last executing test programs: 2.916200622s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'gretap0\x00'}}}}}, 0x34}}, 0x44010) 2.904148164s ago: executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$dupfd(r2, 0x0, r1) 2.893457746s ago: executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000001180), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 2.869379339s ago: executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FICLONE(r0, 0x5451, r1) 2.858477871s ago: executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = epoll_create(0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001740)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 2.843330353s ago: executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.698216069s ago: executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)='2', 0x1}], 0x1) recvmmsg$unix(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_NOTIFY_INVAL_INODE(r2, 0x0, 0x0) 1.68891016s ago: executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$PIO_UNIMAP(r1, 0x5452, &(0x7f0000000040)={0xfffffffffffffe6f, 0x0}) 1.680842741s ago: executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000019c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) 1.541961983s ago: executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 1.531423064s ago: executing program 4: r0 = syz_io_uring_setup(0x61b8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000ffa000), &(0x7f0000ffa000)) r1 = dup(r0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) 1.518708526s ago: executing program 4: r0 = openat$uhid(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000080)=""/4096, 0x1000}}, 0x11c) write$UHID_DESTROY(r0, &(0x7f00000011c0), 0x4) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xc) 1.051282898s ago: executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB]}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000f40)={&(0x7f0000000d80), 0xc, &(0x7f0000000f00)={&(0x7f0000001140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf251500000060000180140002006d6163766c616e31000000000000000008000100", @ANYRES32, @ANYBLOB="0800030001000000080003000000000014000200626f6e643000000000000000000000001400020076657468305f766972745f776966690008000300010000004800018008000100", @ANYRES32, @ANYBLOB="1400020076657468305f746f5f627269646765001400020076657468305f746f5f687372000000001400020070696d7265673000000000000000000054000180080003000000000014000200766574683000080003000200000008000300020000000800030002000061746164763000000000000000000008000300cef86f201cd95a490600"/146], 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$nl_route(r0, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)=ANY=[@ANYBLOB="38000000690004002dbd7000ffdbdf2500000000000000a9dba7c2403f8a140355953cb400010001009cb0d44701000100ff030800010000"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 1.008343635s ago: executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 985.648849ms ago: executing program 3: r0 = io_uring_setup(0x4820, &(0x7f0000000180)) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 978.702469ms ago: executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 958.239052ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14}, 0x14}}, 0x48080) 937.055136ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1200040, &(0x7f0000000140), 0x84, 0x4da, &(0x7f0000000d00)="$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") chroot(&(0x7f0000000000)='.\x00') openat$uinput(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 889.771343ms ago: executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 856.478558ms ago: executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001dc0)) 839.513641ms ago: executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0xa0141, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) write$cgroup_type(r2, 0x0, 0x0) 807.122716ms ago: executing program 0: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) 697.611392ms ago: executing program 0: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 662.825898ms ago: executing program 0: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$NS_GET_PARENT(r0, 0x8901, 0x20000000) 521.1767ms ago: executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 134.330049ms ago: executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) fcntl$setown(r0, 0x8, 0x0) 98.037045ms ago: executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) pipe2(&(0x7f0000000000), 0x80000) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) keyctl$read(0x2, 0x0, 0x0, 0x0) 70.283299ms ago: executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) write$P9_RAUTH(r0, 0x0, 0x0) 22.958406ms ago: executing program 3: stat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 0s ago: executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fchown(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 52.189197][ T43] loop: Write error at byte offset 9223372036854907903, length 4096. [ 52.196588][ T904] EXT4-fs (loop4): I/O error while writing superblock [ 52.207693][ C0] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 19 starting block 129) [ 52.211328][ T904] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz-executor.4: Error while async write back metadata [ 52.222164][ C0] buffer_io_error: 2 callbacks suppressed [ 52.222177][ C0] Buffer I/O error on device loop4, logical block 129 [ 52.234970][ T497] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.240449][ C0] Buffer I/O error on device loop4, logical block 130 [ 52.240463][ C0] Buffer I/O error on device loop4, logical block 131 [ 52.240475][ C0] Buffer I/O error on device loop4, logical block 132 [ 52.247083][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 52.282863][ T904] EXT4-fs (loop4): I/O error while writing superblock [ 52.282862][ T10] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4620: inode #19: block 9: comm kworker/u4:1: unable to read itable block [ 52.282897][ T10] EXT4-fs (loop4): previous I/O error to superblock detected [ 52.303300][ T904] EXT4-fs error (device loop4): ext4_get_inode_loc:4635: inode #19: block 9: comm syz-executor.4: unable to read itable block [ 52.323610][ T497] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.331630][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 52.339920][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 52.360441][ T905] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.4: error -5 reading directory block [ 52.387127][ T311] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.4: error -5 reading directory block [ 52.404138][ C1] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 19 starting block 129) [ 52.415198][ C1] Buffer I/O error on device loop4, logical block 129 [ 52.421770][ C1] Buffer I/O error on device loop4, logical block 130 [ 52.428362][ C1] Buffer I/O error on device loop4, logical block 131 [ 52.434951][ C1] Buffer I/O error on device loop4, logical block 132 [ 52.441583][ C1] Buffer I/O