last executing test programs: 5.613608622s ago: executing program 0 (id=71): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setgid(0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x1) 4.682755815s ago: executing program 3 (id=73): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aad9609faaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001c2c00fe80"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000104c, &(0x7f0000000700)=ANY=[@ANYBLOB="787fd34580c3b851d7919ec27e2a54f25b0444d29317e95422c8ad6f58dc523658866778b829702d93c36b05eec8fa599c90daa58df75c4f11a6df03e400b1778e570b59d206130f9c189902d6950277350ef6d34bf836dc9478bd94ba9453693c070b5a66a4a22802a101a983b865f493eac79ddaaafabfb457e71ded03f5b11a0d3f8c4e56fb5a9a0221d03910f32ae62d94621a39581e91b2dd10081c69e0b98f2eb883b1e0eefe97bc8103d533811a1341e218c74c803ecede84e3d986f8a4a4627a7950aa4309a84d7035b8b9b0fe40a994eaff22f15dc5cb65fb35454c23e9f5ca965e012db566798d4678eef4fc6ac55313a6f2", @ANYRES8=r1, @ANYRES64, @ANYRES16, @ANYRESHEX], 0x1, 0x14fb, &(0x7f0000002a80)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.613562146s ago: executing program 0 (id=74): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) socket$packet(0x11, 0xa, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x4000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4.410025919s ago: executing program 3 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0x32}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.33896047s ago: executing program 3 (id=78): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x1, @desc3}) rt_sigprocmask(0x2, &(0x7f0000000080), 0x0, 0x8) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00ac2e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.63920076s ago: executing program 0 (id=88): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/209, 0xd1}, 0x9}], 0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 3.529575021s ago: executing program 0 (id=91): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0022050000009383c5d0"], 0x0}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2b, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x4, 0x224, &(0x7f0000000800)="$eJzsmD1vE0EQht9dn8++8CFoUtBQEIkgiB2fmzQWBAmJCiGFzwosckTBToycQ0osIRTR0EBHR0PBH6BIkYqCjj+ARANISBS4oKChOTS768uGxbnTESrmkbx6d3d2dmZ8N8WBYZj/ls+ffnx8en7uyhkABzGFiln/WgKE0Fqm1qQenH7euvDi9YdXb1cPP9z+3R8dSZLdC9U97vcAvJkv4VHqPz39k8SUmRyy9FVInDL6OgRqRt+GxDWjIwjcNPqepXtkX6vdXe5GtTu97iKJWRoaNIQ0NO3Y6DfcFFg0a0mSJMKKf21j0Gl3u1HfEp7Z+8NWIZFe1pl06leGj+G8RMuKj6p448njTZqPajMLmdavAYmGSaIJgQWzPofKqDa6JFb+x7wd/yUnfyfbCcskK8mqFq3v+1IsEj60ODpTzM80pXPO3ToCa2XdA3I5BHatlK1TVMn9SXnso6OEl/0snjX/VoG7LuXN4lkA4B9laotCWYzE5HD7nbv1Jet4IrKvEMgdRjVvzKO3rHjFAgw68m8qNi6w91u6fyQvBU5a/cmzmkM9XrlfX9sYzCyvtJeipWg1DJuVA3pPNaK6Gp2+t9OjA9WfJiz/5TG2vvSx3o7jfkOPvvARII77oZqH1muzsNX7dssci3ERwAk9obbppx5Lzh3C1zZS2ZKadoyCsdkwDMMwDMMwDMMwDMMwDMPsxXEI9RU0g/Cysv4VAAD//wRNWP4=") io_setup(0x23, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.346187208s ago: executing program 1 (id=99): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000040)=[{r0, 0x4102}], 0x1, 0x3) 2.314424238s ago: executing program 1 (id=100): sendmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="a5a96ab79d85e20c362c5cbc089f649a150c80d538b358dc9fa6b8371a82d5e0e77e71", 0x23}], 0x1, &(0x7f0000000780)=ANY=[], 0x28}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r1], 0x398}}, 0x0) 2.228891119s ago: executing program 1 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.851587285s ago: executing program 3 (id=102): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1515, &(0x7f00000002c0)="$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") 1.46335173s ago: executing program 3 (id=105): syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0xa3, 0x6f, 0xc3, 0x20, 0x12d1, 0x3807, 0xebe8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xa, 0xd, 0x100, 0x4, [{{0x9, 0x4, 0x40, 0xa, 0x1, 0x2, 0x2, 0xff, 0x2, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x80, 0xfb, 0x8}}]}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.325051132s ago: executing program 1 (id=108): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/fscaps', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1.018632266s ago: executing program 4 (id=111): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000118}, 0x0) 965.064687ms ago: executing program 4 (id=112): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000000)={r0, r0, 0xfff, 0xfc84, 0x0, 0x2, 0x3, 0x5c2, 0x5884, 0x801, 0x0, 0x8, 'syz0\x00'}) 964.792127ms ago: executing program 4 (id=113): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 959.017247ms ago: executing program 0 (id=114): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 629.062481ms ago: executing program 1 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 489.983134ms ago: executing program 1 (id=117): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x20, 0xf, 0x4, "92280e62"}, 0x0, 0x0, 0x0, 0x0}) 385.026575ms ago: executing program 2 (id=120): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x200000cc, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000280)='./file2\x00') 384.834175ms ago: executing program 2 (id=121): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4010, &(0x7f0000000300)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@acl}, {@stripe={'stripe', 0x3d, 0x9}}, {@norecovery}, {@test_dummy_encryption}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5fd, &(0x7f00000009c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 338.095636ms ago: executing program 2 (id=122): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e) 269.196577ms ago: executing program 2 (id=123): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x4) 217.202797ms ago: executing program 2 (id=124): iopl(0x3) syslog(0x2, &(0x7f0000000080), 0x0) 216.935438ms ago: executing program 2 (id=125): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/fscaps', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 155.104798ms ago: executing program 4 (id=126): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b5000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 133.499948ms ago: executing program 4 (id=127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000016, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@norecovery}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@mblk_io_submit}, {@delalloc}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) lseek(r0, 0x1, 0x3) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=ANY=[], 0x381, 0x0) 50.29361ms ago: executing program 3 (id=128): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) 46.56609ms ago: executing program 0 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'tunl0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x596, &(0x7f0000000840)="$eJzs3c1rXFUbAPDnTpI2/XjfpFCKupBAF1ZqJ03iRwUXdSWixYLu65BMQ8mkUzKT0sSC7cJu3EgRRCyI7t27LG5d+FcUtFCkBBXcjNzJnXSazKSTdJJMO78f3Pace8/knDPnPmfOnTvDBNC3xtJ/chEvRsRXScRI07HByA6OrZZbeXh9Ot2SqNU+/jOJJNvXKJ9k/x/KMi9ExC9fRJzMbay3srQ8VyiVigtZfrw6f2W8srR86tJ8YbY4W7w8OTV15o2pybfferNrfX31/N/ffnT3/TNfHl/55qf7R24ncTYOZ8ea+/EUbjRnxmIse06G4uy6ghNdqKyXJHvdALZlIIvzoUjngJEYyKK+pdrIbjYN2GGfp2EN9KlE/EOfaqwDGtf2XboOfmY8eHf1Amhj/wdX3xuJ4fq10cGV5LEro/R6d7QL9ad1/PzHndvpFu3eh9jfhYoA1rlxMyJODw5unP+SbP7bvtMdlFlfR7+9/sBeupuuf15rtf7Jra1/osX651CL2N2OJ8d/7n4XqmkrXf+903L9u3bTanQgy/2vvuYbSi5eKhXTue3/EXEihvan+YmIeK/1TZBPcyv3au3qb17/pVtaf2MtmLXj/uC69d9MoVp4+p6venAz4qWW699kbfyTFuOfPh/nO6zjWPHOy+2OPbn/O6v2Q8QrLcf/0WAmm9+fHK+fD+ONs2Kjv24d+61d/Xvd/3T8D6b9P9C2/6NJ8/3aytbr+H7432K7Y9s9//cln9TT+7J91wrV6sJExL7kw437Jx89tpFvlE/7f+L45vNfq/P/QBrYHfb/1tFbzUWHt9b/nZX2f2bz83/d+G89ce+Dz75rV39n4/96PXUi29PJ/NdpA5/muQMAAAAAAIBek4uIw5Hk8mvpXC6fX/18x9E4mCuVK9WTF8uLl2ei/l3Z0RjKNe50jzR9HmIi+zxsIz+5Lj8VEUci4uuBA/V8frpcmtnrzgMAAAAAAAAAAAAAAAAAAECPOBQx3Or7/6nfB1o/ps1u4Fm0yU9+A8+59vGfHenGLz0BPcnrP/Qv8Q/9S/xD/xL/0L/EP/Qv8Q/9S/xD/9pK/P94bgcbAgAAAAAAAAAAAAAAAAAAAAAAAAAAAM+H8+fOpVtt5eH16TQ/c3Vpca589dRMsTKXn1+czk+XF67kZ8vl2VIxP12ef9LfK5XLVyYmY/HaeLVYqY5XlpYvzJcXL1cvXJovzBYvFId2pVcAAAAAAAAAAAAAAAAAAADwbKksLc8VSqXigkR3E0kS0QPN2PnEYKeFa7WIHmnz7iRyvdGM9on9EdG2TPMs8evpxyaNf3Z7lgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg3/0XAAD//6WOOOY=") r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x30}, 