.687997][ T39] usb 10-1: config 0 descriptor?? [ 92.694265][ T39] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 92.700942][ T39] usb 10-1: No valid video chain found. [ 92.724665][ T4072] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.731785][ T4072] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.739150][ T4072] device bridge_slave_0 entered promiscuous mode [ 92.746216][ T4072] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.753317][ T4072] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.760720][ T4072] device bridge_slave_1 entered promiscuous mode [ 92.817774][ T4072] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.824868][ T4072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.832154][ T4072] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.839167][ T4072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.863945][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.872173][ T3389] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.879451][ T3389] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.897053][ T665] usb 10-1: USB disconnect, device number 3 [ 92.906801][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.915942][ T3389] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.922994][ T3389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.931442][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.939641][ T3389] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.946694][ T3389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.954278][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.962426][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.972421][ T4077] loop7: detected capacity change from 0 to 40427 [ 92.976322][ T4072] device veth0_vlan entered promiscuous mode [ 92.986077][ T4077] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 92.988838][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.993877][ T4077] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 93.002500][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.019033][ T4077] F2FS-fs (loop7): invalid crc value [ 93.023516][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.032213][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.044752][ T4077] F2FS-fs (loop7): Found nat_bits in checkpoint [ 93.047158][ T4072] device veth1_macvtap entered promiscuous mode [ 93.065795][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.084065][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.094163][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.103164][ T4077] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 93.111687][ T4094] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 93.112154][ T4077] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 93.175489][ T4077] syz.7.1535: attempt to access beyond end of device [ 93.175489][ T4077] loop7: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 93.466701][ T4137] input: syz1 as /devices/virtual/input/input21 [ 93.480479][ T4137] input: failed to attach handler leds to device input21, error: -6 [ 93.541199][ T4143] device vlan2 entered promiscuous mode [ 93.588748][ T4113] loop1: detected capacity change from 0 to 40427 [ 93.718536][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.728708][ T4113] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.781233][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.797658][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 93.821986][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.832522][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 93.843284][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.852140][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.866752][ T4113] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.877536][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.888049][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.897337][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.925279][ T4196] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1564'. [ 94.026299][ T4112] device bridge_slave_1 left promiscuous mode [ 94.034803][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.042291][ T4072] syz-executor: attempt to access beyond end of device [ 94.042291][ T4072] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.060300][ T4112] device bridge_slave_0 left promiscuous mode [ 94.067233][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.089793][ T4112] device veth1_macvtap left promiscuous mode [ 94.095849][ T4112] device veth0_vlan left promiscuous mode [ 94.209792][ T4226] loop1: detected capacity change from 0 to 1024 [ 94.220134][ T4226] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.241009][ T4226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.271455][ T4072] EXT4-fs (loop1): unmounting filesystem. [ 94.292382][ T4233] loop9: detected capacity change from 0 to 256 [ 94.439746][ T665] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.449887][ T60] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 94.566860][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 94.566871][ T28] audit: type=1400 audit(1762325216.052:975): avc: denied { mount } for pid=4251 comm="syz.1.1587" name="/" dev="configfs" ino=14231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 94.595966][ T28] audit: type=1400 audit(1762325216.052:976): avc: denied { search } for pid=4251 comm="syz.1.1587" name="/" dev="configfs" ino=14231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.631885][ T4254] loop1: detected capacity change from 0 to 1024 [ 94.639807][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 94.645445][ T4254] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.1588: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 