error on device loop4, logical block 133 [ 52.448142][ C1] Buffer I/O error on device loop4, logical block 134 [ 52.511559][ T311] syz-executor.4 (311) used greatest stack depth: 19656 bytes left [ 52.519513][ T869] usb 2-1: device descriptor read/64, error -71 [ 52.638913][ T869] usb usb2-port1: attempt power cycle [ 52.667279][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.674373][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.682354][ T913] device bridge_slave_0 entered promiscuous mode [ 52.691672][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.698723][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.706066][ T913] device bridge_slave_1 entered promiscuous mode [ 52.797317][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.804217][ T913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.811401][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.818330][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.856045][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.863832][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.872159][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.893127][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.901581][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.908451][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.915881][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.924071][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.931032][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.939154][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.958850][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.958894][ T422] Bluetooth: hci0: command 0x1003 tx timeout [ 52.984365][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.994592][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.005083][ T921] loop2: detected capacity change from 0 to 40427 [ 53.006680][ T913] device veth0_vlan entered promiscuous mode [ 53.018124][ T10] device bridge_slave_1 left promiscuous mode [ 53.024187][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.031666][ T10] device bridge_slave_0 left promiscuous mode [ 53.037994][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.045957][ T10] device veth1_macvtap left promiscuous mode [ 53.051825][ T10] device veth0_vlan left promiscuous mode [ 53.068952][ T869] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 53.161099][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.169268][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.176553][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.188625][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.197988][ T913] device veth1_macvtap entered promiscuous mode [ 53.208590][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.220597][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.249080][ T869] usb 2-1: device descriptor read/8, error -71 [ 53.345064][ T313] EXT4-fs (loop1): unmounting filesystem. [ 53.392268][ T933] loop1: detected capacity change from 0 to 512 [ 53.398901][ T333] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 53.410968][ T933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 53.419984][ T933] ext4 filesystem being mounted at /root/syzkaller-testdir4171133916/syzkaller.tLD16n/41/bus supports timestamps until 2038 (0x7fffffff) [ 53.454408][ T313] EXT4-fs (loop1): unmounting filesystem. [ 53.479748][ T939] loop1: detected capacity change from 0 to 512 [ 53.486272][ T939] EXT4-fs: Ignoring removed bh option [ 53.491856][ T869] usb 2-1: device descriptor read/8, error -71 [ 53.492108][ T939] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 53.507776][ T939] EXT4-fs (loop1): 1 truncate cleaned up [ 53.513686][ T939] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 53.522400][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.578885][ T939] loop1: detected capacity change from 512 to 0 [ 53.585301][ T938] EXT4-fs error (device loop1): ext4_get_inode_loc:4635: inode #19: block 9: comm syz-executor.1: unable to read itable block [ 53.598481][ T938] EXT4-fs (loop1): I/O error while writing superblock [ 53.605511][ T938] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: IO failure [ 53.614302][ T938] EXT4-fs (loop1): I/O error while writing superblock [ 53.620942][ T938] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #19: comm syz-executor.1: mark_inode_dirty error [ 53.632516][ T938] EXT4-fs (loop1): I/O error while writing superblock [ 53.639453][ T938] EXT4-fs error (device loop1): ext4_get_inode_loc:4635: inode #19: block 9: comm syz-executor.1: unable to read itable block [ 53.653122][ T938] EXT4-fs (loop1): I/O error while writing superblock [ 53.659771][ T938] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: IO failure [ 53.668347][ T938] EXT4-fs (loop1): I/O error while writing superblock [ 53.675234][ T938] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #19: comm syz-executor.1: mark_inode_dirty error [ 53.687014][ T938] EXT4-fs (loop1): I/O error while writing superblock [ 53.693664][ T938] EXT4-fs error (device loop1): ext4_check_bdev_write_error:218: comm syz-executor.1: Error while async write back metadata [ 53.706446][ T938] EXT4-fs (loop1): I/O error while writing superblock [ 53.713059][ T938] EXT4-fs error (device loop1): ext4_check_bdev_write_error:218: comm syz-executor.1: Error while async write back metadata [ 53.726014][ T938] EXT4-fs (loop1): I/O error while writing superblock [ 53.732984][ T938] EXT4-fs error (device loop1): ext4_get_inode_loc:4635: inode #19: block 9: comm syz-executor.1: unable to read itable block [ 53.746126][ T938] EXT4-fs (loop1): I/O error while writing superblock [ 53.752786][ T938] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: IO failure [ 53.774261][ T939] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.1: error -5 reading directory block [ 53.788264][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.799168][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.808076][ T313] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.1: error -5 reading directory block [ 53.808882][ T333] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 53.832020][ C0] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 19 starting block 129) [ 53.834591][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.856041][ T333] usb 3-1: config 0 descriptor?? [ 53.860491][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 53.860508][ T28] audit: type=1400 audit(1717975247.327:975): avc: denied { read } for pid=941 comm="syz-executor.3" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.889482][ T28] audit: type=1400 audit(1717975247.327:976): avc: denied { open } for pid=941 comm="syz-executor.3" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.913728][ T28] audit: type=1400 audit(1717975247.327:977): avc: denied { ioctl } for pid=941 comm="syz-executor.3" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.914558][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.940857][ T28] audit: type=1400 audit(1717975247.327:978): avc: denied { set_context_mgr } for pid=941 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.951499][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.984545][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 53.999731][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.008278][ T6] usb 5-1: config 0 descriptor?? [ 54.193082][ T952] loop3: detected capacity change from 0 to 256 [ 54.203176][ T28] audit: type=1400 audit(1717975247.657:979): avc: denied { map } for pid=944 comm="syz-executor.3" path="/dev/ashmem" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.264748][ T952] FAT-fs (loop3): Directory bread(block 64) failed [ 54.271226][ T952] FAT-fs (loop3): Directory bread(block 65) failed [ 54.277820][ T952] FAT-fs (loop3): Directory bread(block 66) failed [ 54.284244][ T952] FAT-fs (loop3): Directory bread(block 67) failed [ 54.290691][ T952] FAT-fs (loop3): Directory bread(block 68) failed [ 54.297082][ T952] FAT-fs (loop3): Directory bread(block 69) failed [ 54.303596][ T952] FAT-fs (loop3): Directory bread(block 70) failed [ 54.310015][ T952] FAT-fs (loop3): Directory bread(block 71) failed [ 54.316479][ T952] FAT-fs (loop3): Directory bread(block 72) failed [ 54.322914][ T952] FAT-fs (loop3): Directory bread(block 73) failed [ 54.342565][ T948] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.349515][ T948] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.356632][ T948] device bridge_slave_0 entered promiscuous mode [ 54.363671][ T948] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.370639][ T948] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.377929][ T948] device bridge_slave_1 entered promiscuous mode [ 54.438267][ T948] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.445126][ T948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.452316][ T948] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.459104][ T948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.486621][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.494362][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.501463][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.521129][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.529389][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.537357][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.544203][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.551450][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.560066][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.567997][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.574850][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.582924][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.591064][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.599056][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.606911][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.622803][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.631125][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.643900][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.651660][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.662923][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.670255][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.677630][ T948] device veth0_vlan entered promiscuous mode [ 54.688493][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.696686][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.706133][ T948] device veth1_macvtap entered promiscuous mode [ 54.719194][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.726629][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.735014][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.743160][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.751292][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.759888][ T497] device bridge_slave_1 left promiscuous mode [ 54.765909][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.773431][ T497] device bridge_slave_0 left promiscuous mode [ 54.779518][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.787292][ T497] device veth1_macvtap left promiscuous mode [ 54.793483][ T497] device veth0_vlan left promiscuous mode [ 54.858944][ T333] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 54.867965][ T333] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 54.875467][ T333] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 54.885140][ T333] usb 3-1: USB disconnect, device number 4 [ 54.900416][ T28] audit: type=1400 audit(1717975248.377:980): avc: denied { mounton } for pid=954 comm="syz-executor.3" path="/root/syzkaller-testdir1011393518/syzkaller.Wo9RZj/37/file0" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 54.938073][ T28] audit: type=1400 audit(1717975248.377:981): avc: denied { mount } for pid=954 comm="syz-executor.3" name="/" dev="ramfs" ino=17410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.078969][ T6] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71 [ 55.087822][ T6] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 55.095367][ T6] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 55.104140][ T6] usb 5-1: USB disconnect, device number 3 [ 55.187672][ T965] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 55.394256][ T967] 9pnet_fd: Insufficient options for proto=fd [ 55.790577][ T979] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 56.019633][ T28] audit: type=1400 audit(1717975249.497:982): avc: denied { setopt } for pid=981 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.039385][ T28] audit: type=1326 audit(1717975249.497:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dc467cf69 code=0x0 [ 56.132246][ T28] audit: type=1400 audit(1717975249.607:984): avc: denied { read } for pid=988 comm="syz-executor.4" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.286051][ T999] loop4: detected capacity change from 0 to 256 [ 56.299255][ T999] FAT-fs (loop4): Directory bread(block 64) failed [ 56.305686][ T999] FAT-fs (loop4): Directory bread(block 65) failed [ 56.312299][ T999] FAT-fs (loop4): Directory bread(block 66) failed [ 56.319192][ T999] FAT-fs (loop4): Directory bread(block 67) failed [ 56.325548][ T999] FAT-fs (loop4): Directory bread(block 68) failed [ 56.332066][ T999] FAT-fs (loop4): Directory bread(block 69) failed [ 56.338400][ T999] FAT-fs (loop4): Directory bread(block 70) failed [ 56.344733][ T999] FAT-fs (loop4): Directory bread(block 71) failed [ 56.351132][ T999] FAT-fs (loop4): Directory bread(block 72) failed [ 56.357389][ T999] FAT-fs (loop4): Directory bread(block 73) failed [ 57.447296][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.460100][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.472479][ T1024] loop3: detected capacity change from 0 to 2048 [ 57.478943][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.486263][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.487553][ T1024] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 