last executing test programs: 6.635563001s ago: executing program 2 (id=275): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r2, @ANYBLOB="00000a00100000801c001a"], 0x44}, 0x1, 0x10000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.620859381s ago: executing program 2 (id=276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080), &(0x7f0000000600)=""/157}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) unlink(0x0) 6.603428272s ago: executing program 2 (id=277): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @loopback}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x4010001, 0x0, 0xfffffffc}}}}}, 0x0) 6.563363662s ago: executing program 2 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x2, 0x80000}, 0x20) 6.530538413s ago: executing program 2 (id=281): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 6.427290925s ago: executing program 2 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000008205000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) 6.410677235s ago: executing program 32 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000008205000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) 5.948335923s ago: executing program 1 (id=297): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x73f90401a4ce04d2, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 2.903995562s ago: executing program 1 (id=344): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0xe, 0x1, 0x7}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"]) 2.755082055s ago: executing program 1 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) capget(&(0x7f0000000440)={0x20080522}, 0x0) 2.675309626s ago: executing program 1 (id=352): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x3) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000000)) 2.104384066s ago: executing program 1 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) 2.040811047s ago: executing program 5 (id=374): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) 2.020840017s ago: executing program 5 (id=375): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) 1.992360827s ago: executing program 5 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 1.962413098s ago: executing program 5 (id=377): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000240)='./file0\x00') sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000004c0)=""/55, 0x37) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.8692279s ago: executing program 3 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 1.86656652s ago: executing program 1 (id=389): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0xfffffdb4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x100, 0x70, 0x8, 0x1ff, 0x7, 0x7f, 0x4b, 0x3, 0x4, 0x8, 0x100, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.86512103s ago: executing program 5 (id=380): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x200}, {r1, 0x2280}, {r2, 0x8000}], 0x3, 0x0, 0x0, 0x0) 1.84064363s ago: executing program 3 (id=381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 769.834388ms ago: executing program 3 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 716.516839ms ago: executing program 3 (id=388): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x10) 687.930059ms ago: executing program 3 (id=390): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r1, 0x1) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 558.695301ms ago: executing program 3 (id=391): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 546.430481ms ago: executing program 5 (id=392): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 398.105554ms ago: executing program 4 (id=397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 379.564504ms ago: executing program 4 (id=398): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x3, 0x2, 0xa, 0x1}, {0xe, 0x78, 0x4, 0xfffffffd}, {0x10, 0x7, 0x2, 0x1}, {0x22, 0xd, 0x6, 0xfc7}, {0xb046, 0xff, 0x3, 0x9e6d}]}) tee(r2, r1, 0xff, 0x0) write$tcp_congestion(r2, &(0x7f0000000040)='htcp\x00', 0x5) close_range(r1, 0xffffffffffffffff, 0x0) 318.729875ms ago: executing program 0 (id=402): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000180)={0x0, r2}) close_range(r0, r1, 0x0) 304.677495ms ago: executing program 4 (id=403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x6b9f048d, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24008900}, 0x8000) shutdown(r0, 0x2) 286.865006ms ago: executing program 0 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x2005, 0x0, 0xffffffffffffff70}, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 269.814016ms ago: executing program 4 (id=405): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001180)='./binderfs/binder0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x77540947ad9a168d}) 216.739777ms ago: executing program 4 (id=406): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x1, r3, 0x0, r1}, 0x10) 194.982337ms ago: executing program 4 (id=407): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) 189.791127ms ago: executing program 0 (id=408): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 138.329738ms ago: executing program 0 (id=409): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) 122.155858ms ago: executing program 0 (id=410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf46242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x3ff}, 0x24) 0s ago: executing program 0 (id=411): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmsg$can_bcm(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "38d99b8156a98263"}}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 21.217355][ T28] audit: type=1400 audit(1745309947.621:66): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.218739][ T280] cgroup: Unknown subsys name 'net' [ 21.240156][ T28] audit: type=1400 audit(1745309947.621:67): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.269720][ T28] audit: type=1400 audit(1745309947.651:68): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.269890][ T280] cgroup: Unknown subsys name 'devices' [ 21.388496][ T280] cgroup: Unknown subsys name 'hugetlb' [ 21.393932][ T280] cgroup: Unknown subsys name 'rlimit' [ 21.528882][ T28] audit: type=1400 audit(1745309947.931:69): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.551924][ T28] audit: type=1400 audit(1745309947.931:70): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.561325][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.576988][ T28] audit: type=1400 audit(1745309947.931:71): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.607920][ T28] audit: type=1400 audit(1745309947.981:72): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.616101][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.635036][ T28] audit: type=1400 audit(1745309947.981:73): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.667163][ T28] audit: type=1400 audit(1745309948.011:74): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.692791][ T28] audit: type=1400 audit(1745309948.011:75): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.508702][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.515843][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.523159][ T291] device bridge_slave_0 entered promiscuous mode [ 22.531290][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.538433][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.545767][ T291] device bridge_slave_1 entered promiscuous mode [ 22.641173][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.648098][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.655534][ T293] device bridge_slave_0 entered promiscuous mode [ 22.666802][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.673775][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.681464][ T293] device bridge_slave_1 entered promiscuous mode [ 22.735245][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.742180][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.749587][ T292] device bridge_slave_0 entered promiscuous mode [ 