0x40010) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xcfbc, 0x3, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 0s ago: executing program 4 (id=130): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000000)=@usbdevfs_disconnect={0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. [ 20.062683][ T28] audit: type=1400 audit(1748678585.274:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.063521][ T275] cgroup: Unknown subsys name 'net' [ 20.085686][ T28] audit: type=1400 audit(1748678585.274:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.113173][ T28] audit: type=1400 audit(1748678585.304:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.113406][ T275] cgroup: Unknown subsys name 'devices' [ 20.259247][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.264834][ T275] cgroup: Unknown subsys name 'rlimit' [ 20.366125][ T28] audit: type=1400 audit(1748678585.574:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.390376][ T28] audit: type=1400 audit(1748678585.574:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.413220][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.417204][ T28] audit: type=1400 audit(1748678585.574:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.441543][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.449391][ T28] audit: type=1400 audit(1748678585.634:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.483877][ T28] audit: type=1400 audit(1748678585.634:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.510031][ T28] audit: type=1400 audit(1748678585.634:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.535754][ T28] audit: type=1400 audit(1748678585.634:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.105161][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.112252][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.119861][ T285] device bridge_slave_0 entered promiscuous mode [ 23.136036][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.143232][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.150781][ T285] device bridge_slave_1 entered promiscuous mode [ 23.162784][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.169987][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.177373][ T283] device bridge_slave_0 entered promiscuous mode [ 23.185669][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.192853][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.200277][ T283] device bridge_slave_1 entered promiscuous mode [ 23.244169][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.251428][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.259121][ T284] device bridge_slave_0 entered promiscuous mode [ 23.275570][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.282676][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.290536][ T284] device bridge_slave_1 entered promiscuous mode [ 23.366488][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.373602][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.381155][ T286] device bridge_slave_0 entered promiscuous mode [ 23.398210][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.405372][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.412773][ T286] device bridge_slave_1 entered promiscuous mode [ 23.474629][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.481739][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.489266][ T287] device bridge_slave_0 entered promiscuous mode [ 23.514568][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.521626][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.528978][ T287] device bridge_slave_1 entered promiscuous mode [ 23.548148][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.555286][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.562588][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.569709][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.623463][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.630734][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.638128][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.645517][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.668976][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.676010][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.683293][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.690512][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.735094][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.742184][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.749847][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.757062][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.776323][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.783424][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.790726][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.797854][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.828797][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.836111][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.843345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.851954][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.859187][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.866381][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.874007][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.881210][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.888514][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.895587][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.903118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.910567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.918044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.925411][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.934373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.942640][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.949678][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.980630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.989172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.997271][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.004343][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.012122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.020521][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.027777][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.035195][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.043277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.051467][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.058480][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.065970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.074446][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.081616][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.093426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.101636][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.120719