57.502548][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.509828][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.517141][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.524393][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.531587][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.538776][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.545969][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.553192][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.560418][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.567582][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.574817][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.581999][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.589232][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.596835][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.604520][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.611890][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.619155][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.626499][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.633770][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.640992][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.648112][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.655347][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.662542][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.669830][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.677008][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.684245][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.691440][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.698632][ T315] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.706269][ T315] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 58.493374][ T422] Bluetooth: hci0: command 0x1003 tx timeout [ 58.495780][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.547679][ T1040] loop4: detected capacity change from 0 to 256 [ 58.548021][ T1038] loop2: detected capacity change from 0 to 1024 [ 58.556124][ T1040] exfat: Deprecated parameter 'utf8' [ 58.565781][ T1040] exfat: Deprecated parameter 'namecase' [ 58.568129][ T1038] EXT4-fs: Ignoring removed orlov option [ 58.574211][ T1040] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d) [ 58.576848][ T1038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.608688][ T1044] loop3: detected capacity change from 0 to 128 [ 58.615284][ T1038] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.624147][ T1044] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.633026][ T1044] ext4 filesystem being mounted at /root/syzkaller-testdir1011393518/syzkaller.Wo9RZj/48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 58.670758][ T514] EXT4-fs (loop2): unmounting filesystem. [ 58.790666][ T1063] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1063 comm=syz-executor.2 [ 58.856122][ T497] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.415390][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 59.415434][ T28] audit: type=1326 audit(1717975252.887:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95d907cf69 code=0x0 [ 59.509067][ T312] EXT4-fs (loop3): unmounting filesystem. [ 59.540774][ T28] audit: type=1400 audit(1717975253.017:1007): avc: denied { setopt } for pid=1072 comm="syz-executor.3" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.575411][ T28] audit: type=1400 audit(1717975253.047:1008): avc: denied { remount } for pid=1067 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.615059][ T28] audit: type=1400 audit(1717975253.087:1009): avc: denied { ioctl } for pid=1083 comm="syz-executor.3" path="socket:[17333]" dev="sockfs" ino=17333 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.674173][ T1092] serio: Serial port pts1 [ 59.684216][ T1094] serio: Serial port pts2 [ 60.878868][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 60.878992][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.047938][ T28] audit: type=1400 audit(1717975254.517:1010): avc: denied { name_bind } for pid=1125 comm="syz-executor.2" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.049089][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 61.126596][ T28] audit: type=1400 audit(1717975254.597:1011): avc: denied { write } for pid=1128 comm="syz-executor.1" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.158227][ T497] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.950087][ T28] audit: type=1400 audit(1717975255.427:1012): avc: denied { ioctl } for pid=1147 comm="syz-executor.2" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17698 ioctlcmd=0x6602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.077366][ T28] audit: type=1400 audit(1717975256.547:1013): avc: denied { write } for pid=1225 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.113196][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 63.119882][ T28] audit: type=1400 audit(1717975256.587:1014): avc: denied { nlmsg_read } for pid=1233 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 63.146531][ T28] audit: type=1400 audit(1717975256.617:1015): avc: denied { accept } for pid=1219 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 63.197847][ T1247] serio: Serial port pts1 [ 63.198919][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 63.202123][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.239357][ T1256] Zero length message leads to an empty skb [ 63.376069][ T1273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1273 comm=syz-executor.1 [ 63.431054][ T1281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1281 comm=syz-executor.1 [ 63.488206][ T1289] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1795 sclass=netlink_audit_socket pid=1289 comm=syz-executor.1 [ 63.548573][ T1295] loop1: detected capacity change from 0 to 512 [ 63.556360][ T1295] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.567941][ T1295] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.581242][ T1295] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.593962][ T1295] EXT4-fs (loop1): 1 orphan inode deleted [ 63.599652][ T1295] EXT4-fs (loop1): 1 truncate cleaned up [ 63.601925][ T1299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1299 comm=syz-executor.3 [ 63.605310][ T1295] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 63.629698][ T1295] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.631004][ T1301] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=47 sclass=netlink_audit_socket pid=1301 comm=syz-executor.3 [ 63.644537][ T1295] EXT4-fs (loop1): Remounting filesystem read-only [ 63.656711][ T1301] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=1301 comm=syz-executor.3 [ 63.675555][ T1301] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=57 sclass=netlink_audit_socket pid=1301 comm=syz-executor.3 [ 63.679350][ T948] EXT4-fs (loop1): unmounting filesystem. [ 63.714749][ T1309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1309 