22.766638][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.773500][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.780953][ T292] device bridge_slave_1 entered promiscuous mode [ 22.801267][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.808382][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.815729][ T294] device bridge_slave_0 entered promiscuous mode [ 22.834013][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.840919][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.848452][ T294] device bridge_slave_1 entered promiscuous mode [ 22.918079][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.924946][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.932312][ T295] device bridge_slave_0 entered promiscuous mode [ 22.946046][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.953025][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.960834][ T295] device bridge_slave_1 entered promiscuous mode [ 23.041476][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.048725][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.056197][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.063027][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.136532][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.144535][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.152375][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.159938][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.190332][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.198438][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.205502][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.212315][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.223240][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.230743][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.237922][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.245110][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.273552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.282303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.290994][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.298441][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.305724][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.313009][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.320112][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.327236][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.335434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.342901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.379070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.402961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.411274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.419231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.427307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.435376][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.442242][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.449891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.458101][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.464944][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.472225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.480348][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.487225][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.494666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.502871][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.509718][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.542561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.550983][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.559060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.566584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.575625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.584054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.612518][ T291] device veth0_vlan entered promiscuous mode [ 23.620442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.627822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.635057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.643048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.651379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.659501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.667680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.675761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.683987][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.691717][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.699400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.707802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.716240][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.723296][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.730969][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.738993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.747310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.756818][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.764040][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.771666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.780607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.789515][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.796591][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.803904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.812428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.820683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.828779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.836481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.855173][ T291] device veth1_macvtap entered promiscuous mode [ 23.867073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.875298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.883616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.892219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.913466][ T292] device veth0_vlan entered promiscuous mode [ 23.923504][ T295] device veth0_vlan entered promiscuous mode [ 23.930272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.939107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.947241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.954486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.961955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.970094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.977980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.985901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.993905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.002375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.010759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.018644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.026811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.034142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.053840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.061950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.070439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.079022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.087401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.095566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.103716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.116715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.124993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.134844][ T292] device veth1_macvtap entered promiscuous mode [ 24.154131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.163330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.172021][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.180375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.190368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.198162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.205821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.214459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.223627][ T294] device veth0_vlan entered promiscuous mode [ 24.237001][ T295] device veth1_macvtap entered promiscuous mode [ 