94.664402][ T4254] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1588: couldn't read orphan inode 11 (err -117) [ 94.665363][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.678117][ T4254] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.687129][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.687153][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.687185][ T60] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.696697][ T665] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.706513][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.731169][ T4254] syz.1.1588[4254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.745932][ T39] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 94.746174][ T60] usb 8-1: config 0 descriptor?? [ 94.767452][ T665] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.770173][ T4254] syz.1.1588[4254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.780863][ T665] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.801883][ T665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.809915][ T665] usb 4-1: SerialNumber: syz [ 94.810726][ T4072] EXT4-fs (loop1): unmounting filesystem. [ 94.857024][ T4261] loop1: detected capacity change from 0 to 512 [ 94.858598][ T28] audit: type=1400 audit(1762325216.342:977): avc: denied { bind } for pid=4262 comm="syz.0.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.884031][ T28] audit: type=1400 audit(1762325216.372:978): avc: denied { listen } for pid=4262 comm="syz.0.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.903678][ T28] audit: type=1400 audit(1762325216.372:979): avc: denied { accept } for pid=4262 comm="syz.0.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.930361][ T4261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.939396][ T4261] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.960811][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.971870][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.976201][ T4072] EXT4-fs (loop1): unmounting filesystem. [ 94.981983][ T39] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.000444][ T39] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.009577][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.021342][ T665] usb 4-1: 0:2 : does not exist [ 95.041796][ T665] usb 4-1: USB disconnect, device number 4 [ 95.073520][ T39] usb 10-1: config 0 descriptor?? [ 95.126888][ T28] audit: type=1400 audit(1762325216.612:980): avc: denied { setopt } for pid=4279 comm="syz.1.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.179909][ T28] audit: type=1400 audit(1762325216.642:981): avc: denied { write } for pid=4282 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.205221][ T28] audit: type=1400 audit(1762325216.642:982): avc: denied { nlmsg_write } for pid=4282 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.273461][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.001D/input/input23 [ 95.296642][ T60] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 95.418252][ T28] audit: type=1400 audit(1762325216.902:983): avc: denied { block_suspend } for pid=4294 comm="syz.1.1606" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.439574][ T19] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 95.500818][ T39] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 95.509015][ T6] usb 8-1: USB disconnect, device number 5 [ 95.510875][ T39] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 95.555369][ T28] audit: type=1400 audit(1762325217.042:984): avc: denied { mount } for pid=4302 comm="syz.1.1610" name="/" dev="ramfs" ino=33735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 95.619753][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 95.626021][ T19] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 95.634480][ T19] usb 1-1: config 0 has no interface number 0 [ 95.640756][ T19] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 95.651154][ T19] usb 1-1: config 0 interface 196 has no altsetting 0 [ 95.659369][ T19] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 95.668813][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.677140][ T19] usb 1-1: Product: syz [ 95.681634][ T19] usb 1-1: Manufacturer: syz [ 95.686225][ T19] usb 1-1: SerialNumber: syz [ 95.710510][ T19] usb 1-1: config 0 descriptor?? [ 95.716341][ T4284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.772179][ T6] usb 10-1: USB disconnect, device number 4 [ 95.898703][ T4535] loop3: detected capacity change from 0 to 1024 [ 95.953524][ T4535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.016023][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 96.127405][ T19] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 96.487918][ T4604] SELinux: security_context_str_to_sid () failed with errno=-22 [ 96.633100][ T4620] loop7: detected capacity change from 0 to 1024 [ 96.662297][ T4620] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.691137][ T4620] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 96.712163][ T4620] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3836: comm syz.7.1650: Allocating blocks 385-513 which overlap fs metadata [ 96.755542][ T4632] loop9: detected capacity change from 0 to 16 [ 96.764661][ T4634] loop3: detected capacity change from 0 to 512 [ 96.775749][ T4634] FAT-fs (loop3): bogus logical sector size 63488 [ 96.781537][ T4632] erofs: (device loop9): mounted with root inode @ nid 36. [ 96.782501][ T4634] FAT-fs (loop3): Can't find a valid FAT filesystem [ 96.799586][ T4620] EXT4-fs (loop7): pa ffff8881175673f0: logic 16, phys. 129, len 24 [ 96.802410][ T4632] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 