comm=syz-executor.3 [ 63.736795][ T1313] serio: Serial port pts0 [ 64.238912][ T346] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 64.592327][ T1329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1329 comm=syz-executor.1 [ 64.599009][ T346] usb 3-1: config 0 has no interfaces? [ 64.768921][ T346] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.777831][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.785618][ T346] usb 3-1: Product: syz [ 64.789694][ T346] usb 3-1: Manufacturer: syz [ 64.794104][ T346] usb 3-1: SerialNumber: syz [ 64.799507][ T346] usb 3-1: config 0 descriptor?? [ 65.368881][ T746] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 65.739034][ T746] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 65.749450][ T746] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.762162][ T746] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.771031][ T746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.779433][ T746] usb 2-1: config 0 descriptor?? [ 65.819328][ T746] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 66.972751][ T346] usb 3-1: USB disconnect, device number 5 [ 67.065687][ T1369] serio: Serial port pts0 [ 67.629681][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 67.629697][ T28] audit: type=1400 audit(1717975261.107:1021): avc: denied { ioctl } for pid=1382 comm="syz-executor.3" path="socket:[18029]" dev="sockfs" ino=18029 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.642533][ T1385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1385 comm=syz-executor.3 [ 67.872114][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.099505][ T346] usb 2-1: USB disconnect, device number 7 [ 68.154539][ T28] audit: type=1400 audit(1717975261.627:1022): avc: denied { create } for pid=1405 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.174344][ T28] audit: type=1400 audit(1717975261.627:1023): avc: denied { write } for pid=1405 comm="syz-executor.1" path="socket:[18078]" dev="sockfs" ino=18078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.303599][ T28] audit: type=1400 audit(1717975261.777:1024): avc: denied { ioctl } for pid=1419 comm="syz-executor.1" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.552072][ T1425] loop3: detected capacity change from 0 to 512 [ 68.570722][ T1425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.579562][ T1425] ext4 filesystem being mounted at /root/syzkaller-testdir1011393518/syzkaller.Wo9RZj/89/bus supports timestamps until 2038 (0x7fffffff) [ 68.600372][ T312] EXT4-fs (loop3): unmounting filesystem. [ 68.750516][ T1449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1449 comm=syz-executor.3 [ 69.069891][ T28] audit: type=1400 audit(1717975262.547:1025): avc: denied { create } for pid=1474 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.094446][ T28] audit: type=1400 audit(1717975262.557:1026): avc: denied { create } for pid=1476 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.138385][ T1489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1489 comm=syz-executor.1 [ 69.860979][ T28] audit: type=1400 audit(1717975263.337:1027): avc: denied { nlmsg_write } for pid=1548 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 69.919019][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 69.920442][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.955292][ T28] audit: type=1400 audit(1717975263.427:1028): avc: denied { read } for pid=1556 comm="syz-executor.2" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.979673][ T28] audit: type=1400 audit(1717975263.427:1029): avc: denied { open } for pid=1556 comm="syz-executor.2" path="/dev/rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.021159][ T1564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1564 comm=syz-executor.2 [ 70.042464][ T1569] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1549 sclass=netlink_audit_socket pid=1569 comm=syz-executor.3 [ 70.101028][ T1581] loop2: detected capacity change from 0 to 2048 [ 70.117638][ T1591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1591 comm=syz-executor.4 [ 70.141714][ T1581] loop2: p1 < > p4 [ 70.145883][ T1581] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.159833][ T28] audit: type=1400 audit(1717975263.637:1030): avc: denied { read } for pid=1580 comm="syz-executor.2" name="loop2p4" dev="devtmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.209234][ T1581] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 70.233980][ T1581] blk_print_req_error: 1094 callbacks suppressed [ 70.234004][ T1581] I/O error, dev loop2, sector 248 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 70.250399][ T1581] buffer_io_error: 249 callbacks suppressed [ 70.250420][ T1581] Buffer I/O error on dev loop2p4, logical block 31, lost async page write [ 70.266782][ T1581] I/O error, dev loop2, sector 240 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 70.276333][ T1581] Buffer I/O error on dev loop2p4, logical block 30, lost async page write [ 70.286694][ T1581] I/O error, dev loop2, sector 232 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 70.296229][ T1581] Buffer I/O error on dev loop2p4, logical block 29, lost async page write [ 70.306954][ T1581] I/O error, dev loop2, sector 224 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 70.319430][ T1581] Buffer I/O error on dev loop2p4, logical block 28, lost async page write [ 70.329703][ T1581] I/O error, dev loop2, sector 216 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 70.339733][ T1581] Buffer I/O error on dev loop2p4, logical block 27, lost async page write [ 70.351285][ T1581] I/O error, dev loop2, sector 208 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 70.360815][ T1581] Buffer I/O error on dev loop2p4, logical block 26, lost async page write [ 70.369570][ T1581] I/O error, dev loop2, sector 200 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 70.379151][ T1581] Buffer I/O error on dev loop2p4, logical block 25, lost async page write [ 70.390581][ T1581] I/O error, dev loop2, sector 192 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 70.400359][ T1581] Buffer I/O error on dev loop2p4, logical block 24, lost async page write [ 70.409151][ T1581] I/O error, dev loop2, sector 184 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 70.418908][ T1581] Buffer I/O error on dev loop2p4, logical block 23, lost async page write [ 70.430192][ T1581] I/O error, dev loop2, sector 176 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 70.441501][ T1581] Buffer I/O error on dev loop2p4, logical block 22, lost async page write [ 71.038879][ T314] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 71.288919][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 71.408902][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.420017][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.429688][ T314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 71.442290][ T314] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 