last executing test programs: 7.886022152s ago: executing program 3 (id=180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 7.827619353s ago: executing program 3 (id=182): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3f, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0xfffffffdffffffff}}, 0x28) 7.418238898s ago: executing program 3 (id=186): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 7.25815834s ago: executing program 3 (id=191): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 7.258025191s ago: executing program 3 (id=192): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") 7.231823261s ago: executing program 3 (id=193): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="87"], 0x0) 7.205216121s ago: executing program 32 (id=193): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="87"], 0x0) 6.323430183s ago: executing program 5 (id=198): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001800120008000100736974"], 0x38}}, 0x0) 6.218940645s ago: executing program 0 (id=201): r0 = socket$inet(0x2, 0xa, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)={0x34, r2, 0x205, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "362efdb209"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000880}, 0x8090) 6.193859055s ago: executing program 0 (id=202): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="604a772826dea736729103ad8de752c24b2367617ecb7b6e6831a11ecd0b3617817414bf3243338133aeb1ef59f7bb", 0x2f, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xfe1, &(0x7f0000001700)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfd3, 0x67, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) 6.142328276s ago: executing program 0 (id=203): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) 6.142165116s ago: executing program 0 (id=204): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.116895136s ago: executing program 5 (id=205): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000440)={0x2}) 4.158343673s ago: executing program 0 (id=222): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) 3.718088459s ago: executing program 2 (id=226): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) 3.6522674s ago: executing program 2 (id=227): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.61469486s ago: executing program 2 (id=228): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000140)={0x0, 0x8, 0x4, "003a6eb7"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x3, "9cf0c2"}}) 3.142298847s ago: executing program 4 (id=234): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000002180)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c636f6465706167653d3836342c636f6465706167653d3836352c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c726f6469722c756e695f786c6174653d312c001533912f7d7b3f05c87b0b"], 0x1, 0x26c, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 3.138615557s ago: executing program 4 (id=235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}, 0x0) 3.058237618s ago: executing program 5 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080214000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x4804}, 0x10) 3.058135878s ago: executing program 5 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 3.058085448s ago: executing program 4 (id=239): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x3000) ioperm(0x0, 0x5, 0x4000000000000020) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) 3.032848569s ago: executing program 5 (id=241): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.018042288s ago: executing program 4 (id=242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x5e, 0x4, 0x0, 0x8, 0x9, 0x7e, 0x5, 0x1, 0xd5, 0x2, 0xd, 0x0, 0x6, 0x3, 0x3, 0x2, 0x2, 0x1, '\x00', 0x5}) 2.956201609s ago: executing program 4 (id=247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) 2.92953939s ago: executing program 4 (id=248): write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.882322751s ago: executing program 1 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0x19, 0x5, 0xd}) 2.882148471s ago: executing program 1 (id=250): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.171056131s ago: executing program 0 (id=251): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 1.392090711s ago: executing program 1 (id=252): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid}]}}) 1.314286352s ago: executing program 1 (id=253): open(0x0, 0x145142, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.314044892s ago: executing program 1 (id=254): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)={[{@noquota}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nolazytime}]}, 0xfe, 0x264, &(0x7f0000000700)="$eJzs3TtoJHUcB/Df7MM1JkjURhAfICIaCLEQBBttFAISgoigQkTEShIhJthlrWwstFZJZRPE7nJXHteEaw6uzd2lyDVXXLjiwhV3xR6zs3tsNhvy2Mccmc8HNjP/nf9rYL7/TIqZBFBYkxHxUUSUI2IqIqoRkXRWeCP7TLaK62NbCxGNxuf3kma9rJxptxuPiHpEfBBRaR9b3fx698H2p2//vlJ969/Nr8ZGdX6d9nZ3Ptv/Z+63C7PvrZZa3020tp3nMUhJj+8qScSLwxjsKZFU8p4BJzH/y/830ty/FBFvNvNfjVIrsn8sP3OlGu/+fVTbP+9ef2WUcwUGr9Gopr8D6w2gcErNe+CkNB0R2X6pND2d3cPfLCfx49Lyz1M/LK0sfp/3SgUMQFLP/u7d+eRS7eJ4V/7vlLP8n8j7Q54pMBRp/r+Y37iV7u+X854NMBKvZps0/1Pfrr0T8g+FI/9QXPIPxSX/cA6cMbvyD8Ul/1Bc8g/nWLW9U+95WP6huOQfiqsr/7k8jwvkozP/AECxNGp5P4EM5CXv9QcAAAAAAAAAAAAAAAAAADhsfWxrof0Z1ZhX/4rY+zgiKgfHrzWPlpv/jzji2ebP5+4nabUnkqxZX755vc8O+vTfgJ++nqudrv7ztwc7/mlde204/f56sHjku+3WFiPqaeWZSuXw9Z+0rr9jHdn/C8c0rH53sgEGJekqf/jlaMfv9mgj3/FntyMup+vPTK/1rxQvN7e915+Jzlcsn9FPD/vsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJF5HAAA//+4Vmsn") r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000100)=0x3) 1.186603554s ago: executing program 1 (id=255): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 589.491372ms ago: executing program 2 (id=256): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 334.197086ms ago: executing program 2 (id=257): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xe}}}, 0x24}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808004, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 106.772499ms ago: executing program 2 (id=258): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) 0s ago: executing program 5 (id=259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0x41, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. [ 27.488062][ T24] audit: type=1400 audit(1746599733.860:80): avc: denied { mounton } for pid=260 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.489595][ T260] cgroup: Unknown subsys name 'net' [ 27.510875][ T24] audit: type=1400 audit(1746599733.860:81): avc: denied { mount } for pid=260 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.539381][ T24] audit: type=1400 audit(1746599733.860:82): avc: denied { mounton } for pid=260 comm="syz-executor" path="/syzcgroup/net" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.539932][ T260] cgroup: Unknown subsys name 'devices' [ 27.561879][ T24] audit: type=1400 audit(1746599733.890:83): avc: denied { unmount } for pid=260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.794797][ T260] cgroup: Unknown subsys name 'hugetlb' [ 27.800962][ T260] cgroup: Unknown subsys name 'rlimit' [ 27.941709][ T24] audit: type=1400 audit(1746599734.310:84): avc: denied { setattr } for pid=260 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.964995][ T24] audit: type=1400 audit(1746599734.310:85): avc: denied { mounton } for pid=260 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.989891][ T24] audit: type=1400 audit(1746599734.310:86): avc: denied { mount } for pid=260 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.996828][ T262] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.022444][ T24] audit: type=1400 audit(1746599734.390:87): avc: denied { relabelto } for pid=262 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.047955][ T24] audit: type=1400 audit(1746599734.390:88): avc: denied { write } for pid=262 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.144789][ T24] audit: type=1400 audit(1746599734.520:89): avc: denied { read } for pid=260 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.171240][ T260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.197836][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.205683][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.213508][ T268] device bridge_slave_0 entered promiscuous mode [ 29.229955][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.238166][ T270] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.246301][ T270] device bridge_slave_0 entered promiscuous mode [ 29.253893][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.261198][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.269215][ T268] device bridge_slave_1 entered promiscuous mode [ 29.290152][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.299148][ T270] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.309392][ T270] device bridge_slave_1 entered promiscuous mode [ 29.339493][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.346993][ T271] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.355012][ T271] device bridge_slave_0 entered promiscuous mode [ 29.374806][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.382811][ T271] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.390728][ T271] device bridge_slave_1 entered promiscuous mode [ 29.403132][ T272] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.410273][ T272] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.418059][ T272] device bridge_slave_0 entered promiscuous mode [ 29.425057][ T272] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.433785][ T272] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.443145][ T272] device bridge_slave_1 entered promiscuous mode [ 29.453952][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.461628][ T269] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.470052][ T269] device bridge_slave_0 entered promiscuous mode [ 29.480172][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.489353][ T269] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.498368][ T269] device bridge_slave_1 entered promiscuous mode [ 29.660215][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.667799][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.676363][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.685170][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.705685][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.713717][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.721940][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.729770][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.739709][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.747954][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.756771][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.765465][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.776807][ T272] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.784586][ T272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.792466][ T272] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.800733][ T272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.821004][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.828631][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.835974][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.843930][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.895209][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.903512][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.911146][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.919539][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.928513][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.936863][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.946672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.955555][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.963068][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.970904][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.979416][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.006263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.014846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.022643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.030752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.039808][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.047105][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.054618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.063423][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.070909][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.078767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.088328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.097110][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.104390][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.112659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.120978][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.128164][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.136379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.145436][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.153031][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.160701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.169140][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.176207][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.184422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.193175][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.200585][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.222465][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.230876][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.237963][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.245919][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.254824][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.263186][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.271269][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.279828][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.288077][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.296824][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.305544][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.315497][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.323229][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.343667][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.351841][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.359972][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.368187][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.376546][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.385754][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.394004][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.402526][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.411863][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.431234][ T272] device veth0_vlan entered promiscuous mode [ 30.442312][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.450765][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.459284][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.466846][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.475275][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.484618][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.493257][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.500533][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.508495][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.516980][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.525840][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.534177][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.542083][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.549998][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.558278][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.566798][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.575065][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.583981][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.598355][ T271] device veth0_vlan entered promiscuous mode [ 30.606135][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.613825][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.621428][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.630038][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.643347][ T272] device veth1_macvtap entered promiscuous mode [ 30.654414][ T270] device veth0_vlan entered promiscuous mode [ 30.661544][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.670327][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.678471][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.686450][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.694947][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.703417][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.710972][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.732644][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.741479][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.750971][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.760428][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.769175][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.777745][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.789526][ T271] device veth1_macvtap entered promiscuous mode [ 30.801710][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.810697][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.810718][ T272] request_module fs-gadgetfs succeeded, but still no fs? [ 30.819738][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.837565][ T270] device veth1_macvtap entered promiscuous mode [ 30.855167][ T268] device veth0_vlan entered promiscuous mode [ 30.862801][ T272] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 30.888976][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.912991][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.922803][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.931187][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.940174][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.949101][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.958699][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.967310][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.983057][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.990588][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.005708][ T269] device veth0_vlan entered promiscuous mode [ 31.018316][ T268] device veth1_macvtap entered promiscuous mode [ 