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.128492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.136214][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.145370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.153858][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.162793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.171109][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.178141][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.185553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.193735][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.211916][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.220702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.228930][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.235930][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.243999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.251415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.258942][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.285146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.294581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.302707][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.311492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.319963][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.327066][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.334615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.342681][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.350788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.359814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.368417][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.375443][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.382916][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.391502][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.399792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.416717][ T283] device veth0_vlan entered promiscuous mode [ 24.429592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.438119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.446428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.454630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.474785][ T285] device veth0_vlan entered promiscuous mode [ 24.481422][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.490400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.498286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.505624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.514296][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.523219][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.531821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.540555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.548962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.557300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.565309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.573364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.580989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.591381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.600899][ T283] device veth1_macvtap entered promiscuous mode [ 24.608729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.616486][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.628847][ T284] device veth0_vlan entered promiscuous mode [ 24.642244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.650634][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.658494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.666557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.675326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.683572][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.691933][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.699715][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.710774][ T286] device veth0_vlan entered promiscuous mode [ 24.719459][ T285] device veth1_macvtap entered promiscuous mode [ 24.726101][ T287] device veth0_vlan entered promiscuous mode [ 24.733868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.742207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.750129][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.758086][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.767339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.776183][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.793990][ T284] device veth1_macvtap entered promiscuous mode [ 24.805285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.814108][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.823375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.832276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.841801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.849756][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.858611][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.874098][ T286] device veth1_macvtap entered promiscuous mode [ 24.888003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.896348][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.905185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.914160][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.923233][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.931882][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.940626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.949205][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.959560][ T287] device veth1_macvtap entered promiscuous mode [ 24.975348][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 24.991095][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.999647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.008451][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.017107][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.026292][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.034925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.043813][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.052703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.075786][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 25.075801][ T28] audit: type=1400 audit(1748678590.284:93): avc: denied { read write } for pid=283 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.160143][ T312] loop3: detected capacity change from 0 to 1024 [ 25.167144][ T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.193720][ T312] ======================================================= [ 25.193720][ T312] WARNING: The mand mount option has been deprecated and [ 25.193720][ T312] and is ignored by this kernel. Remove the mand [ 25.193720][ T312] option from the mount to silence this warning. [ 25.193720][ T312] ======================================================= [ 25.196744][ T323] loop0: detected capacity change from 0 to 512 [ 25.250498][ T28] audit: type=1400 audit(1748678590.294:94): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.275928][ T28] audit: type=1400 audit(1748678590.294:95): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.302243][ T28] audit: type=1400 audit(1748678590.364:96): avc: denied { read } for pid=308 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 25.333312][ T28] audit: type=1400 audit(1748678590.364:97): avc: denied { open } for pid=308 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 25.335275][ T312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 25.365519][ T28] audit: type=1400 audit(1748678590.374:98): avc: denied { read write } for pid=311 