71.451154][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.459599][ T314] usb 3-1: config 0 descriptor?? [ 71.491494][ T1750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=1750 comm=syz-executor.4 [ 71.939854][ T314] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 71.946567][ T314] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 71.953365][ T314] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 71.960168][ T314] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 71.966944][ T314] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 71.974381][ T314] ntrig 0003:1B96:000A.0008: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 72.239870][ T314] usb 3-1: USB disconnect, device number 6 [ 72.350408][ T1835] loop4: detected capacity change from 0 to 512 [ 72.359733][ T1835] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 72.367599][ T1835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 72.375682][ T1835] System zones: 0-1, 15-15, 18-18, 34-34 [ 72.381767][ T1835] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.388157][ T1835] EXT4-fs warning (device loop4): ext4_enable_quotas:6987: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 72.402739][ T1835] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 72.409880][ T1835] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 16 [ 72.420296][ T1835] ext4_test_bit(bit=15, block=18) = 1 [ 72.425554][ T1835] is_bad_inode(inode)=0 [ 72.429633][ T1835] NEXT_ORPHAN(inode)=0 [ 72.433673][ T1835] max_ino=32 [ 72.436705][ T1835] i_nlink=2 [ 72.439747][ T1835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.455281][ T913] EXT4-fs (loop4): unmounting filesystem. [ 72.468704][ T1853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1853 comm=syz-executor.4 [ 72.592316][ T1877] syz-executor.4 (pid 1877) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 72.804001][ T1913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1913 comm=syz-executor.2 [ 72.848570][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 72.848587][ T28] audit: type=1400 audit(1717975266.317:1042): avc: denied { setopt } for pid=1920 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.910000][ T28] audit: type=1400 audit(1717975266.387:1043): avc: denied { setopt } for pid=1927 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.970733][ T1940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1940 comm=syz-executor.4 [ 73.017126][ T1948] loop4: detected capacity change from 0 to 2048 [ 73.024076][ T1930] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.031780][ T1930] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.041063][ T1930] device bridge_slave_0 entered promiscuous mode [ 73.044631][ T1948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.051531][ T1930] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.062722][ T1930] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.070298][ T1930] device bridge_slave_1 entered promiscuous mode [ 73.128676][ T28] audit: type=1400 audit(1717975522.591:1044): avc: denied { ioctl } for pid=1945 comm="syz-executor.4" path="/root/syzkaller-testdir3973321596/syzkaller.xoC7zB/123/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop4" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.136726][ T1966] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 73.174512][ T1966] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 117 [ 73.189437][ T1966] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.189437][ T1966] [ 73.211690][ T497] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1492 with error 28 [ 73.224175][ T497] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.224175][ T497] [ 73.233767][ T497] EXT4-fs (loop4): Total free blocks count 0 [ 73.239715][ T497] EXT4-fs (loop4): Free/Dirty block details [ 73.245187][ T1930] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.245425][ T497] EXT4-fs (loop4): free_blocks=0 [ 73.252324][ T1930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.252419][ T1930] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.252436][ T1930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.279378][ T497] EXT4-fs (loop4): dirty_blocks=1520 [ 73.284603][ T497] EXT4-fs (loop4): Block reservation details [ 73.300866][ T869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.316228][ T869] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.329310][ T869] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.336080][ T1973] input: syz1 as /devices/virtual/input/input5 [ 73.337541][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 73.365764][ T1975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1975 comm=syz-executor.4 [ 73.382381][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.390810][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.397675][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.405924][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.414140][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.418841][ T28] audit: type=1400 audit(1717975522.891:1045): avc: denied { ioctl } for pid=1979 comm="syz-executor.4" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.421020][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.453859][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.461993][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.487854][ T1930] device veth0_vlan entered promiscuous mode [ 73.494270][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.509361][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.517328][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.525119][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.546302][ T1930] device veth1_macvtap entered promiscuous mode [ 73.553701][ T869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.570086][ T10] device bridge_slave_1 left promiscuous mode [ 73.578759][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.587029][ T10] device bridge_slave_0 left promiscuous mode [ 73.594843][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.596276][ T28] audit: type=1400 audit(1717975523.061:1046): avc: denied { lock } for pid=2004 comm="syz-executor.4" path="socket:[21204]" dev="sockfs" ino=21204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.625498][ T28] audit: type=1400 audit(1717975523.091:1047): avc: denied { create } for pid=2008 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.645283][ T10] device veth1_macvtap left promiscuous mode [ 73.651347][ T10] device veth0_vlan left promiscuous mode [ 73.655795][ T2012] loop4: detected capacity change from 0 to 2048 [ 73.659535][ T28] audit: type=1400 audit(1717975523.091:1048): avc: denied { setopt } for pid=2008 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.667675][ T2012] EXT4-fs: Ignoring removed orlov option [ 73.704542][ T2012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.780881][ T497] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.795948][ T497] EXT4-fs (loop4): Remounting