96.807671][ T4620] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 96.826965][ T4632] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 96.839068][ T4632] erofs: (device loop9): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 96.862483][ T4632] syz.9.1655: attempt to access beyond end of device [ 96.862483][ T4632] loop9: rw=0, sector=296, nr_sectors = 8 limit=16 [ 96.882322][ T4632] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 96.882541][ T2858] EXT4-fs (loop7): unmounting filesystem. [ 96.893437][ T4636] loop3: detected capacity change from 0 to 256 [ 96.918378][ T4632] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 96.968325][ T4644] loop9: detected capacity change from 0 to 256 [ 96.996826][ T4644] FAT-fs (loop9): Directory bread(block 64) failed [ 97.013195][ T4644] FAT-fs (loop9): Directory bread(block 65) failed [ 97.027105][ T4644] FAT-fs (loop9): Directory bread(block 66) failed [ 97.033749][ T4644] FAT-fs (loop9): Directory bread(block 67) failed [ 97.040572][ T4644] FAT-fs (loop9): Directory bread(block 68) failed [ 97.047144][ T4644] FAT-fs (loop9): Directory bread(block 69) failed [ 97.056203][ T4644] FAT-fs (loop9): Directory bread(block 70) failed [ 97.063002][ T4644] FAT-fs (loop9): Directory bread(block 71) failed [ 97.075971][ T4644] FAT-fs (loop9): Directory bread(block 72) failed [ 97.083898][ T4644] FAT-fs (loop9): Directory bread(block 73) failed [ 97.149776][ T4325] kworker/u4:127: attempt to access beyond end of device [ 97.149776][ T4325] loop9: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 97.163921][ T4325] kworker/u4:127: attempt to access beyond end of device [ 97.163921][ T4325] loop9: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 97.178354][ T4325] kworker/u4:127: attempt to access beyond end of device [ 97.178354][ T4325] loop9: rw=1, sector=1960, nr_sectors = 1380 limit=256 [ 98.140318][ T6] usb 1-1: USB disconnect, device number 13 [ 98.168007][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.182722][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 98.221208][ T6] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 98.223317][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.249419][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 98.269963][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.295742][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.322374][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.340874][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.349295][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.455268][ T4743] input: syz0 as /devices/virtual/input/input25 [ 98.703341][ T4776] loop9: detected capacity change from 0 to 256 [ 98.711981][ T4775] tipc: Started in network mode [ 98.730192][ T4775] tipc: Node identity ac14142f, cluster identity 4711 [ 98.749892][ T4776] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.766410][ T4775] tipc: New replicast peer: 0.0.0.0 [ 98.798813][ T4775] tipc: Enabled bearer , priority 10 [ 98.874716][ T4780] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 98.957537][ T4795] loop3: detected capacity change from 0 to 128 [ 99.193828][ T4825] netlink: 'syz.0.1741': attribute type 7 has an invalid length. [ 99.212366][ T4825] netlink: 'syz.0.1741': attribute type 8 has an invalid length. [ 99.220185][ T4825] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1741'. [ 99.269543][ T4837] netpci0: tun_chr_ioctl cmd 2147767520 [ 99.381351][ T4854] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1752'. [ 99.399211][ T4853] loop7: detected capacity change from 0 to 1024 [ 99.448642][ T4853] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 99.503111][ T4845] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.510754][ T4845] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.518446][ T4885] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 99.520145][ T4845] device bridge_slave_0 entered promiscuous mode [ 99.534025][ T4845] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.541178][ T4845] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.548769][ T4845] device bridge_slave_1 entered promiscuous mode [ 99.571477][ T2858] EXT4-fs (loop7): unmounting filesystem. [ 99.665275][ T2589] kernel write not supported for file bpf-prog (pid: 2589 comm: kworker/1:6) [ 99.687432][ T4914] loop9: detected capacity change from 0 to 1024 [ 99.694238][ T4914] EXT4-fs: Ignoring removed orlov option [ 99.735309][ T4914] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 99.736079][ T4845] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.749950][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 99.749963][ T28] audit: type=1400 audit(1762325221.232:1030): avc: denied { setattr } for pid=4913 comm="syz.9.1770" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.750825][ T4845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.786420][ T4845] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.793450][ T4845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.801671][ T3099] EXT4-fs (loop9): unmounting filesystem. [ 99.816645][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.826460][ T3283] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.832971][ T4927] loop9: detected capacity change from 0 to 1024 [ 99.839977][ T3283] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.848855][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.857595][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.864658][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.879226][ T4927] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 