24.247727][ T293] device veth0_vlan entered promiscuous mode [ 24.258705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.267417][ T291] request_module fs-gadgetfs succeeded, but still no fs? [ 24.268877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.284432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.293264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.301455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.314855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.323287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.332099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.340263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.367729][ T293] device veth1_macvtap entered promiscuous mode [ 24.380056][ T294] device veth1_macvtap entered promiscuous mode [ 24.389698][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.399004][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.436395][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.446785][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.455441][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.467075][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.478757][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.489465][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.501409][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.510519][ T323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 24.512657][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.699478][ T346] Zero length message leads to an empty skb [ 24.801505][ T358] loop0: detected capacity change from 0 to 512 [ 24.829177][ T358] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 24.856963][ T358] EXT4-fs (loop0): orphan cleanup on readonly fs [ 24.863648][ T358] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.17: Block bitmap for bg 0 marked uninitialized [ 24.893057][ T358] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 24.912096][ T358] EXT4-fs (loop0): 1 orphan inode deleted [ 24.925591][ T358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 24.970944][ T358] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.056162][ T358] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 25.061410][ T376] loop3: detected capacity change from 0 to 2048 [ 25.082220][ T378] syz.1.26 (378) used greatest stack depth: 21520 bytes left [ 25.122414][ T382] loop1: detected capacity change from 0 to 256 [ 25.135520][ T358] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.17: Block bitmap for bg 0 marked uninitialized [ 25.140577][ T355] loop4: detected capacity change from 0 to 40427 [ 25.149595][ T358] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.17: Block bitmap for bg 0 marked uninitialized [ 25.168537][ T355] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 25.176856][ T376] Alternate GPT is invalid, using primary GPT. [ 25.177294][ T358] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.17: Block bitmap for bg 0 marked uninitialized [ 25.182942][ T376] loop3: p1 p2 p3 [ 25.218553][ T355] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 25.238038][ T103] Alternate GPT is invalid, using primary GPT. [ 25.244200][ T103] loop3: p1 p2 p3 [ 25.275410][ T355] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.311085][ T293] EXT4-fs (loop0): unmounting filesystem. [ 25.326789][ T317] I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.326861][ T291] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 25.346205][ T317] I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.382706][ T355] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 25.383173][ T317] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 25.398813][ T355] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 25.412360][ T355] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.421147][ T317] I/O error, dev loop3, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.430877][ T317] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 25.469718][ T317] I/O error, dev loop3, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.485970][ T317] Buffer I/O error on dev loop3p3, logical block 10, async page read [ 25.495185][ T406] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 25.504563][ T317] I/O error, dev loop3, sector 1011 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.514015][ T317] Buffer I/O error on dev loop3p3, logical block 11, async page read [ 25.529162][ T355] syz.4.16: attempt to access beyond end of device [ 25.529162][ T355] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 25.540875][ T317] I/O error, dev loop3, sector 1012 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.549876][ T355] syz.4.16: attempt to access beyond end of device [ 25.549876][ T355] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 25.555269][ T317] Buffer I/O error on dev loop3p3, logical block 12, async page read [ 25.578808][ T317] I/O error, dev loop3, sector 1013 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.588359][ T317] Buffer I/O error on dev loop3p3, logical block 13, async page read [ 25.606079][ T317] I/O error, dev loop3, sector 1014 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.606252][ T355] syz.4.16: attempt to access beyond end of device [ 25.606252][ T355] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 25.615380][ T317] Buffer I/O error on dev loop3p3, logical block 14, async page read [ 25.615437][ T317] I/O error, dev loop3, sector 1015 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.646298][ T317] Buffer I/O error on dev loop3p3, logical block 15, async page read [ 25.663314][ T387] udevd[387]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 25.663314][ T365] udevd[365]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 25.685775][ T317] udevd[317]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 25.704905][ T387] udevd[387]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 25.724391][ T365] udevd[365]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 25.735741][ T317] udevd[317]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 25.756132][ T417] udevd[417]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 25.769159][ T387] udevd[387]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 25.769198][ T317] udevd[317]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 25.793617][ T417] udevd[417]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 25.979490][ T432] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.071353][ T444] xt_bpf: check failed: parse error [ 26.278924][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 26.278941][ T28] audit: type=1400 audit(1745309952.681:164): avc: denied { bind } for pid=467 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.335969][ T28] audit: type=1400 audit(1745309952.731:165): avc: denied { listen } for pid=473 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.397350][ T28] audit: type=1400 audit(1745309952.801:166): avc: denied { getopt } for pid=477 comm="syz.2.71" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.430715][ T483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 26.433373][ T28] audit: type=1400 audit(1745309952.821:167): avc: denied { create } for pid=482 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.462163][ T486] Invalid ELF header len 8 [ 26.477579][ T480] x_tables: duplicate underflow at hook 4 [ 26.506078][ T28] audit: type=1400 audit(1745309952.821:168): avc: denied { setopt } for pid=482 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.531301][ T28] audit: type=1400 audit(1745309952.861:169): avc: denied { sys_module } for pid=485 comm="syz.2.74" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 26.587306][ T28] audit: type=1400 audit(1745309952.861:170): avc: denied { module_load } for pid=485 comm="syz.2.74" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 26.631027][ T28] audit: type=1400 audit(1745309952.961:171): avc: denied { block_suspend } for pid=489 comm="syz.4.76" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.657705][ T28] audit: type=1400 