filesystem read-only [ 73.820146][ T913] EXT4-fs (loop4): unmounting filesystem. [ 73.827946][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.838149][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.850387][ T2028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2028 comm=syz-executor.1 [ 73.892331][ T2036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=2036 comm=syz-executor.4 [ 74.143640][ T28] audit: type=1400 audit(1717975523.611:1049): avc: denied { setopt } for pid=2115 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.175376][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 74.186168][ T28] audit: type=1400 audit(1717975523.641:1050): avc: denied { setopt } for pid=2117 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.225985][ T2131] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 74.250713][ T28] audit: type=1400 audit(1717975523.721:1051): avc: denied { ioctl } for pid=2135 comm="syz-executor.3" path="socket:[20442]" dev="sockfs" ino=20442 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.646102][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.868952][ T2260] loop4: detected capacity change from 0 to 128 [ 75.883994][ T2260] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 75.903355][ T2263] selinux_netlink_send: 4 callbacks suppressed [ 75.903375][ T2263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2263 comm=syz-executor.2 [ 75.925776][ T2260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 75.949909][ T2260] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 75.968917][ T2260] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 76.009403][ T913] EXT4-fs (loop4): unmounting filesystem. [ 76.069767][ T2276] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 76.306811][ T2323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2323 comm=syz-executor.1 [ 76.590844][ T2372] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2372 comm=syz-executor.4 [ 76.711697][ T2392] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 76.718920][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.721517][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 76.733770][ T746] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 77.076571][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.108952][ T746] usb 2-1: config 0 has no interfaces? [ 77.114290][ T746] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.128690][ T746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.145718][ T746] usb 2-1: config 0 descriptor?? [ 77.481298][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 77.496972][ T2436] loop4: detected capacity change from 0 to 512 [ 77.504441][ T2436] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.517251][ T2436] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz-executor.4: invalid indirect mapped block 83886080 (level 1) [ 77.531989][ T2436] EXT4-fs (loop4): 1 orphan inode deleted [ 77.537550][ T2436] EXT4-fs (loop4): 1 truncate cleaned up [ 77.543141][ T2436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.553444][ T2436] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor.4: deleted inode referenced: 12 [ 77.571489][ T913] EXT4-fs (loop4): unmounting filesystem. [ 77.606054][ T2453] loop4: detected capacity change from 0 to 2048 [ 77.620946][ T2453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.632235][ T2453] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 77.646902][ T2453] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 117 [ 77.659080][ T2453] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.659080][ T2453] [ 77.673697][ T913] EXT4-fs (loop4): unmounting filesystem. [ 77.724261][ T2478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2478 comm=syz-executor.2 [ 77.769702][ T314] usb 2-1: USB disconnect, device number 8 [ 77.860364][ T2509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2509 comm=syz-executor.4 [ 77.885714][ T2511] loop4: detected capacity change from 0 to 1024 [ 77.892268][ T2511] EXT4-fs: Ignoring removed orlov option [ 77.898134][ T2511] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.908932][ T2511] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 77.919177][ T2511] EXT4-fs (loop4): invalid journal inode [ 77.924750][ T2511] EXT4-fs (loop4): can't get journal size [ 77.931662][ T2511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.946584][ T913] EXT4-fs (loop4): unmounting filesystem. [ 78.077252][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 78.077269][ T28] audit: type=1400 audit(1717975527.541:1073): avc: denied { read } for pid=2519 comm="syz-executor.4" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 78.105463][ T28] audit: type=1400 audit(1717975527.541:1074): avc: denied { open } for pid=2519 comm="syz-executor.4" path="/root/syzkaller-testdir3973321596/syzkaller.xoC7zB/245/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 78.303772][ T28] audit: type=1400 audit(1717975527.771:1075): avc: denied { ioctl } for pid=2560 comm="syz-executor.1" path="/dev/rtc0" dev="devtmpfs" ino=171 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.349130][ T2568] loop0: detected capacity change from 0 to 16384 [ 78.368034][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 78.383597][ T28] audit: type=1400 audit(1717975527.851:1076): avc: denied { bind } for pid=2554 comm="syz-executor.4" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.404605][ T28] audit: type=1400 audit(1717975527.851:1077): avc: denied { node_bind } for pid=2554 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 78.578905][ T2574] loop0: detected capacity change from 16384 to 16320 [ 78.758942][ T28] audit: type=1400 audit(1717975528.221:1078): avc: denied { setattr } for pid=2618 comm="syz-executor.1" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 78.789001][ T2624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2624 comm=syz-executor.2 [ 78.850089][ T28] audit: type=1400 audit(1717975528.321:1079): avc: denied { create } for pid=2640 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 78.881355][ T28] audit: type=1400 audit(1717975528.341:1080): avc: denied { getopt } for pid=2643 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.916620][ T28] audit: type=1400 audit(1717975528.381:1081): avc: denied { getattr } for pid=2651 comm="syz-executor.2" path="cgroup:[4026532483]" dev="nsfs" ino=4026532483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.940826][ T28] audit: type=1400 audit(1717975528.401:1082): avc: denied { write } for pid=2653 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.075405][ T2673] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2673 comm=syz-executor.1 [ 79.118964][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.119063][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 79.222001][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.228894][ T746] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 79.288708][ T2729] serio: Serial port pts1 [ 