comm="syz.2.3" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.366840][ T323] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.397629][ T28] audit: type=1400 audit(1748678590.374:99): avc: denied { open } for pid=311 comm="syz.2.3" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.418683][ T323] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.429808][ T28] audit: type=1400 audit(1748678590.374:100): avc: denied { ioctl } for pid=311 comm="syz.2.3" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.459941][ T28] audit: type=1400 audit(1748678590.374:101): avc: denied { ioctl } for pid=308 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 25.485156][ T28] audit: type=1400 audit(1748678590.404:102): avc: denied { sqpoll } for pid=319 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 25.485491][ T312] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.4: Allocating blocks 497-513 which overlap fs metadata [ 25.504730][ T306] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.550541][ T312] Trying to write to read-only block-device loop3 [ 25.557893][ T312] Trying to write to read-only block-device loop3 [ 25.564607][ T312] Trying to write to read-only block-device loop3 [ 25.571205][ T312] Trying to write to read-only block-device loop3 [ 25.580020][ T310] EXT4-fs (loop3): pa ffff88811497f930: logic 256, phys. 369, len 9 [ 25.588342][ T310] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 25.611647][ T334] loop1: detected capacity change from 0 to 1024 [ 25.613260][ T323] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.7: corrupted xattr block 33 [ 25.640997][ T334] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.653371][ T323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 25.653651][ T43] Trying to write to read-only block-device loop3 [ 25.670232][ T285] Trying to write to read-only block-device loop3 [ 25.670457][ T43] Trying to write to read-only block-device loop3 [ 25.677006][ T285] Trying to write to read-only block-device loop3 [ 25.684416][ T323] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.7: corrupted xattr block 33 [ 25.692538][ T285] Trying to write to read-only block-device loop3 [ 25.703601][ T43] Trying to write to read-only block-device loop3 [ 25.712249][ T323] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.7: corrupted xattr block 33 [ 25.716039][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 25.728122][ T323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 25.734552][ T285] EXT4-fs (loop3): unmounting filesystem. [ 25.743507][ T334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.748702][ T306] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 25.766253][ T306] usb 3-1: config 0 has no interface number 0 [ 25.773204][ T306] usb 3-1: config 0 interface 184 has no altsetting 0 [ 25.773982][ T323] EXT4-fs error (device loop0): ext4_get_inode_usage:852: inode #15: comm syz.0.7: corrupted xattr block 33 [ 25.792412][ T306] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 25.822459][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.835875][ T306] usb 3-1: Product: syz [ 25.842531][ T306] usb 3-1: Manufacturer: syz [ 25.849191][ T306] usb 3-1: SerialNumber: syz [ 25.857966][ T306] usb 3-1: config 0 descriptor?? [ 25.861705][ T341] loop3: detected capacity change from 0 to 256 [ 25.867877][ T306] smsc75xx v1.0.0 [ 25.874656][ T283] EXT4-fs (loop0): unmounting filesystem. [ 25.874942][ T284] EXT4-fs (loop1): unmounting filesystem. [ 25.915378][ T347] syz.1.11 (347) used greatest stack depth: 21824 bytes left [ 25.924291][ T307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.969723][ T352] loop0: detected capacity change from 0 to 2048 [ 25.969995][ T350] loop1: detected capacity change from 0 to 512 [ 26.001886][ T341] loop3: detected capacity change from 0 to 8192 [ 26.012171][ T350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.019906][ T352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.023712][ T350] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.048195][ T346] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 26.093853][ T283] EXT4-fs (loop0): unmounting filesystem. [ 26.103082][ T350] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.13: corrupted xattr block 33 [ 26.148152][ T350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 26.174327][ T350] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.13: corrupted xattr block 33 [ 26.194206][ T350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 26.205187][ T369] loop0: detected capacity change from 0 to 128 [ 26.228188][ T369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.244792][ T284] EXT4-fs (loop1): unmounting filesystem. [ 26.251854][ T369] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.295914][ T373] loop1: detected capacity change from 0 to 512 [ 26.314591][ T283] EXT4-fs (loop0): unmounting filesystem. [ 26.339769][ T373] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.21: iget: bad extended attribute block 1 [ 26.371688][ T373] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.21: couldn't read orphan inode 15 (err -117) [ 26.375643][ T377] binder: 376:377 ioctl c0306201 2000000003c0 returned -14 [ 26.391604][ T373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.436111][ T284] EXT4-fs (loop1): unmounting filesystem. [ 26.907486][ T37] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 27.098322][ T37] usb 2-1: not running at top speed; connect to a high speed hub [ 27.106954][ T37] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 27.115767][ T37] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 27.118181][ T316] loop2: detected capacity change from 0 to 512 [ 27.126067][ T37] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.144034][ T37] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.159890][ T316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 27.165890][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.173714][ T316] EXT4-fs (loop2): Test dummy encryption mode enabled [ 27.187350][ T37] usb 2-1: Product: syz [ 27.262627][ T316] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 27.287459][ T37] usb 2-1: Manufacturer: syz [ 27.292132][ T37] usb 2-1: SerialNumber: syz [ 27.297882][ T316] EXT4-fs (loop2): 1 truncate cleaned up [ 27.303567][ T316] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.334835][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 27.357472][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 27.377775][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 27.439135][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 27.504199][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 27.519081][ T37] usb 2-1: 0:2 : does not exist [ 27.541026][ T37] usb 2-1: USB disconnect, device number 2 [ 27.577008][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.582935][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 27.671719][ T306] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 27.680871][ T306] usb 3-1: USB disconnect, device number 2 [ 27.691352][ T403] loop4: detected capacity change from 0 to 128 [ 27.720017][ T403] syz.4.31: attempt to access beyond end of device [ 27.720017][ T403] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 27.733488][ T403] syz.4.31: attempt to access beyond end of device [ 27.733488][ T403] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 27.841010][ T342] kworker/u4:5: attempt to access beyond end of device [ 27.841010][ T342] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 27.901526][ T286] EXT4-fs (loop2): unmounting filesystem. [ 29.036952][ T415] device