audit(1745309952.981:172): avc: denied { write } for pid=499 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.688550][ T28] audit: type=1400 audit(1745309952.981:173): avc: denied { nlmsg_write } for pid=499 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.833556][ T514] loop3: detected capacity change from 0 to 2048 [ 26.849714][ T514] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 26.862632][ T514] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 26.872656][ T514] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.892237][ T507] loop4: detected capacity change from 0 to 40427 [ 26.900707][ T291] EXT4-fs (loop3): unmounting filesystem. [ 26.919397][ T507] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.956177][ T314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.966195][ T507] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.999545][ T295] syz-executor: attempt to access beyond end of device [ 26.999545][ T295] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.135944][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 27.148807][ T314] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 27.157137][ T314] usb 3-1: config 0 has no interface number 0 [ 27.163049][ T314] usb 3-1: config 0 interface 184 has no altsetting 0 [ 27.172030][ T314] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 27.181724][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.189975][ T314] usb 3-1: Product: syz [ 27.194104][ T314] usb 3-1: Manufacturer: syz [ 27.198996][ T314] usb 3-1: SerialNumber: syz [ 27.207908][ T314] usb 3-1: config 0 descriptor?? [ 27.214029][ T314] smsc75xx v1.0.0 [ 27.516162][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.630064][ T314] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 27.652098][ T314] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 27.676604][ T314] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 27.704251][ T314] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 27.722640][ T314] usb 3-1: USB disconnect, device number 2 [ 28.096094][ T315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.211701][ T607] Driver unsupported XDP return value 0 on prog (id 68) dev N/A, expect packet loss! [ 28.225965][ T302] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 28.285914][ T315] usb 4-1: Using ep0 maxpacket: 32 [ 28.287060][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.287093][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.287126][ T315] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.287150][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.287899][ T315] usb 4-1: config 0 descriptor?? [ 28.288777][ T315] hub 4-1:0.0: USB hub found [ 28.365112][ T620] loop2: detected capacity change from 0 to 1024 [ 28.365420][ T620] ======================================================= [ 28.365420][ T620] WARNING: The mand mount option has been deprecated and [ 28.365420][ T620] and is ignored by this kernel. Remove the mand [ 28.365420][ T620] option from the mount to silence this warning. [ 28.365420][ T620] ======================================================= [ 28.407452][ T620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.413810][ T302] usb 1-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 28.490635][ T315] hub 4-1:0.0: 1 port detected [ 28.500591][ T620] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.131: Allocating blocks 497-513 which overlap fs metadata [ 28.501002][ T620] EXT4-fs (loop2): pa ffff88811a57eb28: logic 256, phys. 385, len 8 [ 28.501062][ T620] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 28.578672][ T294] EXT4-fs (loop2): unmounting filesystem. [ 28.596095][ T302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.596980][ T302] usb 1-1: config 0 descriptor?? [ 28.773843][ T635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 29.002233][ T302] wacom 0003:056A:00B1.0001: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 29.012825][ T302] wacom 0003:056A:00B1.0001: hidraw0: USB HID v1.01 Device [HID 056a:00b1] on usb-dummy_hcd.0-1/input0 [ 29.025524][ T302] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B1.0001/input/input4 [ 29.094404][ T315] hub 4-1:0.0: activate --> -90 [ 29.125942][ T314] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.242066][ T302] usb 1-1: USB disconnect, device number 2 [ 29.283977][ T683] loop4: detected capacity change from 0 to 512 [ 29.290980][ T683] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 29.306097][ T314] usb 3-1: Using ep0 maxpacket: 16 [ 29.312828][ T314] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 29.327664][ T685] loop1: detected capacity change from 0 to 256 [ 29.328792][ T314] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 29.339002][ T685] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 29.354313][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.369958][ T314] usb 3-1: Product: syz [ 29.374104][ T314] usb 3-1: Manufacturer: syz [ 29.378957][ T314] usb 3-1: SerialNumber: syz [ 29.380664][ T685] exFAT-fs (loop1): hint_cluster is invalid (17) [ 29.399984][ T314] usb 3-1: config 0 descriptor?? [ 29.407678][ T314] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 29.416735][ T314] usb 3-1: Detected FT232R [ 29.500581][ T60] usb 4-1: USB disconnect, device number 2 [ 29.568469][ T702] tmpfs: Unknown parameter 'nolazyt+>eRë0-~ÿí^¢ˆ~µÍ1"ôÐÙVøIêÿYÎ' [ 29.608055][ T314] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 29.755721][ T717] loop4: detected capacity change from 0 to 256 [ 29.778469][ T717] FAT-fs (loop4): Directory bread(block 64) failed [ 29.784926][ T717] FAT-fs (loop4): Directory bread(block 65) failed [ 29.799074][ T717] FAT-fs (loop4): Directory bread(block 66) failed [ 29.806048][ T717] FAT-fs (loop4): Directory bread(block 67) failed [ 29.812434][ T717] FAT-fs (loop4): Directory bread(block 68) failed [ 29.823915][ T717] FAT-fs (loop4): Directory bread(block 69) failed [ 29.830954][ T717] FAT-fs (loop4): Directory bread(block 70) failed [ 29.838698][ T314] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 29.852263][ T717] FAT-fs (loop4): Directory bread(block 71) failed [ 29.859102][ T717] FAT-fs (loop4): Directory bread(block 72) failed [ 29.870064][ T717] FAT-fs (loop4): Directory bread(block 73) failed [ 29.887383][ T723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 29.967005][ T734] loop0: detected capacity change from 0 to 128 [ 29.983903][ T734] FAT-fs (loop0): Directory bread(block 162) failed [ 29.991473][ T734] FAT-fs (loop0): Directory bread(block 163) failed [ 29.998672][ T734] FAT-fs (loop0): Directory bread(block 164) failed [ 30.005114][ T734] FAT-fs (loop0): Directory bread(block 165) failed [ 30.012274][ T734] FAT-fs (loop0): Directory bread(block 166) failed [ 30.025528][ T734] FAT-fs (loop0): Directory bread(block 167) failed [ 30.032644][ T734] FAT-fs (loop0): Directory bread(block 168) failed [ 30.045335][ T60] usb 3-1: USB disconnect, device number 3 [ 30.056421][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 30.076209][ T60] ftdi_sio 3-1:0.0: device disconnected [ 30.077877][ T734] FAT-fs (loop0): Directory bread(block 169) failed [ 30.118444][ T745] process 'syz.1.184' launched './file0' with NULL argv: empty string added [ 30.131573][ T734] FAT-fs (loop0): Directory bread(block 162) failed [ 30.140681][ T734] FAT-fs (loop0): Directory bread(block 163) failed [ 30.153898][ T734] syz.0.179: attempt to access beyond end of device [ 30.153898][ T734] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 30.167228][ T734] syz.0.179: attempt to access beyond end of device [ 30.167228][ T734] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 30.333949][ T764] loop1: detected capacity change from 0 to 1024 [ 30.361955][ T739] loop4: detected capacity change from 0 to 40427 [ 30.375226][ T739] F2FS-fs (loop4): invalid crc value [ 30.383476][ T764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.388033][ T772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'. [ 30.393365][ T739] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.412855][ T764] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 30.428907][ T772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'. [ 30.441453][ T764] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 30.458527][ T764] EXT4-fs (loop1): This should not happen!! Data will be lost [ 30.458527][ T764] [ 30.464724][ T739] F2FS-fs (loop4): Start checkpoint disabled! [ 30.468231][ T764] EXT4-fs (loop1): Total free blocks count 0 [ 30.480060][ T764] EXT4-fs (loop1): Free/Dirty block details [ 30.485923][ T764] EXT4-fs (loop1): free_blocks=68451041280 [ 30.491620][ T764] EXT4-fs (loop1): dirty_blocks=64 [ 30.493112][ T739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 30.496855][ T764] EXT4-fs (loop1): Block reservation details [ 30.509677][ T764] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 30.523403][ T764] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 30.619153][ T788] loop1: detected capacity change from 0 to 128 [ 30.627076][ T324] kworker/u4:4: attempt to access beyond end of device [ 30.627076][ T324] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 30.652095][ T788] FAT-fs (loop1): bogus number of FAT structure [ 30.658267][ T788] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 30.658290][ T791] loop0: detected capacity change from 0 to 512 [ 30.673751][ T791] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.690261][ T788] FAT-fs (loop1): Can't find a valid FAT filesystem [ 30.700278][ T791] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.204: invalid block [ 30.712261][ T791] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.204: invalid indirect mapped block 10 (level 1) [ 30.725810][ T791] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.204: invalid indirect mapped block 8 (level 1) [ 30.739161][ T791] EXT4-fs (loop0): 1 truncate cleaned up [ 30.744909][ T791] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.745961][ T315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.836717][ T798] loop4: detected capacity change from 0 to 512 [ 30.843189][ T798] EXT4-fs: Ignoring removed bh option [ 30.849506][ T798] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 30.858686][ T798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 30.867508][ T798] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.206: corrupted in-inode xattr [ 30.879700][ T798] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.206: couldn't read orphan inode 15 (err -117) [ 30.891386][ T302] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.892090][ T798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 30.922041][ T295] EXT4-fs (loop4): unmounting filesystem. [ 30.945995][ T315] usb 4-1: Using ep0 maxpacket: 16 [ 30.952680][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 30.958869][ T803] loop4: detected capacity change from 0 to 512 [ 30.964253][ T315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 30.983271][ T315] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 30.992478][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.001288][ T315] usb 4-1: config 0 descriptor?? [ 31.029382][ T807] loop4: detected capacity change from 0 to 1024 [ 31.039313][ T807] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.046297][ T19] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 31.067404][ T295] EXT4-fs (loop4): unmounting filesystem. [ 31.085996][ T302] usb 3-1: Using ep0 maxpacket: 32 [ 31.092957][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.118622][ T302] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 31.127994][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.137333][ T302] usb 3-1: config 0 descriptor?? [ 31.237179][ T19] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 31.245728][ T19] usb 1-1: config 0 has no interface number 0 [ 31.263196][ T19] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.d6 [ 31.277510][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.287470][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 31.287523][ T28] audit: type=1400 audit(1745309957.691:226): avc: denied { read } for pid=828 comm="syz.4.221" name="event1" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.317701][ T19] usb 1-1: Product: syz [ 31.321847][ T19] usb 1-1: Manufacturer: syz [ 31.326592][ T19] usb 1-1: SerialNumber: syz [ 31.329610][ T28] audit: type=1400 audit(1745309957.691:227): avc: denied { open } for pid=828 comm="syz.4.221" path="/dev/input/event1" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.335841][ T19] usb 1-1: config 0 descriptor?? [ 31.361613][ T19] ums-sddr09 1-1:0.87: USB Mass Storage device detected [ 31.415540][ T315] kye 0003:0458:5019.0002: item fetching failed at offset 1/3 [ 31.423463][ T315] kye 0003:0458:5019.0002: parse failed [ 31.428935][ T315] kye: probe of 0003:0458:5019.0002 failed with error -22 [ 31.563248][ T302] savu 0003:1E7D:2D5A.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 31.580176][ T302] usb 1-1: USB disconnect, device number 3 [ 31.595993][ T628] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.620947][ T315] usb 4-1: USB disconnect, device number 3 [ 31.777720][ T628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.790701][ T628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.800649][ T628] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.813374][ T628] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.822236][ T628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.831255][ T628] usb 2-1: config 0 descriptor?? [ 31.837731][ T24] usb 3-1: USB disconnect, device number 4 [ 32.018066][ T843] loop4: detected capacity change from 0 to 256 [ 32.024905][ T843] exfat: Deprecated parameter 'namecase' [ 32.034322][ T843] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 32.052435][ T28] audit: type=1400 audit(1745309958.451:228): avc: denied { append } for pid=842 comm="syz.4.224" path="/67/file0/cpuset.memory_pressure_enabled" dev="loop4" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.079275][ T28] audit: type=1400 audit(1745309958.451:229): avc: denied { setattr } for pid=842 comm="syz.4.224" name="cpuset.memory_pressure_enabled" dev="loop4" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.114530][ T293] EXT4-fs (loop0): unmounting filesystem. [ 32.203100][ T856] xt_bpf: check failed: parse error [ 32.248095][ T628] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 32.249267][ T860] device gre0 entered promiscuous mode [ 32.265280][ T860] device vlan2 entered promiscuous mode [ 32.274248][ T628] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 32.288394][ T860] device gre0 left promiscuous mode [ 32.298288][ T862] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.310543][ T862] FAT-fs (loop1): unable to read boot sector [ 32.329900][ T28] audit: type=1400 audit(1745309958.731:230): avc: denied { read } for pid=863 comm="syz.0.234" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.385499][ T28] audit: type=1400 audit(1745309958.771:231): avc: denied { open } for pid=863 comm="syz.0.234" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.409379][ T28] audit: type=1400 audit(1745309958.771:232): avc: denied { ioctl } for pid=863 comm="syz.0.234" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.487896][ T28] audit: type=1400 audit(1745309958.891:233): avc: denied { append } for pid=863 comm="syz.0.234" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.611065][ T888] loop3: detected capacity change from 0 to 1024 [ 32.625387][ T888] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.644962][ T894] loop4: detected capacity change from 0 to 512 [ 32.650351][ T888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.686626][ T894] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 32.697562][ T888] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.704690][ T894] System zones: 0-2, 18-18, 34-35 [ 32.726200][ T894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.758931][ T894] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.769876][ T28] audit: type=1400 audit(1745309959.171:234): avc: denied { setattr } for pid=887 comm="syz.3.244" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.803819][ T905] syz.0.248 uses obsolete (PF_INET,SOCK_PACKET) [ 32.844492][ T28] audit: type=1400 audit(1745309959.211:235): avc: denied { remove_name } for pid=887 comm="syz.3.244" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.871649][ T291] EXT4-fs (loop3): unmounting filesystem. [ 32.932994][ T295] EXT4-fs (loop4): unmounting filesystem. [ 32.998835][ T919] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2634082366 (168581271424 ns) > initial count (67899288384 ns). Using initial count to start timer. [ 33.119093][ T937] input: syz0 as /devices/virtual/input/input7 [ 33.315420][ T936] loop3: detected capacity change from 0 to 40427 [ 33.328737][ T936] F2FS-fs (loop3): heap/no_heap options were deprecated [ 33.338301][ T936] F2FS-fs (loop3): invalid crc value [ 33.344941][ T936] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.393597][ T936] F2FS-fs (loop3): Start checkpoint disabled! [ 33.403816][ T936] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 33.456419][ T43] kworker/u4:2: attempt to access beyond end of device [ 33.456419][ T43] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 33.470151][ T43] kworker/u4:2: attempt to access beyond end of device [ 33.470151][ T43] loop3: rw=1, sector=45112, nr_sectors = 8 limit=40427 [ 33.475978][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 33.485146][ T43] kworker/u4:2: attempt to access beyond end of device [ 33.485146][ T43] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 33.504804][ T43] kworker/u4:2: attempt to access beyond end of device [ 33.504804][ T43] loop3: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 33.668727][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.686195][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.694028][ T24] usb 5-1: Product: syz [ 33.712406][ T24] usb 5-1: Manufacturer: syz [ 33.725906][ T24] usb 5-1: SerialNumber: syz [ 33.758014][ T294] syz-executor (294) used greatest stack depth: 21488 bytes left [ 34.041517][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.048550][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.060393][ T984] device bridge_slave_0 entered promiscuous mode [ 34.074500][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.081825][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.089772][ T984] device bridge_slave_1 entered promiscuous mode [ 34.105637][ T996] loop0: detected capacity change from 0 to 512 [ 34.113093][ T996] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.126476][ T996] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.145572][ T996] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.160946][ T996] EXT4-fs (loop0): 1 truncate cleaned up [ 34.172803][ T996] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.209932][ T996] EXT4-fs (loop0): shut down requested (0) [ 34.244444][ T293] EXT4-fs (loop0): unmounting filesystem. [ 34.279506][ T10] device bridge_slave_1 left promiscuous mode [ 34.285546][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.307617][ T10] device bridge_slave_0 left promiscuous mode [ 34.313891][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.322512][ T10] device veth1_macvtap left promiscuous mode [ 34.329131][ T10] device veth0_vlan left promiscuous mode [ 34.376686][ T315] usb 2-1: USB disconnect, device number 2 [ 34.599036][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.605921][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.613029][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.619824][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.693919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.703860][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.736349][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.738301][ T24] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 34.776690][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.786672][ T24] cdc_ncm 5-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 34.795386][ T24] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 34.801364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.833250][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.840249][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.852250][ T1043] loop3: detected capacity change from 0 to 512 [ 34.858830][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.873120][ T1043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.882613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.906478][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.914950][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.922888][ T1043] EXT4-fs warning (device loop3): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.926185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.945841][ T24] cdc_ncm 5-1:1.0: setting tx_max = 60 [ 34.955542][ T1043] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 34.986616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.994674][ T1043] EXT4-fs warning (device loop3): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.006155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.030319][ T291] EXT4-fs (loop3): unmounting filesystem. [ 35.036272][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.062967][ T984] device veth0_vlan entered promiscuous mode [ 35.089001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.098340][ T24] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 35.116253][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.133607][ T24] usb 5-1: USB disconnect, device number 2 [ 35.145833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.164609][ T24] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 35.176600][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.200865][ T1039] loop0: detected capacity change from 0 to 40427 [ 35.213413][ T984] device veth1_macvtap entered promiscuous mode [ 35.226568][ T1039] F2FS-fs (loop0): fault_injection options not supported [ 35.239085][ T1039] F2FS-fs (loop0): invalid crc value [ 35.257689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.270974][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.287317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.299110][ T1039] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.306551][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.329373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.366012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.385353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.396889][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.419160][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.444603][ T1039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.554376][ T8] kworker/u4:0: attempt to access beyond end of device [ 35.554376][ T8] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 35.574345][ T1068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.316'. [ 35.806901][ T1081] syz.4.323 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.890815][ T1087] device bridge0 entered promiscuous mode [ 35.906684][ T1087] bridge0: port 3(macsec1) entered blocking state [ 35.929964][ T1087] bridge0: port 3(macsec1) entered disabled state [ 35.957214][ T1087] device bridge0 left promiscuous mode [ 36.295959][ T628] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.479039][ T1085] syz.5.325 (1085) used greatest stack depth: 20144 bytes left [ 36.489366][ T628] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.505923][ T628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.534105][ T628] usb 4-1: Product: syz [ 36.538375][ T628] usb 4-1: Manufacturer: syz [ 36.542787][ T628] usb 4-1: SerialNumber: syz [ 36.545984][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.627698][ T1104] loop0: detected capacity change from 0 to 40427 [ 36.644469][ T1104] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 36.653544][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 36.653560][ T28] audit: type=1400 audit(1745309963.061:266): avc: denied { ioctl } for pid=1108 