99.892425][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.900685][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.907725][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.909838][ T6] tipc: Node number set to 2886997039 [ 99.916268][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.935569][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.952984][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.953498][ T4933] loop1: detected capacity change from 0 to 512 [ 99.966388][ T4845] device veth0_vlan entered promiscuous mode [ 99.970876][ T4933] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 99.974950][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.990040][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.998155][ T4933] EXT4-fs (loop1): invalid journal inode [ 100.004639][ T3099] EXT4-fs (loop9): unmounting filesystem. [ 100.008305][ T4933] EXT4-fs (loop1): can't get journal size [ 100.016598][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.025425][ T4933] EXT4-fs (loop1): 1 truncate cleaned up [ 100.082417][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.095876][ T4933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.107022][ T4845] device veth1_macvtap entered promiscuous mode [ 100.128246][ T4126] device bridge_slave_1 left promiscuous mode [ 100.134576][ T4126] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.141541][ T4072] EXT4-fs (loop1): unmounting filesystem. [ 100.151795][ T4126] device bridge_slave_0 left promiscuous mode [ 100.158961][ T4126] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.168490][ T4126] device veth1_macvtap left promiscuous mode [ 100.174812][ T4126] device veth0_vlan left promiscuous mode [ 100.316330][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.324780][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.356279][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.372358][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 100.381377][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.389457][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 100.397569][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.405696][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.413906][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.422095][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.430370][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.621236][ T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 100.666768][ T4969] loop1: detected capacity change from 0 to 1024 [ 100.693816][ T4969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.732304][ T4985] 8021q: VLANs not supported on gre0 [ 100.756309][ T4991] loop9: detected capacity change from 0 to 16 [ 100.763183][ T4991] erofs: (device loop9): mounted with root inode @ nid 36. [ 100.772244][ T4991] syz.9.1798: attempt to access beyond end of device [ 100.772244][ T4991] loop9: rw=524288, sector=8, nr_sectors = 256 limit=16 [ 100.786787][ T4991] syz.9.1798: attempt to access beyond end of device [ 100.786787][ T4991] loop9: rw=0, sector=8, nr_sectors = 32 limit=16 [ 100.800123][ T4991] syz.9.1798: attempt to access beyond end of device [ 100.800123][ T4991] loop9: rw=0, sector=8, nr_sectors = 32 limit=16 [ 100.800750][ T4072] EXT4-fs (loop1): unmounting filesystem. [ 100.834237][ T4995] tipc: Enabling of bearer rejected, media not registered [ 100.843746][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.858770][ T6] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.873367][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.882103][ T6] usb 6-1: config 0 descriptor?? [ 100.967312][ T5001] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.081455][ T4999] loop9: detected capacity change from 0 to 40427 [ 101.090995][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1809'. [ 101.103412][ T4999] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 101.114240][ T4999] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 101.134255][ T4999] F2FS-fs (loop9): invalid crc value [ 101.153959][ T4999] F2FS-fs (loop9): Found nat_bits in checkpoint [ 101.195078][ T4999] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 101.202205][ T4999] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 101.219384][ T28] audit: type=1400 audit(1762325222.702:1031): avc: denied { create } for pid=4998 comm="syz.9.1802" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 101.235553][ T3099] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 101.240003][ T3099] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 101.240360][ T28] audit: type=1400 audit(1762325222.702:1032): avc: denied { read } for pid=4998 comm="syz.9.1802" name="file1" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 101.247605][ T3099] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 101.247617][ T3099] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 101.247627][ T3099] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 101.247636][ T3099] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 101.247643][ T3099] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 101.279763][ T665] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 101.285829][ T28] audit: type=1400 audit(1762325222.732:1033): avc: denied { rmdir } for pid=3099 comm="syz-executor" name="file0" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.345707][ T6] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 101.369339][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001F/input/input26 [ 101.381895][ T28] audit: type=1400 audit(1762325222.732:1034): avc: denied { unlink } for pid=3099 comm="syz-executor" name="file1" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 101.388240][ T5033] loop0: detected capacity change from 0 to 4096 [ 101.404400][ T28] audit: type=1400 audit(1762325222.802:1035): avc: denied { write } for pid=5028 comm="syz.0.1816" name="file0" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.404429][ T28] audit: type=1400 audit(1762325222.802:1036): avc: denied { open } for pid=5028 comm="syz.0.1816" path="/399/file0" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.404449][ T28] audit: type=1400 audit(1762325222.802:1037): avc: denied { ioctl } for pid=5028 comm="syz.0.1816" path="/399/file0" dev="tmpfs" ino=2097 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.429730][ T19] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 101.470528][ T5033] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.482796][ T6] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 101.514875][ T28] audit: type=1400 audit(1762325223.002:1038): avc: denied { mounton } for pid=5032 comm="syz.0.1818" path="/401/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.541319][ T5033] overlayfs: conflicting lowerdir path [ 101.553364][ T665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.566063][ T665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.579595][ T665] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 101.591123][ T285] EXT4-fs (loop0): unmounting filesystem. [ 101.617200][ T665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.636355][ T665] usb 2-1: config 0 descriptor?? [ 101.689564][ T28] audit: type=1400 audit(1762325223.172:1039): avc: denied { read } for pid=5036 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 101.711864][ T19] usb 8-1: Using ep0 maxpacket: 16 [ 101.723073][ T19] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 101.732335][ T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.740535][ T19] usb 8-1: Product: syz [ 101.744720][ T19] usb 8-1: Manufacturer: syz [ 101.749319][ T19] usb 8-1: SerialNumber: syz [ 101.754730][ T19] r8152-cfgselector 8-1: config 0 descriptor?? [ 101.774207][ T5044] loop0: detected capacity change from 0 to 512 [ 101.812252][ T5044] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.821693][ T5044] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.856885][ T285] EXT4-fs (loop0): unmounting filesystem. [ 101.860322][ T39] usb 6-1: USB disconnect, device number 6 [ 101.862690][ C0] keytouch 0003:0926:3333.001F: usb_submit_urb(ctrl) failed: -19 [ 101.876729][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? Stopping sshd: stopped /usr/sbin/sshd (pid 194) OK Stopping crond: stopped /usr/sbin/crond (pid 187) OK [ 102.029739][ T6] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 102.071834][ T665] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 Stopping dhcpcd... [ 102.088744][ T665] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 no /sbin/dhcpcd [ 102.096582][ T665] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 found; none killed [ 102.115773][ T665] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 Stopping network: [ 102.129729][ T665] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 102.141381][ T665] playstation 0003:054C:0DF2.0020: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 102.164586][ T19] r8152-cfgselector 8-1: Unknown version 0x0000 [ 102.171855][ T19] r8152-cfgselector 8-1: bad CDC descriptors [ 102.189791][ T19] r8152-cfgselector 8-1: Unknown version 0x0000 [ 102.202887][ T19] r8152-cfgselector 8-1: USB disconnect, device number 6 [ 102.221076][ T6] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 102.232219][ T6] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.245331][ T6] usb 10-1: config 0 interface 0 has no altsetting 0 [ 102.259770][ T6] usb 10-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 102.270939][ T665] playstation 0003:054C:0DF2.0020: Invalid byte count transferred, expected 20 got 0 [ 102.272571][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.290021][ T665] playstation 0003:054C:0DF2.0020: Failed to retrieve DualSense pairing info: -22 [ 102.305796][ T665] playstation 0003:054C:0DF2.0020: Failed to get MAC address from DualSense [ 102.306933][ T6] usb 10-1: config 0 descriptor?? [ 102.317860][ T665] playstation 0003:054C:0DF2.0020: Failed to create dualsense. OK [ 102.327980][ T665] playstation: probe of 0003:054C:0DF2.0020 failed with error -22 [ 102.330475][ T5042] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 Stopping iptables: OK Stopping system message bus: [ 102.483342][ T39] usb 2-1: USB disconnect, device number 7 done killall: can't kill pid 335: No such process killall: can't kill pid 363: No such process killall: can't kill pid 661: No such process killall: can't kill pid 1018: No such [ 102.710941][ T5108] loop0: detected capacity change from 0 to 8192 process Stopping klogd: [ 102.761022][ T6] waltop 0003:172F:0501.0021: item fetching failed at offset 0/3 OK [ 102.772548][ T6] waltop: probe of 0003:172F:0501.0021 failed with error -22 Stopping acpid: [ 102.901314][ T5144] IPv6: sit1: Disabled Multicast RS [ 102.984789][ T5148] loop0: detected capacity change from 0 to 128 [ 102.992825][ T5148] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.001666][ T5148] ext4 filesystem being mounted at /424/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.004094][ T39] usb 10-1: USB disconnect, device number 5 [ 103.019155][ T285] EXT4-fs (loop0): unmounting filesystem. [ 103.061994][ T5163] pimreg0: tun_chr_ioctl cmd 1074812118 [ 103.067820][ T5163] pimreg0: tun_chr_ioctl cmd 1074025681 [ 103.140644][ T5175] loop0: detected capacity change from 0 to 128 [ 103.148480][ T5175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.157177][ T5175] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.177524][ T285] EXT4-fs (loop0): unmounting filesystem. [ 