batadv_slave_0 entered promiscuous mode [ 29.225112][ T422] loop2: detected capacity change from 0 to 512 [ 29.233657][ T422] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.386827][ T422] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.38: invalid indirect mapped block 10 (level 1) [ 29.402212][ T422] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.38: invalid indirect mapped block 8 (level 1) [ 29.933680][ T422] EXT4-fs (loop2): 1 truncate cleaned up [ 29.989209][ T422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.204320][ T422] syz.2.38 (pid 422) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 30.211557][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 30.211576][ T28] audit: type=1400 audit(1748678595.404:166): avc: denied { mount } for pid=436 comm="syz.0.41" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 30.243498][ T28] audit: type=1400 audit(1748678595.404:167): avc: denied { read } for pid=436 comm="syz.0.41" dev="nsfs" ino=4026532294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.265269][ T28] audit: type=1400 audit(1748678595.404:168): avc: denied { open } for pid=436 comm="syz.0.41" path="net:[4026532294]" dev="nsfs" ino=4026532294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.276860][ T439] loop4: detected capacity change from 0 to 4096 [ 30.288805][ T28] audit: type=1400 audit(1748678595.404:169): avc: denied { ioctl } for pid=436 comm="syz.0.41" path="socket:[16595]" dev="sockfs" ino=16595 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.322314][ T286] EXT4-fs (loop2): unmounting filesystem. [ 30.355130][ T439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.380044][ T450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 30.389263][ T450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 30.403752][ T28] audit: type=1400 audit(1748678595.414:170): avc: denied { create } for pid=421 comm="syz.2.38" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.445265][ T28] audit: type=1400 audit(1748678595.424:171): avc: denied { read } for pid=427 comm="syz.3.40" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 30.460105][ T439] fs-verity: sha256 using implementation "sha256-avx2" [ 30.468073][ T28] audit: type=1400 audit(1748678595.424:172): avc: denied { open } for pid=427 comm="syz.3.40" path="/5/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 30.481892][ T439] fs-verity (loop4, inode 16): Error -27 writing Merkle tree block 6493178910 [ 30.497198][ T28] audit: type=1400 audit(1748678595.454:173): avc: denied { create } for pid=440 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 30.552392][ T439] fs-verity (loop4, inode 16): Error -27 building Merkle tree [ 30.637575][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.698310][ T28] audit: type=1400 audit(1748678595.474:174): avc: denied { read } for pid=442 comm="syz.0.44" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.721725][ T424] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 30.743215][ T28] audit: type=1400 audit(1748678595.474:175): avc: denied { open } for pid=442 comm="syz.0.44" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.785807][ T287] EXT4-fs (loop4): unmounting filesystem. [ 30.797580][ T24] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 30.829161][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.840410][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.850330][ T60] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.859695][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.868079][ T60] usb 4-1: SerialNumber: syz [ 30.918773][ T424] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 30.929962][ T424] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 30.944129][ T424] usb 1-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 30.953389][ T424] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.992938][ T424] usb 1-1: config 0 descriptor?? [ 31.018559][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 31.030032][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 31.043171][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 31.052508][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.062115][ T24] usb 3-1: config 0 descriptor?? [ 31.086684][ T60] usb 4-1: 0:2 : does not exist [ 31.634666][ T60] usb 4-1: USB disconnect, device number 2 [ 31.805932][ T424] wacom 0003:056A:00B0.0001: unknown main item tag 0x0 [ 31.826573][ T24] wacom 0003:056A:0101.0002: unknown main item tag 0x0 [ 31.833572][ T424] wacom 0003:056A:00B0.0001: unknown main item tag 0x0 [ 31.840950][ T24] wacom 0003:056A:0101.0002: unknown main item tag 0x0 [ 31.841046][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.848312][ T424] wacom 0003:056A:00B0.0001: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 31.873449][ T24] wacom 0003:056A:0101.0002: unknown main item tag 0x0 [ 31.881904][ T24] wacom 0003:056A:0101.0002: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.2-1/input0 [ 31.895404][ T424] wacom 0003:056A:00B0.0001: hidraw1: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.0-1/input0 [ 31.907626][ T424] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B0.0001/input/input4 [ 32.014806][ T424] usb 3-1: USB disconnect, device number 3 [ 32.058433][ T432] usb 1-1: USB disconnect, device number 2 [ 32.167473][ T6] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 32.598643][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 32.609774][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 32.621201][ T6] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 32.630337][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.638605][ T6] usb 5-1: Product: syz [ 32.642838][ T6] usb 5-1: Manufacturer: syz [ 32.647516][ T6] usb 5-1: SerialNumber: syz [ 32.652748][ T6] usb 5-1: config 0 descriptor?? [ 32.658623][ T6] snd-usb-audio: probe of 5-1:0.0 failed with error -90 [ 32.703040][ T505] Zero length message leads to an empty skb [ 32.767938][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 32.779054][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 32.791466][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 32.801358][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 32.812523][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 32.822720][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 32.833785][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 32.867135][ T432] usb 5-1: USB disconnect, device number 2 [ 32.957519][ T6] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 33.083906][ T305] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.208329][ T6] usb 3-1: not running at top speed; connect to a high speed hub [ 33.216836][ T6] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 33.730745][ T6] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 33.742356][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.754119][ T6] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.763483][ T305] usb 2-1: Using ep0 maxpacket: 16 [ 33.768932][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.777351][ T6] usb 3-1: Product: syz [ 33.781839][ T6] usb 3-1: Manufacturer: syz [ 33.786668][ T6] usb 3-1: SerialNumber: syz [ 33.791636][ T305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.807650][ T305] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 33.819350][ T305] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 33.828695][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.840405][ T305] usb 2-1: config 0 descriptor?? [ 33.926287][ T524] loop4: detected capacity change from 0 to 1024 [ 34.120677][ T6] usb 3-1: 0:2 : does not