comm="syz.5.335" path="socket:[18330]" dev="sockfs" ino=18330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.694443][ T1104] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 36.741959][ T1104] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.757030][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.776012][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.805751][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.836026][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.850463][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.866277][ T1104] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 36.877790][ T24] usb 5-1: config 0 descriptor?? [ 36.881216][ T1104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.972903][ T28] audit: type=1400 audit(1745309963.371:267): avc: denied { create } for pid=1103 comm="syz.0.333" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.140987][ T1128] loop5: detected capacity change from 0 to 512 [ 37.170550][ T1128] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.185965][ T1128] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 37.204791][ T1128] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 37.216762][ T1128] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 37.217952][ T28] audit: type=1400 audit(1745309963.621:268): avc: denied { remove_name } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.236044][ T1128] System zones: [ 37.247754][ T28] audit: type=1400 audit(1745309963.621:269): avc: denied { rename } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.273509][ T1128] 0-2, 18-18, 34-34 [ 37.277786][ T28] audit: type=1400 audit(1745309963.621:270): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.300796][ T1128] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 37.316685][ T24] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 37.325570][ T24] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 37.337169][ T1128] EXT4-fs (loop5): 1 truncate cleaned up [ 37.360034][ T1128] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 37.367105][ T28] audit: type=1400 audit(1745309963.761:271): avc: denied { setopt } for pid=1134 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.412207][ T1128] fscrypt (loop5, inode 15): Error -61 getting encryption context [ 37.440407][ T984] EXT4-fs (loop5): unmounting filesystem. [ 37.507172][ T28] audit: type=1400 audit(1745309963.911:272): avc: denied { load_policy } for pid=1142 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 37.543393][ T1106] loop4: detected capacity change from 0 to 256 [ 37.579445][ T628] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 37.586215][ T628] cdc_ncm 4-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 37.589887][ T1153] netlink: 'syz.0.353': attribute type 12 has an invalid length. [ 37.593512][ T628] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 37.609120][ T417] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.621135][ T302] usb 5-1: USB disconnect, device number 3 [ 37.780060][ T628] cdc_ncm 4-1:1.0: setting tx_max = 60 [ 37.784064][ T28] audit: type=1326 audit(1745309964.181:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1169 comm="syz.0.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d1d78e169 code=0x0 [ 37.798821][ T628] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 37.823161][ T628] usb 4-1: USB disconnect, device number 4 [ 37.829868][ T628] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 37.886083][ T28] audit: type=1400 audit(1745309964.281:274): avc: denied { watch watch_reads } for pid=1174 comm="syz.5.362" path="/19" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.928738][ T1155] loop1: detected capacity change from 0 to 40427 [ 37.941556][ T1155] F2FS-fs (loop1): fault_injection options not supported [ 37.949428][ T1155] F2FS-fs (loop1): Image doesn't support compression [ 37.956864][ T1155] F2FS-fs (loop1): Image doesn't support compression [ 37.964918][ T1155] F2FS-fs (loop1): fault_type options not supported [ 37.974666][ T1155] F2FS-fs (loop1): invalid crc value [ 37.981637][ T1155] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.038735][ T1155] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.092946][ T28] audit: type=1400 audit(1745309964.491:275): avc: denied { getopt } for pid=1154 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.121487][ T292] syz-executor: attempt to access beyond end of device [ 38.121487][ T292] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.295760][ T1206] loop5: detected capacity change from 0 to 1024 [ 38.304202][ T1206] EXT4-fs: Ignoring removed orlov option [ 38.318998][ T1206] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 38.356766][ T984] EXT4-fs (loop5): unmounting filesystem. [ 38.655973][ T628] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.848440][ T628] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.862539][ T628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.884340][ T628] usb 2-1: Product: syz [ 38.895625][ T628] usb 2-1: Manufacturer: syz [ 38.907516][ T628] usb 2-1: SerialNumber: syz [ 39.074255][ T1234] xt_hashlimit: size too large, truncated to 1048576 [ 39.199738][ T1235] loop4: detected capacity change from 0 to 4096 [ 39.257342][ T1235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.744866][ T295] EXT4-fs (loop4): unmounting filesystem. [ 39.769812][ T1255] netem: invalid attributes len -3 [ 39.775481][ T1255] netem: change failed [ 39.925199][ T628] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 39.936619][ T628] cdc_ncm 2-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 39.947191][ T628] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 39.965986][ T315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.125960][ T628] cdc_ncm 2-1:1.0: setting tx_max = 60 [ 40.134180][ T628] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 40.155766][ T628] usb 2-1: USB disconnect, device number 3 [ 40.161724][ T315] usb 4-1: Using ep0 maxpacket: 32 [ 40.168113][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.191769][ T628] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 40.200979][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.215013][ T315] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 40.224451][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.250645][ T19] ================================================================== [ 40.258678][ T19] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 40.265708][ T19] Read of size 8 at addr ffff888114f54ce0 by task kworker/0:1/19 [ 40.273798][ T19] [ 40.275975][ T19] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 40.287187][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.298715][ T19] Workqueue: 0x0 (events) [ 40.303073][ T19] Call Trace: [ 40.306197][ T19] [ 40.309101][ T19] dump_stack_lvl+0x151/0x1b7 [ 40.313652][ T19] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 40.319138][ T19] ? _printk+0xd1/0x111 [ 40.323125][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 40.328187][ T19] print_report+0x158/0x4e0 [ 40.332497][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 40.337448][ T19] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 40.343781][ T19] ? worker_thread+0xa36/0x1260 [ 40.348555][ T19] kasan_report+0x13c/0x170 [ 40.352904][ T19] ? worker_thread+0xa36/0x1260 [ 40.357604][ T19] __asan_report_load8_noabort+0x14/0x20 [ 40.363051][ T19] worker_thread+0xa36/0x1260 [ 40.367569][ T19] kthread+0x26d/0x300 [ 40.371474][ T19] ? worker_clr_flags+0x1a0/0x1a0 [ 40.377755][ T19] ? kthread_blkcg+0xd0/0xd0 [ 40.382681][ T19] ret_from_fork+0x1f/0x30 [ 40.387277][ T19] [ 40.390399][ T19] [ 40.392836][ T19] Allocated by task 628: [ 40.397319][ T19] kasan_set_track+0x4b/0x70 [ 40.402269][ T19] kasan_save_alloc_info+0x1f/0x30 [ 40.408215][ T19] __kasan_kmalloc+0x9c/0xb0 [ 40.412876][ T19] __kmalloc_node+0xb4/0x1e0 [ 40.417505][ T19] kvmalloc_node+0x221/0x640 [ 40.422108][ T19] alloc_netdev_mqs+0x8c/0xf90 [ 40.426957][ T19] alloc_etherdev_mqs+0x36/0x40 [ 40.432187][ T19] usbnet_probe+0x213/0x28a0 [ 40.436623][ T19] usb_probe_interface+0x5b6/0xa90 [ 40.442526][ T19] really_probe+0x2b8/0x920 [ 40.447721][ T19] __driver_probe_device+0x1a0/0x310 [ 40.453315][ T19] driver_probe_device+0x54/0x3d0 [ 40.458611][ T19] __device_attach_driver+0x2e3/0x490 [ 40.466219][ T19] bus_for_each_drv+0x183/0x200 [ 40.471637][ T19] __device_attach+0x312/0x510 [ 40.476844][ T19] device_initial_probe+0x1a/0x20 [ 40.482263][ T19] bus_probe_device+0xbe/0x1e0 [ 40.488112][ T19] device_add+0xb60/0xf10 [ 40.492529][ T19] usb_set_configuration+0x190f/0x1e80 [ 40.498447][ T19] usb_generic_driver_probe+0x8b/0x150 [ 40.503892][ T19] usb_probe_device+0x144/0x260 [ 40.508781][ T19] really_probe+0x2b8/0x920 [ 40.514021][ T19] __driver_probe_device+0x1a0/0x310 [ 40.519190][ T19] driver_probe_device+0x54/0x3d0 [ 40.524524][ T19] __device_attach_driver+0x2e3/0x490 [ 40.531583][ T19] bus_for_each_drv+0x183/0x200 [ 40.536580][ T19] __device_attach+0x312/0x510 [ 40.542524][ T19] device_initial_probe+0x1a/0x20 [ 40.549164][ T19] bus_probe_device+0xbe/0x1e0 [ 40.555033][ T19] device_add+0xb60/0xf10 [ 40.559693][ T19] usb_new_device+0xf2f/0x1820 [ 40.564808][ T19] hub_event+0x2db1/0x4830 [ 40.569924][ T19] process_one_work+0x73d/0xcb0 [ 40.575267][ T19] worker_thread+0xa60/0x1260 [ 40.579982][ T19] kthread+0x26d/0x300 [ 40.584082][ T19] ret_from_fork+0x1f/0x30 [ 40.589276][ T19] [ 40.592033][ T19] Freed by task 628: [ 40.596423][ T19] kasan_set_track+0x4b/0x70 [ 40.601439][ T19] kasan_save_free_info+0x2b/0x40 [ 40.607384][ T19] ____kasan_slab_free+0x131/0x180 [ 40.613290][ T19] __kasan_slab_free+0x11/0x20 [ 40.618862][ T19] __kmem_cache_free+0x21d/0x410 [ 40.624486][ T19] kfree+0x7a/0xf0 [ 40.628228][ T19] kvfree+0x35/0x40 [ 40.632866][ T19] netdev_freemem+0x3f/0x60 [ 40.637583][ T19] netdev_release+0x7f/0xb0 [ 40.642792][ T19] device_release+0x95/0x1c0 [ 40.648690][ T19] kobject_put+0x178/0x260 [ 40.653579][ T19] put_device+0x1f/0x30 [ 40.658332][ T19] free_netdev+0x393/0x480 [ 40.663426][ T19] usbnet_disconnect+0x25f/0x3b0 [ 40.668932][ T19] usb_unbind_interface+0x1fa/0x8c0 [ 40.675185][ T19] device_release_driver_internal+0x53e/0x870 [ 40.682001][ T19] device_release_driver+0x19/0x20 [ 40.688000][ T19] bus_remove_device+0x2fa/0x360 [ 40.693465][ T19] device_del+0x663/0xe90 [ 40.699312][ T19] usb_disable_device+0x380/0x720 [ 40.709211][ T19] usb_disconnect+0x32a/0x890 [ 40.715106][ T19] hub_event+0x1ed8/0x4830 [ 40.721667][ T19] process_one_work+0x73d/0xcb0 [ 40.729911][ T19] worker_thread+0xd71/0x1260 [ 40.737629][ T19] kthread+0x26d/0x300 [ 40.743786][ T19] ret_from_fork+0x1f/0x30 [ 40.755882][ T19] [ 40.758553][ T19] Last potentially related work creation: [ 40.770930][ T19] kasan_save_stack+0x3b/0x60 [ 40.775690][ T19] __kasan_record_aux_stack+0xb4/0xc0 [ 40.781567][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 40.787358][ T19] insert_work+0x56/0x310 [ 40.792619][ T19] __queue_work+0x9b6/0xd70 [ 40.797405][ T19] queue_work_on+0x105/0x170 [ 40.802730][ T19] usbnet_link_change+0x182/0x1a0 [ 40.808102][ T19] usbnet_probe+0x1e1e/0x28a0 [ 40.813824][ T19] usb_probe_interface+0x5b6/0xa90 [ 40.818997][ T19] really_probe+0x2b8/0x920 [ 40.823620][ T19] __driver_probe_device+0x1a0/0x310 [ 40.829100][ T19] driver_probe_device+0x54/0x3d0 [ 40.834847][ T19] __device_attach_driver+0x2e3/0x490 [ 40.840843][ T19] bus_for_each_drv+0x183/0x200 [ 40.846338][ T19] __device_attach+0x312/0x510 [ 40.851362][ T19] device_initial_probe+0x1a/0x20 [ 40.857331][ T19] bus_probe_device+0xbe/0x1e0 [ 40.862458][ T19] device_add+0xb60/0xf10 [ 40.866839][ T19] usb_set_configuration+0x190f/0x1e80 [ 40.872480][ T19] usb_generic_driver_probe+0x8b/0x150 [ 40.878284][ T19] usb_probe_device+0x144/0x260 [ 40.883005][ T19] really_probe+0x2b8/0x920 [ 40.887389][ T19] __driver_probe_device+0x1a0/0x310 [ 40.893374][ T19] driver_probe_device+0x54/0x3d0 [ 40.898716][ T19] __device_attach_driver+0x2e3/0x490 [ 40.904221][ T19] bus_for_each_drv+0x183/0x200 [ 40.908987][ T19] __device_attach+0x312/0x510 [ 40.913601][ T19] device_initial_probe+0x1a/0x20 [ 40.918442][ T19] bus_probe_device+0xbe/0x1e0 [ 40.923043][ T19] device_add+0xb60/0xf10 [ 40.927212][ T19] usb_new_device+0xf2f/0x1820 [ 40.931815][ T19] hub_event+0x2db1/0x4830 [ 40.936158][ T19] process_one_work+0x73d/0xcb0 [ 40.941145][ T19] worker_thread+0xa60/0x1260 [ 40.945936][ T19] kthread+0x26d/0x300 [ 40.949835][ T19] ret_from_fork+0x1f/0x30 [ 40.954172][ T19] [ 40.956339][ T19] The buggy address belongs to the object at ffff888114f54000 [ 40.956339][ T19] which belongs to the cache kmalloc-4k of size 4096 [ 40.970807][ T19] The buggy address is located 3296 bytes inside of [ 40.970807][ T19] 4096-byte region [ffff888114f54000, ffff888114f55000) [ 40.985752][ T19] [ 40.988106][ T19] The buggy address belongs to the physical page: [ 40.994896][ T19] page:ffffea000453d400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114f50 [ 41.005252][ T19] head:ffffea000453d400 order:3 compound_mapcount:0 compound_pincount:0 [ 41.013873][ T19] flags: 0x4000000000010200(slab|head|zone=1) [ 41.020229][ T19] raw: 4000000000010200 ffffea000456e200 dead000000000002 ffff888100043380 [ 41.029155][ T19] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 41.037922][ T19] page dumped because: kasan: bad access detected [ 41.044324][ T19] page_owner tracks the page as allocated [ 41.049951][ T19] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 103, tgid 103 (udevd), ts 31057295474, free_ts 30912498365 [ 41.074083][ T19] post_alloc_hook+0x213/0x220 [ 41.078694][ T19] prep_new_page+0x1b/0x110 [ 41.084470][ T19] get_page_from_freelist+0x3a98/0x3b10 [ 41.090272][ T19] __alloc_pages+0x234/0x610 [ 41.095502][ T19] alloc_slab_page+0x6c/0xf0 [ 41.100215][ T19] new_slab+0x90/0x3e0 [ 41.104374][ T19] ___slab_alloc+0x6f9/0xb80 [ 41.109002][ T19] __slab_alloc+0x5d/0xa0 [ 41.113173][ T19] __kmem_cache_alloc_node+0x207/0x2a0 [ 41.119762][ T19] kmalloc_trace+0x2a/0xa0 [ 41.124018][ T19] kernfs_iop_get_link+0x65/0x610 [ 41.129463][ T19] vfs_readlink+0x166/0x390 [ 41.134006][ T19] do_readlinkat+0x27f/0x3a0 [ 41.138610][ T19] __x64_sys_readlink+0x7f/0x90 [ 41.143541][ T19] x64_sys_call+0x297/0x9a0 [ 41.147965][ T19] do_syscall_64+0x3b/0x80 [ 41.152223][ T19] page last free stack trace: [ 41.157299][ T19] free_unref_page_prepare+0x9f1/0xa00 [ 41.163029][ T19] free_unref_page+0xb2/0x5c0 [ 41.168120][ T19] __free_pages+0x61/0xf0 [ 41.172724][ T19] __free_slab+0xce/0x1a0 [ 41.177693][ T19] __unfreeze_partials+0x165/0x1a0 [ 41.185656][ T19] put_cpu_partial+0xa9/0x100 [ 41.192183][ T19] __slab_free+0x1c8/0x280 [ 41.197959][ T19] ___cache_free+0xc6/0xd0 [ 41.202331][ T19] qlist_free_all+0xc5/0x140 [ 41.209894][ T19] kasan_quarantine_reduce+0x15a/0x180 [ 41.215615][ T19] __kasan_slab_alloc+0x24/0x80 [ 41.221800][ T19] slab_post_alloc_hook+0x53/0x2c0 [ 41.228055][ T19] kmem_cache_alloc+0x175/0x320 [ 41.234161][ T19] getname_flags+0xba/0x520 [ 41.240195][ T19] __se_sys_newfstatat+0xe2/0x7b0 [ 41.246399][ T19] __x64_sys_newfstatat+0x9b/0xb0 [ 41.252311][ T19] [ 41.254997][ T19] Memory state around the buggy address: [ 41.262616][ T19] ffff888114f54b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.272050][ T19] ffff888114f54c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.281389][ T19] >ffff888114f54c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.291847][ T19] ^ [ 41.299652][ T19] ffff888114f54d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.308093][ T19] ffff888114f54d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.317423][ T19] ================================================================== [ 41.327329][ T19] Disabling lock debugging due to kernel taint [ 41.345255][ T315] usb 4-1: config 0 descriptor?? [ 41.367080][ T315] hub 4-1:0.0: USB hub found [ 41.567343][ T315] hub 4-1:0.0: 1 port detected [ 41.768858][ T315] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 41.776882][ T315] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 41.787050][ T315] usbhid 4-1:0.0: can't add hid device: -71 [ 41.793974][ T315] usbhid: probe of 4-1:0.0 failed with error -71 [ 41.836242][ T315] usb 4-1: USB disconnect, device number 5