103.218905][ T5169] loop1: detected capacity change from 0 to 40427 [ 103.226641][ T5169] F2FS-fs (loop1): invalid crc value [ 103.232995][ T5169] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.252761][ T5169] F2FS-fs (loop1): Start checkpoint disabled! [ 103.259310][ T5169] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 103.284140][ T3365] kworker/u4:51: attempt to access beyond end of device [ 103.284140][ T3365] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 103.369778][ T665] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 103.459719][ T6] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 103.551370][ T665] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.551626][ T5221] loop1: detected capacity change from 0 to 256 [ 103.567509][ T665] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.583247][ T5221] FAT-fs (loop1): Directory bread(block 64) failed [ 103.586253][ T665] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.591045][ T5221] FAT-fs (loop1): Directory bread(block 65) failed [ 103.600796][ T665] usb 8-1: config 0 descriptor?? [ 103.605867][ T5221] FAT-fs (loop1): Directory bread(block 66) failed [ 103.619578][ T5221] FAT-fs (loop1): Directory bread(block 67) failed [ 103.619908][ T5225] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 103.626503][ T5221] FAT-fs (loop1): Directory bread(block 68) failed [ 103.640140][ T5221] FAT-fs (loop1): Directory bread(block 69) failed [ 103.646824][ T5221] FAT-fs (loop1): Directory bread(block 70) failed [ 103.651024][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.653444][ T5221] FAT-fs (loop1): Directory bread(block 71) failed [ 103.668127][ T5221] FAT-fs (loop1): Directory bread(block 72) failed [ 103.674867][ T5221] FAT-fs (loop1): Directory bread(block 73) failed [ 103.681490][ T6] usb 1-1: not running at top speed; connect to a high speed hub [ 103.698265][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.714501][ T5221] syz.1.1885: attempt to access beyond end of device [ 103.714501][ T5221] loop1: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 103.728188][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.742623][ T6] usb 1-1: string descriptor 0 read error: -22 [ 103.749254][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.758610][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.770693][ T6] usb 1-1: 0:2 : does not exist [ 103.770840][ T5235] SELinux: failed to load policy OK Stopping syslogd: stopped /sbin/syslogd (pid 85) OK umount: can't remount debugfs read-only [ 104.018116][ T665] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 104.028029][ T665] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0022/input/input28 [ 104.079718][ T60] usb 2-1: new full-speed USB device number 8 using dummy_hcd umount: sysfs busy - remounted read-only Connection to 10.128.1.163 closed by remote host. umount: devtmpfs busy - remounted readSent SIGTERM to all processes [ 104.130186][ T665] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 104.149945][ T6] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 104.154571][ T665] usb 8-1: USB disconnect, device number 7 [ 104.168100][ T6] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 104.240110][ T6] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 104.293191][ T6] usb 1-1: USB disconnect, device number 14 [ 104.349417][ T60] usb 2-1: device descriptor read/all, error -71 [ 104.780323][ T43] device bridge_slave_1 left promiscuous mode [ 104.786427][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.793896][ T43] device bridge_slave_0 left promiscuous mode [ 104.800058][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.807895][ T43] device veth1_macvtap left promiscuous mode [ 104.813940][ T43] device veth0_vlan left promiscuous mode [ 105.132570][ T43] tipc: Disabling bearer [ 105.137883][ T43] tipc: Left network mode Sent SIGKILL to all processes Requesting system poweroff [ 105.660827][ T43] device bridge_slave_1 left promiscuous mode [ 105.666934][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.674296][ T43] device bridge_slave_0 left promiscuous mode [ 105.680433][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.687990][ T43] device bridge_slave_1 left promiscuous mode [ 105.694125][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.702715][ T43] device bridge_slave_0 left promiscuous mode [ 105.708801][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.716432][ T43] device bridge_slave_1 left promiscuous mode [ 105.722582][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.729899][ T43] device bridge_slave_0 left promiscuous mode [ 105.735971][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.743579][ T43] device bridge_slave_1 left promiscuous mode [ 105.749648][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.756929][ T43] device bridge_slave_0 left promiscuous mode [ 105.763049][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.771012][ T43] device veth1_macvtap left promiscuous mode [ 105.777004][ T43] device veth0_vlan left promiscuous mode [ 105.782930][ T43] device veth1_macvtap left promiscuous mode [ 105.788905][ T43] device veth0_vlan left promiscuous mode [ 105.794794][ T43] device veth1_macvtap left promiscuous mode [ 105.800820][ T43] device veth0_vlan left promiscuous mode [ 105.806653][ T43] device veth1_macvtap left promiscuous mode [ 105.812854][ T43] device veth0_vlan left promiscuous mode [ 106.280644][ T5251] kvm: exiting hardware virtualization [ 106.286704][ T5251] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 106.293415][ T5251] ACPI: PM: Preparing to enter system sleep state S5 [ 106.300249][ T5251] reboot: Power down serialport: VM disconnected.