exist [ 34.135497][ T6] usb 3-1: USB disconnect, device number 4 [ 34.144357][ T524] EXT4-fs: Ignoring removed nobh option [ 34.172542][ T524] EXT4-fs: Ignoring removed bh option [ 34.207766][ T529] loop3: detected capacity change from 0 to 256 [ 34.308332][ T524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.328112][ T287] EXT4-fs (loop4): unmounting filesystem. [ 34.334245][ T306] usb 2-1: USB disconnect, device number 3 [ 34.733692][ T553] loop2: detected capacity change from 0 to 128 [ 34.743082][ T553] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.756119][ T553] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.767560][ T6] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.786368][ T553] process 'syz.2.83' launched './file0' with NULL argv: empty string added [ 34.815919][ T8] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.009040][ T6] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 35.145814][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 35.161198][ T6] usb 4-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 35.170717][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.179698][ T6] usb 4-1: config 0 descriptor?? [ 35.198350][ T567] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 35.224929][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 35.224974][ T28] audit: type=1400 audit(1748678600.434:202): avc: denied { setopt } for pid=563 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.923422][ T28] audit: type=1400 audit(1748678601.134:203): avc: denied { block_suspend } for pid=578 comm="syz.4.92" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.933770][ T6] wacom 0003:056A:00B0.0003: unknown main item tag 0x0 [ 35.977254][ T6] wacom 0003:056A:00B0.0003: unknown main item tag 0x0 [ 35.984852][ T6] wacom 0003:056A:00B0.0003: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 35.995454][ T6] wacom 0003:056A:00B0.0003: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.3-1/input0 [ 36.007900][ T6] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B0.0003/input/input10 [ 36.062265][ T28] audit: type=1400 audit(1748678601.274:204): avc: denied { read } for pid=583 comm="syz.2.94" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.085666][ T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.085786][ T28] audit: type=1400 audit(1748678601.284:205): avc: denied { open } for pid=583 comm="syz.2.94" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.118895][ T28] audit: type=1400 audit(1748678601.284:206): avc: denied { ioctl } for pid=583 comm="syz.2.94" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.213273][ T554] usb 4-1: USB disconnect, device number 3 [ 36.223652][ T28] audit: type=1400 audit(1748678601.414:207): avc: denied { write } for pid=589 comm="syz.1.97" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.247869][ T306] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 36.273357][ T28] audit: type=1400 audit(1748678601.484:208): avc: denied { write } for pid=592 comm="syz.1.98" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.296511][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 36.298381][ T28] audit: type=1400 audit(1748678601.484:209): avc: denied { open } for pid=592 comm="syz.1.98" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.303720][ T19] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.325771][ T28] audit: type=1400 audit(1748678601.484:210): avc: denied { ioctl } for pid=592 comm="syz.1.98" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.362199][ T28] audit: type=1400 audit(1748678601.484:211): avc: denied { read } for pid=592 comm="syz.1.98" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.427619][ T19] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.438018][ T19] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.444743][ T19] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 36.454066][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.461626][ T306] usb 5-1: not running at top speed; connect to a high speed hub [ 36.471311][ T306] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 36.478663][ T19] usb 1-1: config 0 descriptor?? [ 36.482674][ T306] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 36.495963][ T306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.498801][ T598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 36.506757][ T306] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.523096][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.534432][ T306] usb 5-1: Product: syz [ 36.538966][ T306] usb 5-1: Manufacturer: syz [ 36.543661][ T306] usb 5-1: SerialNumber: syz [ 36.786229][ T306] usb 5-1: 0:2 : does not exist [ 36.904306][ T306] usb 5-1: USB disconnect, device number 3 [ 36.977880][ T19] wacom 0003:056A:00D0.0004: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 36.998828][ T19] wacom 0003:056A:00D0.0004: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 37.022872][ T19] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.0004/input/input13 [ 37.061786][ T607] loop2: detected capacity change from 0 to 1024 [ 37.069121][ T607] EXT4-fs: Ignoring removed oldalloc option [ 37.075147][ T607] EXT4-fs: Ignoring removed bh option [ 37.081056][ T607] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.099686][ T607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.104071][ T604] mmap: syz.3.102 (604) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.111758][ T607] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.103: Allocating blocks 481-513 which overlap fs metadata [ 37.129642][ T604] loop3: detected capacity change from 0 to 256 [ 37.140282][ T607] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.103: Allocating blocks 497-513 which overlap fs metadata [ 37.141993][ T604] exfat: Deprecated parameter 'utf8' [ 37.159039][ T607] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.103: Allocating blocks 497-513 which overlap fs metadata [ 37.174708][ T607] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 1 with max blocks 3 with error 117 [ 37.187745][ T607] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.187745][ T607] [ 37.207517][ T604] exfat: Deprecated parameter 'namecase' [ 37.213566][ T604] exfat: Bad value for 'namecase' [ 37.237853][ T286] EXT4-fs (loop2): unmounting filesystem. [ 37.272741][ T573] loop0: detected capacity change from 0 to 16 [ 37.281125][ T613] loop2: detected capacity change from 0 to 1024 [ 37.289015][ T613] EXT4-fs: Ignoring removed bh option [ 37.296188][ T573] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.313284][ T19] usb 1-1: USB disconnect, device number 3 [ 37.326238][ T613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.359998][ T286] EXT4-fs (loop2): unmounting filesystem. [ 37.447210][ T624] loop2: detected capacity change from 0 to 7 [ 37.453822][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.463062][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 37.471109][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.480354][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 37.488349][ T624] loop2: unable to read partition table [ 37.494076][ T624] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 37.495238][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.510313][ T626] loop4: detected capacity change from 0 to 256 [ 37.512833][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 37.536202][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.545600][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 37.557021][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.566319][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 