31.026092][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.043432][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.051186][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.059420][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.067929][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.076672][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.094448][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.105446][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.175514][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.197365][ T269] device veth1_macvtap entered promiscuous mode [ 31.206989][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.234866][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.244190][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.253869][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.262243][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.279078][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.306971][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.315970][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.325211][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.422921][ T312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.496521][ T310] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.537331][ T312] device syzkaller0 entered promiscuous mode [ 32.121149][ T317] device ip6erspan0 entered promiscuous mode [ 32.165989][ T310] EXT4-fs (loop4): 1 orphan inode deleted [ 32.175286][ T310] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 32.188559][ T310] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.655580][ T24] kauditd_printk_skb: 79 callbacks suppressed [ 32.655593][ T24] audit: type=1400 audit(1746599738.800:169): avc: denied { write } for pid=333 comm="syz.4.7" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.778959][ T24] audit: type=1400 audit(1746599738.800:170): avc: denied { add_name } for pid=333 comm="syz.4.7" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.806492][ T24] audit: type=1400 audit(1746599738.800:171): avc: denied { create } for pid=333 comm="syz.4.7" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.829041][ T24] audit: type=1400 audit(1746599738.810:172): avc: denied { read write open } for pid=333 comm="syz.4.7" path="/2/file1/core" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.865041][ T335] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 32.876765][ T335] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.954709][ T24] audit: type=1400 audit(1746599739.310:173): avc: denied { write } for pid=334 comm="syz.1.11" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.329782][ T337] EXT4-fs (loop4): 1 orphan inode deleted [ 35.354686][ T337] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 35.390924][ T337] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.501867][ T24] audit: type=1400 audit(1746599739.310:174): avc: denied { open } for pid=334 comm="syz.1.11" path="/2/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.525587][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.588779][ T357] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 35.604132][ T357] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.101841][ T368] sched: RT throttling activated [ 36.726801][ T369] device ip6erspan0 entered promiscuous mode [ 36.878343][ T24] audit: type=1400 audit(1746599739.320:175): avc: denied { read write } for pid=334 comm="syz.1.11" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.923824][ T24] audit: type=1400 audit(1746599739.320:176): avc: denied { open } for pid=334 comm="syz.1.11" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.965246][ T24] audit: type=1400 audit(1746599739.320:177): avc: denied { ioctl } for pid=334 comm="syz.1.11" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.992857][ T24] audit: type=1400 audit(1746599739.600:178): avc: denied { create } for pid=340 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.812955][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 37.812969][ T24] audit: type=1326 audit(1746599744.180:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470665b969 code=0x7ffc0000 [ 37.854822][ T378] EXT4-fs (loop2): 1 orphan inode deleted [ 37.864849][ T378] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 37.934567][ T24] audit: type=1326 audit(1746599744.220:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f470665a1d7 code=0x7ffc0000 [ 37.996671][ T378] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.140982][ T396] device syzkaller0 entered promiscuous mode [ 38.155234][ T5] usb 2-1: device not accepting address 2, error -71 [ 38.162219][ T24] audit: type=1326 audit(1746599744.220:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470665b969 code=0x7ffc0000 [ 38.218738][ T24] audit: type=1326 audit(1746599744.220:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f470665b969 code=0x7ffc0000 [ 38.415041][ T24] audit: type=1326 audit(1746599744.220:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470665b969 code=0x7ffc0000 [ 38.807988][ T24] audit: type=1326 audit(1746599744.220:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f470665b969 code=0x7ffc0000 [ 38.992245][ T24] audit: type=1326 audit(1746599744.220:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470665b969 code=0x7ffc0000 [ 39.365464][ T24] audit: type=1326 audit(1746599744.230:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f470665b969 code=0x7ffc0000 [ 39.511382][ T24] audit: type=1326 audit(1746599744.230:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470665b969 code=0x7ffc0000 [ 39.534923][ T24] audit: type=1326 audit(1746599744.230:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f470665b969 code=0x7ffc0000 [ 39.964531][ T436] EXT4-fs (loop3): 1 orphan inode deleted [ 39.970564][ T436] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 40.012607][ T436] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.044511][ T429] EXT4-fs (loop1): 1 orphan inode deleted [ 40.052443][ T429] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 40.072675][ T429] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.363043][ T474] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 42.602504][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 42.629874][ T474] device syzkaller0 entered promiscuous mode [ 42.714803][ T483] EXT4-fs (loop3): Test dummy encryption mode enabled [ 42.721957][ T483] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 42.721957][ T483] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 42.721957][ T483] [ 42.739869][ T483] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 42.747528][ T483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.888730][ T483] EXT4-fs (loop3): 1 truncate cleaned up [ 42.894477][ T483] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,barrier=0x0000000000000009,noacl,discard,mblk_io_submit,nolazytime,bsddf,max_batch_time=0x0000000000000995,sb=0x0000000000000010,,errors=continue [ 43.482612][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.514297][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.544327][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.575209][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.588279][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.681137][ T25] usb 3-1: config 0 descriptor?? [ 44.377000][ T496] ====================================================== [ 44.377000][ T496] WARNING: the mand mount option is being deprecated and [ 44.377000][ T496] will be removed in v5.15! [ 44.377000][ T496] ====================================================== [ 44.589529][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 44.629427][ T25] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 44.646174][ T505] EXT4-fs (loop3): Test dummy encryption mode enabled [ 44.653315][ T505] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 44.653315][ T505] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 44.653315][ T505] [ 44.671499][ T505] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 44.679320][ T505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.695480][ T500] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 44.926303][ T505] EXT4-fs (loop3): 1 truncate cleaned up [ 44.932378][ T505] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,barrier=0x0000000000000009,noacl,discard,mblk_io_submit,nolazytime,bsddf,max_batch_time=0x0000000000000995,sb=0x0000000000000010,,errors=continue [ 46.056650][ T496] EXT4-fs (loop4): 1 orphan inode deleted [ 46.068670][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 46.068687][ T24] audit: type=1400 audit(1746599752.420:211): avc: denied { unlink } for pid=269 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.111155][ T496] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x000000000000007b,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 46.278270][ T521] cgroup: syz.2.50 (521) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 47.223445][ T25] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 47.252345][ T25] usb 3-1: USB disconnect, device number 2 [ 47.258590][ T496] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.272639][ T521] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 47.300111][ T524] device syzkaller0 entered promiscuous mode [ 47.536064][ T24] audit: type=1326 audit(1746599753.910:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.2.55" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6340a4f969 code=0x0 [ 47.584218][ T537] FAULT_INJECTION: forcing a failure. [ 47.584218][ T537] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.599038][ T24] audit: type=1400 audit(1746599753.970:213): avc: denied { ioctl } for pid=533 comm="syz.2.55" path="socket:[16057]" dev="sockfs" ino=16057 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.601794][ T537] CPU: 0 PID: 537 Comm: syz.4.53 Not tainted 5.10.236-syzkaller-00012-gab07aeb2c93d #0 [ 47.633261][ T537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.635680][ T24] audit: type=1400 audit(1746599753.970:214): avc: denied { setopt } for pid=533 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.643418][ T537] Call Trace: [ 47.643445][ T537] __dump_stack+0x21/0x24 [ 47.643468][ T537] dump_stack_lvl+0x169/0x1d8 [ 47.663297][ T24] audit: type=1400 audit(1746599753.970:215): avc: denied { create } for pid=533 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.665920][ T537] ? thaw_kernel_threads+0x220/0x220 [ 47.670337][ T24] audit: type=1400 audit(1746599753.970:216): avc: denied { write } for pid=533 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.674989][ T537] ? vsnprintf+0x1871/0x1960 [ 47.675003][ T537] ? show_regs_print_info+0x18/0x18 [ 47.675016][ T537] dump_stack+0x15/0x1c [ 47.675029][ T537] should_fail+0x3c1/0x510 [ 47.675047][ T537] should_fail_usercopy+0x1a/0x20 [ 47.700428][ T24] audit: type=1400 audit(1746599753.970:217): avc: denied { read } for pid=533 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.720361][ T537] _copy_to_user+0x20/0x90 [ 47.720376][ T537] simple_read_from_buffer+0xe9/0x160 [ 47.720388][ T537] proc_fail_nth_read+0x19a/0x210 [ 47.720399][ T537] ? proc_fault_inject_write+0x2f0/0x2f0 [ 47.720411][ T537] ? rw_verify_area+0x1c0/0x360 [ 47.720432][ T537] ? proc_fault_inject_write+0x2f0/0x2f0 [ 47.725703][ T24] audit: type=1400 audit(1746599753.970:218): avc: denied { read } for pid=533 comm="syz.2.55" dev="sockfs" ino=16058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.730420][ T537] vfs_read+0x1fe/0xa10 [ 47.820869][ T537] ? kernel_read+0x70/0x70 [ 47.825305][ T537] ? __kasan_check_write+0x14/0x20 [ 47.830419][ T537] ? mutex_lock+0x8c/0xe0 [ 47.834741][ T537] ? mutex_trylock+0xa0/0xa0 [ 47.839318][ T537] ? __fget_files+0x2c4/0x320 [ 47.843987][ T537] ? __fdget_pos+0x2d2/0x380 [ 47.848653][ T537] ? ksys_read+0x71/0x240 [ 47.852973][ T537] ksys_read+0x140/0x240 [ 47.857211][ T537] ? vfs_write+0xd60/0xd60 [ 47.861643][ T537] __x64_sys_read+0x7b/0x90 [ 47.866154][ T537] do_syscall_64+0x31/0x40 [ 47.870593][ T537] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.876500][ T537] RIP: 0033:0x7fa59d59737c [ 47.880904][ T537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 47.900712][ T537] RSP: 002b:00007fa59bc01030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.909127][ T537] RAX: ffffffffffffffda RBX: 00007fa59d7bffa0 RCX: 00007fa59d59737c [ 47.917224][ T537] RDX: 000000000000000f RSI: 00007fa59bc010a0 RDI: 0000000000000006 [ 47.925199][ T537] RBP: 00007fa59bc01090 R08: 0000000000000000 R09: 0000000000000000 [ 47.933165][ T537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.941243][ T537] R13: 0000000000000000 R14: 00007fa59d7bffa0 R15: 00007ffdfedd63a8 [ 47.977941][ T541] device syzkaller0 entered promiscuous mode [ 47.997655][ T24] audit: type=1400 audit(1746599754.370:219): avc: denied { write } for pid=547 comm="syz.4.58" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 48.054147][ T545] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 48.426008][ T544] syz.1.56 (544): /proc/538/oom_adj is deprecated, please use /proc/538/oom_score_adj instead. [ 48.436960][ T24] audit: type=1400 audit(1746599754.800:220): avc: denied { write } for pid=538 comm="syz.1.56" name="mcfilter6" dev="proc" ino=4026532649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.532499][ T362] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.772499][ T329] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 48.782978][ T564] 9pnet: p9_fd_create_tcp (564): problem connecting socket to 127.0.0.1 [ 48.815340][ T566] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 48.829603][ T566] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.022774][ T362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 49.176552][ T362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33536, setting to 1024 [ 49.190567][ T362] usb 5-1: New USB device found, idVendor=d86d, idProduct=c222, bcdDevice= 0.00 [ 49.202926][ T362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.263920][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.292008][ T580] netlink: 'syz.0.65': attribute type 16 has an invalid length. [ 50.310006][ T580] netlink: 'syz.0.65': attribute type 17 has an invalid length. [ 50.326332][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.333539][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.427113][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 50.445671][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.464308][ T577] xt_hashlimit: size too large, truncated to 1048576 [ 50.471681][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 50.483702][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.502189][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.520054][ T362] usb 5-1: config 0 descriptor?? [ 50.523876][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.542922][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.551462][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.619376][ T584] exfat: Deprecated parameter 'namecase' [ 50.632543][ T329] usb 2-1: unable to get BOS descriptor or descriptor too short [ 50.653841][ T584] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 50.772602][ T329] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 50.782766][ T329] usb 2-1: can't read configurations, error -71 [ 50.879277][ T594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.66'. [ 51.088962][ T362] hid (null): usage index exceeded [ 51.095458][ T362] hid-generic 0003:D86D:C222.0002: ignoring exceeding usage max [ 51.104554][ T362] hid-generic 0003:D86D:C222.0002: ignoring exceeding usage max [ 51.112213][ T362] hid-generic 0003:D86D:C222.0002: usage index exceeded [ 51.119280][ T362] hid-generic 0003:D86D:C222.0002: item 0 0 2 2 parsing failed [ 51.127201][ T362] hid-generic: probe of 0003:D86D:C222.0002 failed with error -22 [ 51.131251][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 51.131264][ T24] audit: type=1400 audit(1746599757.500:222): avc: denied { setopt } for pid=595 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.198199][ T24] audit: type=1400 audit(1746599757.510:223): avc: denied { write } for pid=595 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.249806][ T24] audit: type=1400 audit(1746599757.620:224): avc: denied { create } for pid=598 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.306697][ T362] usb 5-1: USB disconnect, device number 2 [ 51.896231][ T24] audit: type=1400 audit(1746599758.270:225): avc: denied { write } for pid=598 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.931507][ T24] audit: type=1400 audit(1746599758.290:226): avc: denied { unmount } for pid=269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.966218][ T24] audit: type=1400 audit(1746599758.340:227): avc: denied { setopt } for pid=606 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.042461][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 52.282810][ T15] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 52.358531][ T24] audit: type=1400 audit(1746599758.730:228): avc: denied { sys_module } for pid=618 comm="syz.0.76" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 52.387034][ T24] audit: type=1400 audit(1746599758.750:229): avc: denied { write } for pid=618 comm="syz.0.76" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.414113][ T24] audit: type=1400 audit(1746599758.750:230): avc: denied { open } for pid=618 comm="syz.0.76" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.442502][ T24] audit: type=1400 audit(1746599758.750:231): avc: denied { ioctl } for pid=618 comm="syz.0.76" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.482524][ T5] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 52.502361][ T5] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 41239, setting to 1024 [ 52.623545][ T641] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 52.632474][ T641] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.86: invalid indirect mapped block 234881024 (level 0) [ 52.646551][ T5] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 52.647403][ T641] EXT4-fs (loop1): Remounting filesystem read-only [ 52.655974][ T5] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 52.671014][ T15] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.671201][ T592] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.686383][ T5] usb 4-1: Manufacturer: syz [ 52.700579][ T15] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.701902][ T641] EXT4-fs (loop1): 1 truncate cleaned up [ 52.710733][ T15] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 52.728297][ T641] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,resuid=0x0000000000000000,noblock_validity,init_itable,mblk_io_submit,max_dir_size_kb=0x0000000000008001,nodiscard,nouid32,errors=remount-ro, [ 52.728413][ T5] usb 4-1: SerialNumber: syz [ 52.754789][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.803054][ T15] hub 3-1:4.0: USB hub found [ 52.830114][ T650] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 52.934775][ T651] loop_set_status: loop7 () has still dirty pages (nrpages=1024) [ 53.022538][ T15] hub 3-1:4.0: 12 ports detected [ 53.028035][ T15] usb 3-1: selecting invalid altsetting 1 [ 53.035554][ T15] hub 3-1:4.0: Using single TT (err -22) [ 53.045034][ T5] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 53.054746][ T15] hub 3-1:4.0: insufficient power available to use all downstream ports [ 53.067480][ T5] usb 4-1: USB disconnect, device number 2 [ 53.102624][ T592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.119598][ T592] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 53.129128][ T592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.138234][ T592] usb 5-1: config 0 descriptor?? [ 53.254968][ T661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'. [ 53.436079][ T663] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 53.444336][ T663] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 53.454021][ T663] F2FS-fs (loop1): invalid crc value [ 53.463108][ T663] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.493349][ T663] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 53.500665][ T663] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 53.506373][ T607] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 53.541549][ T111] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 53.541581][ T607] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.552658][ T111] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 53.589174][ T607] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.72: bg 0: block 18: invalid block bitmap [ 53.613277][ T592] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 53.628901][ T607] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 53.634762][ T592] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input5 [ 53.655236][ T607] EXT4-fs (loop2): 1 truncate cleaned up [ 53.661486][ T607] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,barrier,nogrpid,max_dir_size_kb=0x0000000000001000,,errors=continue [ 53.736590][ T592] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 54.735689][ T15] usb 3-1: USB disconnect, device number 3 [ 54.747193][ T695] EXT4-fs (loop1): Test dummy encryption mode enabled [ 54.754249][ T695] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 54.754249][ T695] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 54.754249][ T695] [ 54.773152][ T695] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 54.780418][ T695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.830827][ T695] EXT4-fs (loop1): 1 truncate cleaned up [ 54.839421][ T695] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,barrier=0x0000000000000009,noacl,discard,mblk_io_submit,nolazytime,bsddf,max_batch_time=0x0000000000000995,sb=0x0000000000000010,,errors=continue [ 55.067814][ T704] 9pnet: p9_fd_create_tcp (704): problem connecting socket to 127.0.0.1 [ 55.297098][ T710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 55.413654][ T718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 55.820922][ T288] usb 5-1: USB disconnect, device number 3 [ 55.842743][ T716] loop_set_status: loop7 () has still dirty pages (nrpages=1048) [ 56.071097][ T737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 56.097556][ T724] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 56.106301][ T724] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 56.117257][ T724] F2FS-fs (loop3): invalid crc value [ 56.184199][ T724] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.240595][ T724] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 56.250534][ T724] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.285846][ T432] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 56.321372][ T432] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 56.422464][ T288] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.452530][ T610] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 56.476091][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 56.476104][ T24] audit: type=1400 audit(1746599762.850:256): avc: denied { write } for pid=756 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.722442][ T610] usb 2-1: Using ep0 maxpacket: 8 [ 56.772626][ T611] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 56.822449][ T15] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 56.822484][ T288] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.822498][ T288] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.822510][ T288] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.822535][ T288] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 56.822548][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.823308][ T288] usb 5-1: config 0 descriptor?? [ 57.032528][ T610] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 57.032546][ T610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.032557][ T610] usb 2-1: Product: syz [ 57.032569][ T610] usb 2-1: Manufacturer: syz [ 57.032580][ T610] usb 2-1: SerialNumber: syz [ 57.033572][ T610] usb 2-1: config 0 descriptor?? [ 57.102432][ T15] usb 3-1: Using ep0 maxpacket: 8 [ 57.152512][ T611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.152529][ T611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.152547][ T611] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.152571][ T611] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.152584][ T611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.153455][ T611] usb 4-1: config 0 descriptor?? [ 57.332501][ T288] usb 5-1: string descriptor 0 read error: -71 [ 57.392336][ T24] audit: type=1400 audit(1746599763.760:257): avc: denied { mount } for pid=769 comm="syz.0.131" name="/" dev="ramfs" ino=17542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.412811][ T15] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 57.437584][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.447655][ T15] usb 3-1: Product: syz [ 57.452614][ T15] usb 3-1: Manufacturer: syz [ 57.457641][ T15] usb 3-1: SerialNumber: syz [ 57.463806][ T15] usb 3-1: config 0 descriptor?? [ 57.604336][ T288] usbhid 5-1:0.0: can't add hid device: -71 [ 57.611009][ T288] usbhid: probe of 5-1:0.0 failed with error -71 [ 57.620380][ T288] usb 5-1: USB disconnect, device number 4 [ 57.780643][ T611] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 57.791362][ T611] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 58.013949][ T24] audit: type=1400 audit(1746599764.390:258): avc: denied { ioctl } for pid=794 comm="syz.0.141" path="socket:[16936]" dev="sockfs" ino=16936 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.044519][ T24] audit: type=1400 audit(1746599764.420:259): avc: denied { create } for pid=798 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.065680][ T24] audit: type=1400 audit(1746599764.420:260): avc: denied { bind } for pid=798 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.088207][ T24] audit: type=1400 audit(1746599764.420:261): avc: denied { name_bind } for pid=798 comm="syz.0.143" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 58.112246][ T24] audit: type=1400 audit(1746599764.420:262): avc: denied { node_bind } for pid=798 comm="syz.0.143" saddr=172.30.1.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 58.154317][ T24] audit: type=1400 audit(1746599764.530:263): avc: denied { create } for pid=803 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.176183][ T24] audit: type=1400 audit(1746599764.530:264): avc: denied { write } for pid=803 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.197116][ T24] audit: type=1400 audit(1746599764.530:265): avc: denied { nlmsg_write } for pid=803 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.883063][ T611] usb 2-1: USB disconnect, device number 6 [ 59.282452][ T611] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 59.554368][ T824] erofs: (device loop3): mounted with root inode @ nid 36. [ 59.568096][ T592] usb 3-1: USB disconnect, device number 4 [ 59.582462][ T288] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.582661][ T824] attempt to access beyond end of device [ 59.582661][ T824] loop3: rw=0, want=34359739352, limit=16 [ 59.642501][ T611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.657954][ T611] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 59.675830][ T611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.691918][ T611] usb 2-1: config 0 descriptor?? [ 59.767775][ T836] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdd9bb677, utbl_chksum : 0xe619d30d) [ 59.845639][ T15] usb 4-1: USB disconnect, device number 3 [ 59.845684][ T830] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 59.859799][ T830] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.871834][ T830] F2FS-fs (loop3): invalid crc value [ 59.879089][ T830] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.909068][ T830] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 59.917100][ T830] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.935093][ T288] usb 1-1: Using ep0 maxpacket: 8 [ 59.957945][ T432] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 59.967433][ T432] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 60.139358][ T853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 60.212595][ T288] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 60.223040][ T288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.236339][ T288] usb 1-1: Product: syz [ 60.240632][ T288] usb 1-1: Manufacturer: syz [ 60.250860][ T288] usb 1-1: SerialNumber: syz [ 60.257235][ T288] usb 1-1: config 0 descriptor?? [ 60.283370][ T870] FAT-fs (loop3): Directory bread(block 64) failed [ 60.290225][ T870] FAT-fs (loop3): Directory bread(block 65) failed [ 60.297920][ T870] FAT-fs (loop3): Directory bread(block 66) failed [ 60.304903][ T870] FAT-fs (loop3): Directory bread(block 67) failed [ 60.312105][ T870] FAT-fs (loop3): Directory bread(block 68) failed [ 60.319758][ T870] FAT-fs (loop3): Directory bread(block 69) failed [ 60.327035][ T870] FAT-fs (loop3): Directory bread(block 70) failed [ 60.333874][ T870] FAT-fs (loop3): Directory bread(block 71) failed [ 60.341122][ T870] FAT-fs (loop3): Directory bread(block 72) failed [ 60.348669][ T870] FAT-fs (loop3): Directory bread(block 73) failed [ 60.443813][ T880] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 60.453552][ T880] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.472806][ T880] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.175: bg 0: block 345: padding at end of block bitmap is not set [ 60.487910][ T880] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 60.615171][ T885] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 60.703304][ T899] exfat: Deprecated parameter 'namecase' [ 60.709157][ T899] exfat: Deprecated parameter 'namecase' [ 60.715633][ T899] exfat: Unknown parameter 'keep_last_dots' [ 61.013589][ T401] usb 2-1: USB disconnect, device number 7 [ 61.065640][ T911] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 61.072466][ T15] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 61.156752][ T919] netlink: 'syz.1.188': attribute type 12 has an invalid length. [ 61.165825][ T919] netlink: 'syz.1.188': attribute type 29 has an invalid length. [ 61.174166][ T919] netlink: 148 bytes leftover after parsing attributes in process `syz.1.188'. [ 61.214389][ T914] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 61.229135][ T914] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.362501][ T15] usb 3-1: device descriptor read/64, error -71 [ 61.372670][ T611] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 61.441267][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.448685][ T930] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.456402][ T930] device bridge_slave_0 entered promiscuous mode [ 61.465504][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.473192][ T930] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.481296][ T930] device bridge_slave_1 entered promiscuous mode [ 61.519918][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.527802][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.535748][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.544569][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.566508][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.574787][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.583250][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.594881][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.603492][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.610757][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.620718][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.629500][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.636883][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.652182][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.662251][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.677447][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.691364][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.700183][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.709030][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.717073][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.726049][ T930] device veth0_vlan entered promiscuous mode [ 61.739017][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.747690][ T611] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.748050][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.758224][ T15] usb 3-1: device descriptor read/64, error -71 [ 61.768203][ T930] device veth1_macvtap entered promiscuous mode [ 61.773050][ T611] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.784928][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.796131][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.805133][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.817050][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.825557][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.854056][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 61.854068][ T24] audit: type=1400 audit(1746599768.220:285): avc: denied { bind } for pid=934 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.880897][ T611] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 61.883629][ T24] audit: type=1400 audit(1746599768.220:286): avc: denied { name_bind } for pid=934 comm="syz.5.194" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 61.912416][ T24] audit: type=1400 audit(1746599768.220:287): avc: denied { node_bind } for pid=934 comm="syz.5.194" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 62.004844][ T611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 62.013344][ T611] usb 5-1: SerialNumber: syz [ 62.064039][ T432] device bridge_slave_1 left promiscuous mode [ 62.070275][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.078680][ T939] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 62.086858][ T939] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 62.096248][ T939] F2FS-fs (loop5): invalid crc value [ 62.099852][ T432] device bridge_slave_0 left promiscuous mode [ 62.109668][ T939] F2FS-fs (loop5): Found nat_bits in checkpoint [ 62.111170][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.125639][ T432] device veth1_macvtap left promiscuous mode [ 62.131827][ T432] device veth0_vlan left promiscuous mode [ 62.151413][ T939] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 62.158707][ T939] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 62.166678][ T15] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 62.185321][ T942] EXT4-fs (loop1): Value of option "test_dummy_encryption=v1.quota" is unrecognized [ 62.208503][ T939] attempt to access beyond end of device [ 62.208503][ T939] loop5: rw=2049, want=78008, limit=40427 [ 62.226986][ T930] attempt to access beyond end of device [ 62.226986][ T930] loop5: rw=2049, want=40968, limit=40427 [ 62.238749][ T289] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 62.247993][ T289] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 62.283275][ T611] usb 5-1: 0:2 : does not exist [ 62.324156][ T592] usb 1-1: USB disconnect, device number 2 [ 62.334720][ T611] usb 5-1: USB disconnect, device number 5 [ 62.339190][ T953] syz.0.201 uses obsolete (PF_INET,SOCK_PACKET) [ 62.416906][ T961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.198'. [ 62.442527][ T15] usb 3-1: device descriptor read/64, error -71 [ 62.553651][ T296] udevd[296]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.572553][ T5] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 62.714013][ T20] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.742544][ T592] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 62.832530][ T15] usb 3-1: device descriptor read/64, error -71 [ 62.942556][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.953113][ T15] usb usb3-port1: attempt power cycle [ 62.958940][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 62.970144][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 62.971131][ T24] audit: type=1400 audit(1746599769.340:288): avc: denied { remove_name } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.980328][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.003516][ T592] usb 1-1: Using ep0 maxpacket: 8 [ 63.004123][ T24] audit: type=1400 audit(1746599769.340:289): avc: denied { rename } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.044227][ T5] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 63.044784][ T24] audit: type=1400 audit(1746599769.340:290): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.074366][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.083616][ T5] usb 2-1: config 0 descriptor?? [ 63.123504][ T5] usb 2-1: MIDIStreaming interface descriptor not found [ 63.132589][ T20] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 63.143525][ T20] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.157463][ T592] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 63.166740][ T20] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.176751][ T592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.185126][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.193894][ T592] usb 1-1: config 0 descriptor?? [ 63.199753][ T20] usb 6-1: config 0 descriptor?? [ 63.222555][ T963] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 63.243025][ T20] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 63.326725][ T20] usb 2-1: USB disconnect, device number 8 [ 63.412495][ T15] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 63.593179][ T15] usb 3-1: device descriptor read/8, error -71 [ 63.664158][ T592] hid-generic 0003:1044:7A4D.0005: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 63.752047][ T976] FAT-fs (loop4): Directory bread(block 64) failed [ 63.759647][ T976] FAT-fs (loop4): Directory bread(block 65) failed [ 63.766808][ T976] FAT-fs (loop4): Directory bread(block 66) failed [ 63.773596][ T976] FAT-fs (loop4): Directory bread(block 67) failed [ 63.780525][ T976] FAT-fs (loop4): Directory bread(block 68) failed [ 63.787326][ T976] FAT-fs (loop4): Directory bread(block 69) failed [ 63.794920][ T976] FAT-fs (loop4): Directory bread(block 70) failed [ 63.803171][ T976] FAT-fs (loop4): Directory bread(block 71) failed [ 63.810504][ T976] FAT-fs (loop4): Directory bread(block 72) failed [ 63.817571][ T976] FAT-fs (loop4): Directory bread(block 73) failed [ 63.842485][ T15] usb 3-1: device descriptor read/8, error -71 [ 63.886522][ T20] usb 1-1: USB disconnect, device number 3 [ 63.955056][ T986] kernel profiling enabled (shift: 7) [ 64.005511][ T24] audit: type=1400 audit(1746599770.380:291): avc: denied { read write } for pid=987 comm="syz.2.216" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 64.028373][ T24] audit: type=1400 audit(1746599770.380:292): avc: denied { open } for pid=987 comm="syz.2.216" path="/35/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 64.077139][ T981] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 64.085054][ T981] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 64.094468][ T981] F2FS-fs (loop1): invalid crc value [ 64.111380][ T981] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.143488][ T981] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 64.150707][ T981] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 64.167620][ T981] attempt to access beyond end of device [ 64.167620][ T981] loop1: rw=2049, want=78080, limit=40427 [ 64.187491][ T432] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 64.196682][ T432] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 64.273456][ T1003] exfat: Deprecated parameter 'namecase' [ 64.279288][ T24] audit: type=1400 audit(1746599770.650:293): avc: denied { mounton } for pid=1002 comm="syz.4.221" path="/file0" dev="ramfs" ino=18052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 64.311331][ T1003] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd73f1698, utbl_chksum : 0xe619d30d) [ 64.662447][ T610] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 64.821639][ T24] audit: type=1326 audit(1746599771.190:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6340a4f969 code=0x7ffc0000 [ 64.902493][ T610] usb 1-1: Using ep0 maxpacket: 32 [ 65.022611][ T610] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 65.033424][ T610] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 65.042502][ T610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.051584][ T610] usb 1-1: config 0 descriptor?? [ 65.072506][ T1006] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.093023][ T610] hub 1-1:0.0: bad descriptor, ignoring hub [ 65.099049][ T610] hub: probe of 1-1:0.0 failed with error -5 [ 65.105729][ T610] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 65.322511][ T15] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 65.344478][ T1029] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.373977][ T1029] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,quota,dioread_nolock,,errors=continue [ 65.386210][ T1029] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.456822][ T1042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.235'. [ 65.466136][ T610] usb 6-1: USB disconnect, device number 2 [ 65.692568][ T15] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.702873][ T15] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 65.712005][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.721027][ T15] usb 3-1: config 0 descriptor?? [ 65.892487][ T5] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 65.922463][ T610] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.932625][ T503] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 66.172502][ T503] usb 2-1: Using ep0 maxpacket: 8 [ 66.252557][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.263007][ T5] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 66.272041][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.281157][ T5] usb 5-1: config 0 descriptor?? [ 66.286218][ T610] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.296415][ T610] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 66.302522][ T503] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.305500][ T610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.314099][ T503] usb 2-1: config 179 has no interface number 0 [ 66.326458][ T610] usb 6-1: config 0 descriptor?? [ 66.328384][ T503] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 66.344171][ T503] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 66.355505][ T503] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 66.366797][ T503] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 66.378540][ T503] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 66.392037][ T503] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 66.401130][ T503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.422492][ T1077] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 66.645486][ T503] usb 2-1: USB disconnect, device number 9 [ 66.662471][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 66.672713][ T5] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 66.712557][ T5] usb 1-1: device reset changed ep0 maxpacket size! [ 66.719319][ T5] usb 1-1: USB disconnect, device number 4 [ 67.072501][ T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.239114][ T1093] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,errors=remount-ro,barrier=0x0000000000000003,nolazytime, [ 67.252700][ T1093] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.287522][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 67.287547][ T24] audit: type=1400 audit(1746599773.660:314): avc: denied { ioctl } for pid=1092 comm="syz.1.254" path="/49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=12 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.512591][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.522838][ T5] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 67.531989][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.540903][ T5] usb 1-1: config 0 descriptor?? [ 67.682472][ T20] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 67.951609][ T5] usb 3-1: USB disconnect, device number 9 [ 67.996856][ T1103] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.004403][ T1103] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.256: bg 0: block 248: padding at end of block bitmap is not set [ 68.019002][ T1103] Quota error (device loop2): write_blk: dquota write failed [ 68.026571][ T1103] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 68.036864][ T1103] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.256: Failed to acquire dquot type 1 [ 68.048833][ T1103] EXT4-fs (loop2): 1 truncate cleaned up [ 68.054681][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.055044][ T1103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 68.065926][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.084999][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.092335][ T1103] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 68.098459][ T20] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.116813][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.122941][ T1103] EXT4-fs (loop2): re-mounted. Opts: (null) [ 68.129431][ T20] usb 2-1: config 0 descriptor?? [ 68.133089][ T1103] Quota error (device loop2): find_block_dqentry: Quota for id 131072 referenced but not present [ 68.146499][ T1103] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 131072 [ 68.156865][ T1103] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.256: Failed to acquire dquot type 1 [ 68.363305][ T1109] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 68.371147][ T1109] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 68.380281][ T1109] F2FS-fs (loop2): invalid crc value [ 68.387593][ T1109] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.416865][ T1109] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 68.423976][ T1109] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.443996][ T7] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 68.453044][ T7] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 68.541843][ T5] usb 6-1: USB disconnect, device number 3 [ 68.566603][ T1117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.259'. [ 68.575917][ T1117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.259'. [ 68.585618][ T1117] ================================================================== [ 68.593898][ T1117] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 68.602260][ T1117] Read of size 8 at addr ffff888119c168c0 by task syz.5.259/1117 [ 68.610087][ T1117] [ 68.612439][ T1117] CPU: 1 PID: 1117 Comm: syz.5.259 Not tainted 5.10.236-syzkaller-00012-gab07aeb2c93d #0 [ 68.622338][ T1117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.632592][ T1117] Call Trace: [ 68.635907][ T1117] __dump_stack+0x21/0x24 [ 68.640341][ T1117] dump_stack_lvl+0x169/0x1d8 [ 68.645042][ T1117] ? show_regs_print_info+0x18/0x18 [ 68.650268][ T1117] ? thaw_kernel_threads+0x220/0x220 [ 68.655359][ T15] usb 5-1: USB disconnect, device number 6 [ 68.655586][ T1117] print_address_description+0x7f/0x2c0 [ 68.667772][ T1117] ? tc_setup_flow_action+0x842/0x3280 [ 68.673384][ T1117] kasan_report+0xe2/0x130 [ 68.677824][ T1117] ? flow_action_cookie_create+0x28/0x90 [ 68.683487][ T1117] ? tc_setup_flow_action+0x842/0x3280 [ 68.689140][ T1117] __asan_report_load8_noabort+0x14/0x20 [ 68.694777][ T1117] tc_setup_flow_action+0x842/0x3280 [ 68.700315][ T1117] ? __kmalloc+0x1a7/0x330 [ 68.704963][ T1117] ? flow_rule_alloc+0x32/0x2c0 [ 68.709978][ T1117] mall_replace_hw_filter+0x293/0x810 [ 68.715609][ T1117] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 68.721814][ T1117] ? mall_set_parms+0x410/0x410 [ 68.726664][ T1117] ? tcf_exts_destroy+0xb0/0xb0 [ 68.731512][ T1117] ? pcpu_alloc+0xf8a/0x16b0 [ 68.736231][ T1117] ? mall_set_parms+0x19d/0x410 [ 68.741113][ T1117] mall_change+0x528/0x750 [ 68.745526][ T1117] ? __kasan_check_write+0x14/0x20 [ 68.750636][ T1117] ? mall_get+0xa0/0xa0 [ 68.754794][ T1117] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 68.760704][ T1117] ? nla_strcmp+0xf4/0x140 [ 68.765176][ T1117] tc_new_tfilter+0x13f6/0x1a10 [ 68.770024][ T1117] ? mall_get+0xa0/0xa0 [ 68.774175][ T1117] ? tcf_gate_entry_destructor+0x20/0x20 [ 68.779807][ T1117] ? security_capable+0x87/0xb0 [ 68.784723][ T1117] ? ns_capable+0x8c/0xf0 [ 68.789047][ T1117] ? netlink_net_capable+0x125/0x160 [ 68.794319][ T1117] ? tcf_gate_entry_destructor+0x20/0x20 [ 68.800049][ T1117] rtnetlink_rcv_msg+0x800/0xb90 [ 68.804987][ T1117] ? rtnetlink_bind+0x80/0x80 [ 68.809684][ T1117] ? arch_stack_walk+0xee/0x140 [ 68.814528][ T1117] ? stack_trace_save+0x98/0xe0 [ 68.819536][ T1117] ? stack_trace_snprint+0xf0/0xf0 [ 68.824795][ T1117] ? memcpy+0x56/0x70 [ 68.828782][ T1117] ? avc_has_perm+0x234/0x360 [ 68.833485][ T1117] ? __kasan_slab_alloc+0xbd/0xf0 [ 68.838520][ T1117] ? slab_post_alloc_hook+0x5d/0x2f0 [ 68.843793][ T1117] ? ___sys_sendmsg+0x1f0/0x260 [ 68.848896][ T1117] ? avc_has_perm_noaudit+0x240/0x240 [ 68.854261][ T1117] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 68.859631][ T1117] netlink_rcv_skb+0x1e0/0x430 [ 68.864424][ T1117] ? rtnetlink_bind+0x80/0x80 [ 68.869113][ T1117] ? netlink_ack+0xb80/0xb80 [ 68.873712][ T1117] ? __netlink_lookup+0x387/0x3b0 [ 68.879338][ T1117] rtnetlink_rcv+0x1c/0x20 [ 68.883843][ T1117] netlink_unicast+0x87c/0xa40 [ 68.888622][ T1117] netlink_sendmsg+0x88d/0xb30 [ 68.893487][ T1117] ? netlink_getsockopt+0x530/0x530 [ 68.898958][ T1117] ? security_socket_sendmsg+0x82/0xa0 [ 68.904408][ T1117] ? netlink_getsockopt+0x530/0x530 [ 68.909605][ T1117] ____sys_sendmsg+0x5a2/0x8c0 [ 68.914363][ T1117] ? __sys_sendmsg_sock+0x40/0x40 [ 68.919410][ T1117] ? import_iovec+0x7c/0xb0 [ 68.923934][ T1117] ___sys_sendmsg+0x1f0/0x260 [ 68.928712][ T1117] ? __sys_sendmsg+0x250/0x250 [ 68.933700][ T1117] ? __fdget+0x1a1/0x230 [ 68.937994][ T1117] __x64_sys_sendmsg+0x1e2/0x2a0 [ 68.942932][ T1117] ? ___sys_sendmsg+0x260/0x260 [ 68.947779][ T1117] ? switch_fpu_return+0x197/0x340 [ 68.952903][ T1117] do_syscall_64+0x31/0x40 [ 68.957310][ T1117] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 68.963187][ T1117] RIP: 0033:0x7f162b5a9969 [ 68.967594][ T1117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.987208][ T1117] RSP: 002b:00007f1629c12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.995623][ T1117] RAX: ffffffffffffffda RBX: 00007f162b7d0fa0 RCX: 00007f162b5a9969 [ 69.003586][ T1117] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 69.011548][ T1117] RBP: 00007f162b62bab1 R08: 0000000000000000 R09: 0000000000000000 [ 69.019537][ T1117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.027782][ T1117] R13: 0000000000000000 R14: 00007f162b7d0fa0 R15: 00007ffcc1a893f8 [ 69.035755][ T1117] [ 69.038087][ T1117] Allocated by task 1117: [ 69.042442][ T1117] __kasan_kmalloc+0xda/0x110 [ 69.047234][ T1117] __kmalloc+0x1a7/0x330 [ 69.051471][ T1117] tcf_idr_create+0x5f/0x790 [ 69.056154][ T1117] tcf_idr_create_from_flags+0x61/0x70 [ 69.061610][ T1117] tcf_gact_init+0x2b4/0x520 [ 69.066185][ T1117] tcf_action_init_1+0x3e1/0x670 [ 69.071130][ T1117] tcf_action_init+0x1e6/0x700 [ 69.075881][ T1117] tcf_exts_validate+0x215/0x510 [ 69.080832][ T1117] mall_set_parms+0x4b/0x410 [ 69.085607][ T1117] mall_change+0x45c/0x750 [ 69.090015][ T1117] tc_new_tfilter+0x13f6/0x1a10 [ 69.094870][ T1117] rtnetlink_rcv_msg+0x800/0xb90 [ 69.099796][ T1117] netlink_rcv_skb+0x1e0/0x430 [ 69.104557][ T1117] rtnetlink_rcv+0x1c/0x20 [ 69.109199][ T1117] netlink_unicast+0x87c/0xa40 [ 69.113964][ T1117] netlink_sendmsg+0x88d/0xb30 [ 69.119055][ T1117] ____sys_sendmsg+0x5a2/0x8c0 [ 69.123818][ T1117] ___sys_sendmsg+0x1f0/0x260 [ 69.128487][ T1117] __x64_sys_sendmsg+0x1e2/0x2a0 [ 69.133420][ T1117] do_syscall_64+0x31/0x40 [ 69.137830][ T1117] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 69.143702][ T1117] [ 69.146034][ T1117] The buggy address belongs to the object at ffff888119c16800 [ 69.146034][ T1117] which belongs to the cache kmalloc-192 of size 192 [ 69.160099][ T1117] The buggy address is located 0 bytes to the right of [ 69.160099][ T1117] 192-byte region [ffff888119c16800, ffff888119c168c0) [ 69.173848][ T1117] The buggy address belongs to the page: [ 69.179480][ T1117] page:ffffea0004670580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119c16 [ 69.189716][ T1117] flags: 0x4000000000000200(slab) [ 69.195009][ T1117] raw: 4000000000000200 ffffea0004167000 0000000200000002 ffff888100043380 [ 69.203600][ T1117] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 69.212163][ T1117] page dumped because: kasan: bad access detected [ 69.218924][ T1117] page_owner tracks the page as allocated [ 69.224636][ T1117] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 151, ts 5723685958, free_ts 5718223578 [ 69.240508][ T1117] prep_new_page+0x179/0x180 [ 69.245311][ T1117] get_page_from_freelist+0x2235/0x23d0 [ 69.250872][ T1117] __alloc_pages_nodemask+0x268/0x5f0 [ 69.256274][ T1117] new_slab+0x84/0x3f0 [ 69.260336][ T1117] ___slab_alloc+0x2a6/0x450 [ 69.264946][ T1117] __slab_alloc+0x63/0xa0 [ 69.269329][ T1117] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 69.274720][ T1117] alloc_pipe_info+0xe7/0x4b0 [ 69.279399][ T1117] create_pipe_files+0x8d/0x6c0 [ 69.284256][ T1117] __do_pipe_flags+0x4f/0x200 [ 69.288923][ T1117] do_pipe2+0x99/0x170 [ 69.292981][ T1117] __x64_sys_pipe2+0x5a/0x70 [ 69.297579][ T1117] do_syscall_64+0x31/0x40 [ 69.302334][ T1117] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 69.308209][ T1117] page last free stack trace: [ 69.312886][ T1117] free_unref_page_prepare+0x2b7/0x2d0 [ 69.318346][ T1117] free_unref_page_list+0x12e/0x9b0 [ 69.323531][ T1117] release_pages+0xe38/0xe80 [ 69.328110][ T1117] free_pages_and_swap_cache+0x86/0xa0 [ 69.333552][ T1117] tlb_finish_mmu+0x175/0x300 [ 69.338301][ T1117] exit_mmap+0x2fc/0x540 [ 69.342541][ T1117] __mmput+0x93/0x2f0 [ 69.346721][ T1117] mmput+0x4e/0x150 [ 69.350553][ T1117] do_exit+0x986/0x2470 [ 69.354833][ T1117] do_group_exit+0x141/0x310 [ 69.359702][ T1117] __x64_sys_exit_group+0x3f/0x40 [ 69.364873][ T1117] do_syscall_64+0x31/0x40 [ 69.369310][ T1117] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 69.375291][ T1117] [ 69.377700][ T1117] Memory state around the buggy address: [ 69.383438][ T1117] ffff888119c16780: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.391888][ T1117] ffff888119c16800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.399969][ T1117] >ffff888119c16880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 69.408021][ T1117] ^ [ 69.414167][ T1117] ffff888119c16900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.422336][ T1117] ffff888119c16980: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 69.430480][ T1117] ================================================================== [ 69.438545][ T1117] Disabling lock debugging due to kernel taint [ 69.453553][ T20] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 69.467028][ T20] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 69.487028][ T20] usb 1-1: USB disconnect, device number 5 [ 69.494293][ T1123] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 69.508507][ T1123] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 69.518191][ T1123] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.261: Failed to acquire dquot type 0 [ 69.530513][ T1123] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 69.544976][ T1123] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 69.554034][ T1123] EXT4-fs error (device loop2): ext4_dirty_inode:6110: inode #13: comm syz.2.261: mark_inode_dirty error [ 69.565582][ T1123] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 69.573980][ T1123] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #13: comm syz.2.261: mark_inode_dirty error [ 69.585986][ T1123] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 69.594472][ T1123] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27 [ 69.602682][ T1123] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 69.611307][ T1123] EXT4-fs error (device loop2): ext4_truncate:4389: inode #13: comm syz.2.261: mark_inode_dirty error [ 69.623368][ T1123] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 69.632990][ T1123] EXT4-fs (loop2): 1 truncate cleaned up [ 69.639280][ T1123] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 69.669800][ T15] usb 2-1: USB disconnect, device number 10 [ 69.671794][ T24] audit: type=1400 audit(1746599776.040:315): avc: denied { remount } for pid=1122 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.695765][ T1123] EXT4-fs (loop2): Ignoring removed orlov option [ 69.702667][ T1123] EXT4-fs (loop2): can't enable nombcache during remount