37.576609][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.586466][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 37.598190][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.607783][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 37.640152][ T626] loop4: detected capacity change from 0 to 512 [ 37.658772][ T626] ext4: Unknown parameter 'uid' [ 37.687523][ T305] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.867508][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 37.874403][ T305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.883304][ T305] usb 4-1: config 10 has an invalid interface number: 64 but max is 0 [ 37.892068][ T305] usb 4-1: config 10 has no interface number 0 [ 37.899246][ T305] usb 4-1: config 10 interface 64 altsetting 10 has an invalid endpoint with address 0x80, skipping [ 37.910569][ T305] usb 4-1: config 10 interface 64 has no altsetting 0 [ 37.920019][ T305] usb 4-1: string descriptor 0 read error: -22 [ 37.926422][ T305] usb 4-1: New USB device found, idVendor=12d1, idProduct=3807, bcdDevice=eb.e8 [ 37.935716][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.945028][ T305] usb 4-1: bad CDC descriptors [ 38.164509][ T644] usb 4-1: USB disconnect, device number 4 [ 38.323358][ T649] binder: BINDER_SET_CONTEXT_MGR already set [ 38.329742][ T649] binder: 647:649 ioctl 4018620d 200000000040 returned -16 [ 38.340198][ T649] binder: 647:649 ioctl c0306201 2000000003c0 returned -14 [ 38.376632][ T659] loop2: detected capacity change from 0 to 256 [ 38.387973][ T659] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 38.420572][ T661] loop2: detected capacity change from 0 to 1024 [ 38.428660][ T661] EXT4-fs (loop2): Test dummy encryption mode enabled [ 38.437406][ T661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.449763][ T661] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 38.462881][ T286] EXT4-fs (loop2): unmounting filesystem. [ 38.478782][ T665] loop2: detected capacity change from 0 to 256 [ 38.488765][ T665] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.499705][ T665] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 38.509907][ T665] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 38.557462][ T671] loop2: detected capacity change from 0 to 7 [ 38.564229][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.573533][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 38.581469][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.590641][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 38.598702][ T671] loop2: unable to read partition table [ 38.604396][ T671] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 38.605791][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.623105][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 38.627485][ T37] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.651895][ T673] capability: warning: `syz.4.126' uses deprecated v2 capabilities in a way that may be insecure [ 38.674147][ T675] loop4: detected capacity change from 0 to 1024 [ 38.707103][ T675] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.719864][ T675] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.744921][ T675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.800535][ T342] ================================================================== [ 38.808635][ T342] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 38.816104][ T342] Read of size 4 at addr ffff8881395d6018 by task kworker/u4:5/342 [ 38.823973][ T342] [ 38.826286][ T342] CPU: 0 PID: 342 Comm: kworker/u4:5 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 38.836164][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.846579][ T342] Workqueue: writeback wb_workfn (flush-7:4) [ 38.847562][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 38.852657][ T342] Call Trace: [ 38.852672][ T342] [ 38.861159][ T37] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 38.861855][ T342] __dump_stack+0x21/0x24 [ 38.865538][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.875355][ T342] dump_stack_lvl+0xee/0x150 [ 38.875394][ T342] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.875418][ T342] ? ext4_find_extent+0xbeb/0xe20 [ 38.880577][ T37] usb 2-1: Product: syz [ 38.887938][ T342] print_address_description+0x71/0x210 [ 38.887975][ T342] print_report+0x4a/0x60 [ 38.893132][ T37] usb 2-1: Manufacturer: syz [ 38.897957][ T342] kasan_report+0x122/0x150 [ 38.897991][ T342] ? ext4_find_extent+0xbeb/0xe20 [ 38.898017][ T342] __asan_report_load4_noabort+0x14/0x20 [ 38.898040][ T342] ext4_find_extent+0xbeb/0xe20 [ 38.903456][ T37] usb 2-1: SerialNumber: syz [ 38.907243][ T342] ext4_ext_map_blocks+0x1dc/0x6060 [ 38.913646][ T37] r8152-cfgselector 2-1: config 0 descriptor?? [ 38.917198][ T342] ? __stack_depot_save+0x36/0x480 [ 38.963399][ T342] ? kasan_set_track+0x60/0x70 [ 38.968157][ T342] ? kasan_set_track+0x4b/0x70 [ 38.972910][ T342] ? kasan_save_alloc_info+0x25/0x30 [ 38.978383][ T342] ? __kasan_slab_alloc+0x72/0x80 [ 38.983402][ T342] ? slab_post_alloc_hook+0x4f/0x2d0 [ 38.988684][ T342] ? kmem_cache_alloc+0x16e/0x330 [ 38.993715][ T342] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 38.999181][ T342] ? ext4_writepages+0xf42/0x3020 [ 39.004421][ T342] ? do_writepages+0x3a9/0x5e0 [ 39.009464][ T342] ? __writeback_single_inode+0xc6/0xad0 [ 39.015107][ T342] ? writeback_sb_inodes+0x9b8/0x1550 [ 39.020486][ T342] ? wb_writeback+0x3f1/0x980 [ 39.025164][ T342] ? wb_workfn+0x350/0xda0 [ 39.029576][ T342] ? process_one_work+0x71f/0xc40 [ 39.035392][ T342] ? worker_thread+0xa29/0x11f0 [ 39.040264][ T342] ? kthread+0x281/0x320 [ 39.044516][ T342] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 39.050155][ T342] ? ext4_es_lookup_extent+0x32d/0x8c0 [ 39.055613][ T342] ext4_map_blocks+0x9cb/0x1b60 [ 39.060462][ T342] ? __cfi_ext4_map_blocks+0x10/0x10 [ 39.065831][ T342] ? ext4_inode_journal_mode+0x19a/0x480 [ 39.071478][ T342] ext4_writepages+0x1260/0x3020 [ 39.076419][ T342] ? arch_stack_walk+0x124/0x150 [ 39.081533][ T342] ? xas_load+0x39e/0x3b0 [ 39.085861][ T342] ? __cfi_ext4_writepages+0x10/0x10 [ 39.091153][ T342] ? __kasan_check_write+0x14/0x20 [ 39.096267][ T342] ? __filemap_get_folio+0x81c/0x980 [ 39.101555][ T342] ? ext4_end_io_rsv_work+0x2b9/0x600 [ 39.106924][ T342] ? process_one_work+0x71f/0xc40 [ 39.112026][ T342] ? worker_thread+0xa29/0x11f0 [ 39.116964][ T342] ? __kasan_check_read+0x11/0x20 [ 39.122158][ T342] ? folio_mark_accessed+0x1b8/0x3f0 [ 39.127448][ T342] ? memcpy+0x56/0x70 [ 39.131465][ T342] ? __cfi_ext4_writepages+0x10/0x10 [ 39.136758][ T342] do_writepages+0x3a9/0x5e0 [ 39.141455][ T342] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 39.147232][ T342] ? __cfi_do_writepages+0x10/0x10 [ 39.152432][ T342] ? __kasan_check_write+0x14/0x20 [ 39.157557][ T342] ? _raw_spin_lock+0x8e/0xe0 [ 39.162255][ T342] __writeback_single_inode+0xc6/0xad0 [ 39.168053][ T342] ? inode_io_list_move_locked+0x366/0x3d0 [ 39.174031][ T342] writeback_sb_inodes+0x9b8/0x1550 [ 39.179325][ T342] ? check_preempt_wakeup+0x7fd/0xbc0 [ 39.184703][ T342] ? queue_io+0x4c0/0x4c0 [ 39.189033][ T342] ? __kasan_check_read+0x11/0x20 [ 39.194059][ T342] ? queue_io+0x382/0x4c0 [ 39.198425][ T342] wb_writeback+0x3f1/0x980 [ 39.203021][ T342] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 39.208993][ T342] ? set_worker_desc+0x155/0x1c0 [ 39.213928][ T342] ? update_load_avg+0x4c2/0x13f0 [ 39.218954][ T342] ? __kasan_check_write+0x14/0x20 [ 39.224170][ T342] ? sched_clock_cpu+0x6e/0x250 [ 39.229030][ T342] wb_workfn+0x350/0xda0 [ 39.233292][ T342] ? __cfi_wb_workfn+0x10/0x10 [ 39.238225][ T342] ? kthread_data+0x50/0xc0 [ 39.242736][ T342] ? _raw_spin_unlock+0x4c/0x70 [ 39.247585][ T342] ? finish_task_switch+0x16b/0x7b0 [ 39.252785][ T342] ? __switch_to_asm+0x3a/0x60 [ 39.257564][ T342] ? __schedule+0xb8f/0x14e0 [ 39.262180][ T342] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 39.267755][ T342] process_one_work+0x71f/0xc40 [ 39.272613][ T342] worker_thread+0xa29/0x11f0 [ 39.277288][ T342] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 39.282750][ T342] kthread+0x281/0x320 [ 39.288045][ T342] ? __cfi_worker_thread+0x10/0x10 [ 39.293433][ T342] ? __cfi_kthread+0x10/0x10 [ 39.298018][ T342] ret_from_fork+0x1f/0x30 [ 39.302443][ T342] [ 39.305457][ T342] [ 39.307797][ T342] The buggy address belongs to the physical page: [ 39.314209][ T342] page:ffffea0004e57580 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1395d6 [ 39.324456][ T342] flags: 0x4000000000000000(zone=1) [ 39.329668][ T342] raw: 4000000000000000 ffffea0004e57588 ffffea0004e57588 0000000000000000 [ 39.338334][ T342] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 39.346910][ T342] page dumped because: kasan: bad access detected [ 39.353316][ T342] page_owner info is not present (never set?) [ 39.359368][ T342] [ 39.361691][ T342] Memory state around the buggy address: [ 39.367310][ T342] ffff8881395d5f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 39.375398][ T342] ffff8881395d5f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 39.383473][ T342] >ffff8881395d6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 39.391632][ T342] ^ [ 39.396571][ T342] ffff8881395d6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 39.404624][ T342] ffff8881395d6100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 39.412673][ T342] ================================================================== [ 39.424256][ T342] Disabling lock debugging due to kernel taint [ 39.431355][ T342] ------------[ cut here ]------------ [ 39.436854][ T342] kernel BUG at fs/ext4/inode.c:2447! [ 39.442554][ T342] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 39.448616][ T342] CPU: 0 PID: 342 Comm: kworker/u4:5 Tainted: G B 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 39.459990][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.470147][ T342] Workqueue: writeback wb_workfn (flush-7:4) [ 39.476226][ T342] RIP: 0010:ext4_writepages+0x2f61/0x3020 [ 39.482484][ T342] Code: 08 48 89 df e8 50 17 cb ff 48 8b 3b 48 8b 74 24 40 48 8b 54 24 30 48 8b 4c 24 20 45 89 f0 e8 46 c8 07 00 eb 5b e8 9f be 86 ff <0f> 0b e8 98 be 86 ff eb 2f e8 91 be 86 ff eb 69 e8 8a be 86 ff 31 [ 39.502475][ T342] RSP: 0018:ffffc9000dcdf120 EFLAGS: 00010293 [ 39.508824][ T342] RAX: ffffffff81e93271 RBX: 0000000000000000 RCX: ffff888113cfe540 [ 39.517810][ T342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.526090][ T342] RBP: ffffc9000dcdf490 R08: dffffc0000000000 R09: ffffed10200b2c4d [ 39.535062][ T342] R10: ffffed10200b2c4d R11: 1ffff110200b2c4c R12: dffffc0000000000 [ 39.543054][ T342] R13: 0000000000000000 R14: ffff8881005962a0 R15: 000000000000042b [ 39.551059][ T342] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.560012][ T342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.566616][ T342] CR2: 000000110c2f329e CR3: 00000001332f5000 CR4: 00000000003506b0 [ 39.575070][ T342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.583230][ T342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.591490][ T342] Call Trace: [ 39.595004][ T342] [ 39.598045][ T342] ? arch_stack_walk+0x124/0x150 [ 39.603035][ T342] ? xas_load+0x39e/0x3b0 [ 39.607434][ T342] ? __cfi_ext4_writepages+0x10/0x10 [ 39.612760][ T342] ? __kasan_check_write+0x14/0x20 [ 39.617982][ T342] ? __filemap_get_folio+0x81c/0x980 [ 39.623742][ T342] ? ext4_end_io_rsv_work+0x2b9/0x600 [ 39.629237][ T342] ? process_one_work+0x71f/0xc40 [ 39.631893][ T37] r8152-cfgselector 2-1: Unknown version 0x0000 [ 39.634384][ T342] ? worker_thread+0xa29/0x11f0 [ 39.634410][ T342] ? __kasan_check_read+0x11/0x20 [ 39.642458][ T37] r8152-cfgselector 2-1: bad CDC descriptors [ 39.645599][ T342] ? folio_mark_accessed+0x1b8/0x3f0 [ 39.645632][ T342] ? memcpy+0x56/0x70 [ 39.654625][ T37] r8152-cfgselector 2-1: Unknown version 0x0000 [ 39.656807][ T342] ? __cfi_ext4_writepages+0x10/0x10 [ 39.666415][ T37] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 39.672664][ T342] do_writepages+0x3a9/0x5e0 [ 39.672695][ T342] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 39.672718][ T342] ? __cfi_do_writepages+0x10/0x10 [ 39.700372][ T342] ? __kasan_check_write+0x14/0x20 [ 39.705480][ T342] ? _raw_spin_lock+0x8e/0xe0 [ 39.710249][ T342] __writeback_single_inode+0xc6/0xad0 [ 39.715797][ T342] ? inode_io_list_move_locked+0x366/0x3d0 [ 39.721629][ T342] writeback_sb_inodes+0x9b8/0x1550 [ 39.726910][ T342] ? check_preempt_wakeup+0x7fd/0xbc0 [ 39.732302][ T342] ? queue_io+0x4c0/0x4c0 [ 39.736761][ T342] ? __kasan_check_read+0x11/0x20 [ 39.741819][ T342] ? queue_io+0x382/0x4c0 [ 39.746190][ T342] wb_writeback+0x3f1/0x980 [ 39.750734][ T342] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 39.756753][ T342] ? set_worker_desc+0x155/0x1c0 [ 39.761829][ T342] ? update_load_avg+0x4c2/0x13f0 [ 39.766924][ T342] ? __kasan_check_write+0x14/0x20 [ 39.772094][ T342] ? sched_clock_cpu+0x6e/0x250 [ 39.776982][ T342] wb_workfn+0x350/0xda0 [ 39.781362][ T342] ? __cfi_wb_workfn+0x10/0x10 [ 39.786126][ T342] ? kthread_data+0x50/0xc0 [ 39.790769][ T342] ? _raw_spin_unlock+0x4c/0x70 [ 39.795608][ T342] ? finish_task_switch+0x16b/0x7b0 [ 39.800969][ T342] ? __switch_to_asm+0x3a/0x60 [ 39.805815][ T342] ? __schedule+0xb8f/0x14e0 [ 39.810386][ T342] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 39.815911][ T342] process_one_work+0x71f/0xc40 [ 39.820753][ T342] worker_thread+0xa29/0x11f0 [ 39.825414][ T342] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 39.830872][ T342] kthread+0x281/0x320 [ 39.835003][ T342] ? __cfi_worker_thread+0x10/0x10 [ 39.840099][ T342] ? __cfi_kthread+0x10/0x10 [ 39.844672][ T342] ret_from_fork+0x1f/0x30 [ 39.849161][ T342] [ 39.852419][ T342] Modules linked in: [ 39.858383][ T342] ---[ end trace 0000000000000000 ]--- [ 39.864071][ T342] RIP: 0010:ext4_writepages+0x2f61/0x3020 [ 39.871769][ T342] Code: 08 48 89 df e8 50 17 cb ff 48 8b 3b 48 8b 74 24 40 48 8b 54 24 30 48 8b 4c 24 20 45 89 f0 e8 46 c8 07 00 eb 5b e8 9f be 86 ff <0f> 0b e8 98 be 86 ff eb 2f e8 91 be 86 ff eb 69 e8 8a be 86 ff 31 [ 39.891946][ T342] RSP: 0018:ffffc9000dcdf120 EFLAGS: 00010293 [ 39.898143][ T342] RAX: ffffffff81e93271 RBX: 0000000000000000 RCX: ffff888113cfe540 [ 39.906887][ T342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.925690][ T684] loop0: detected capacity change from 0 to 1024 [ 39.933365][ T342] RBP: ffffc9000dcdf490 R08: dffffc0000000000 R09: ffffed10200b2c4d [ 39.941886][ T342] R10: ffffed10200b2c4d R11: 1ffff110200b2c4c R12: dffffc0000000000 [ 39.950432][ T342] R13: 0000000000000000 R14: ffff8881005962a0 R15: 000000000000042b [ 39.952481][ T684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.975416][ T342] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.984618][ T342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.991398][ T342] CR2: 00007f677f38fd58 CR3: 000000011277f000 CR4: 00000000003506b0 [ 40.000325][ T342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.009124][ T342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.017650][ T342] Kernel panic - not syncing: Fatal exception [ 40.024262][ T342] Kernel Offset: disabled [ 40.028761][ T342] Rebooting in 86400 seconds..