79.486780][ T2780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=2780 comm=syz-executor.0 [ 79.508857][ T746] usb 3-1: device descriptor read/64, error -71 [ 79.552128][ T2789] loop0: detected capacity change from 0 to 512 [ 79.561232][ T2789] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 79.569295][ T2789] EXT4-fs (loop0): 1 truncate cleaned up [ 79.574752][ T2789] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.584936][ T2789] SELinux: Context is not valid (left unmapped). [ 79.600332][ T1930] EXT4-fs (loop0): unmounting filesystem. [ 79.615195][ T2797] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2797 comm=syz-executor.0 [ 79.746675][ T2837] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2837 comm=syz-executor.3 [ 79.908881][ T746] usb 3-1: device descriptor read/64, error -71 [ 80.188868][ T746] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 80.458864][ T746] usb 3-1: device descriptor read/64, error -71 [ 80.735548][ T2889] SELinux: Context system_u:object_r:devtty_t:s0 is not valid (left unmapped). [ 80.848860][ T746] usb 3-1: device descriptor read/64, error -71 [ 80.968930][ T746] usb usb3-port1: attempt power cycle [ 81.278956][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 81.279312][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.340363][ T2905] selinux_netlink_send: 2 callbacks suppressed [ 81.340385][ T2905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2905 comm=syz-executor.1 [ 81.388871][ T746] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 81.429523][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.443506][ T2923] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2923 comm=syz-executor.0 [ 81.568892][ T746] usb 3-1: device descriptor read/8, error -71 [ 81.619808][ T2948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=2948 comm=syz-executor.0 [ 81.848909][ T746] usb 3-1: device descriptor read/8, error -71 [ 81.868655][ T2980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=2980 comm=syz-executor.0 [ 81.919797][ T2985] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.926893][ T2985] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.934704][ T2985] device bridge0 entered promiscuous mode [ 81.977870][ T2998] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2561 sclass=netlink_tcpdiag_socket pid=2998 comm=syz-executor.2 [ 82.038050][ T3018] serio: Serial port pts2 [ 82.064840][ T3024] loop3: detected capacity change from 0 to 1024 [ 82.071646][ T3024] EXT4-fs: Ignoring removed orlov option [ 82.077993][ T3024] EXT4-fs (loop3): Test dummy encryption mode enabled [ 82.084992][ T3024] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 82.096043][ T3024] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 82.106375][ T3024] EXT4-fs (loop3): invalid journal inode [ 82.112047][ T3024] EXT4-fs (loop3): can't get journal size [ 82.118753][ T3024] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 82.134110][ T312] EXT4-fs (loop3): unmounting filesystem. [ 82.382660][ T3086] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3086 comm=syz-executor.4 [ 82.441621][ T3097] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.635955][ T3114] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.642916][ T3114] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.650283][ T3114] device bridge_slave_0 entered promiscuous mode [ 82.662633][ T3114] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.669595][ T3114] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.676872][ T3114] device bridge_slave_1 entered promiscuous mode [ 82.730667][ T3114] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.737514][ T3114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.744700][ T3114] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.751646][ T3114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.778617][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.786119][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.793232][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.811481][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.819855][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.826693][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.833873][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.841881][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.848703][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.855868][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.863917][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.884886][ T869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.897486][ T869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.905525][ T869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.913746][ T869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.922024][ T3114] device veth0_vlan entered promiscuous mode [ 82.935245][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.944910][ T3114] device veth1_macvtap entered promiscuous mode [ 82.954842][ T869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.963006][ T869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.977195][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.985851][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.131293][ T10] device bridge_slave_1 left promiscuous mode [ 83.137262][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.145114][ T10] device bridge_slave_0 left promiscuous mode [ 83.152265][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.160869][ T10] device veth1_macvtap left promiscuous mode [ 83.166909][ T10] device veth0_vlan left promiscuous mode [ 83.269900][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 83.269918][ T28] audit: type=1400 audit(1717975532.741:1103): avc: denied { audit_write } for pid=3186 comm="syz-executor.3" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.297886][ T28] audit: type=1107 audit(1717975532.741:1104): pid=3186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='EáÍ; [ 83.297886][ T28] zÍ­wÕ™@fNÎBIíž_yuP Õ mJ-5ædÍ@¿H&4Ê|iÛO\·1Ûxe\´ÝK(]X A.ÁïkìzÍ;Œ-ÿ¤j˜qªØ)ìm [ 83.297886][ T28] 8CªÓËtõ1ÿ<’Ù”5z’F1Qå}~ôo16U9Âæ†lÒT=ŠG+ã[û1[ÿäÒ' [ 83.335098][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 83.335191][ T3187] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.439603][ T422] Bluetooth: hci0: command 0x1003 tx timeout [ 83.445457][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.480867][ T28] audit: type=1400 audit(1717975532.951:1105): avc: denied { connect } for pid=3227 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.519677][ T3235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=3235 comm=syz-executor.3 [ 83.542153][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 83.567667][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.635655][ T28] audit: type=1400 audit(1717975533.101:1106): avc: denied { remount } for pid=3255 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.658358][ T28] audit: type=1400 audit(1717975533.131:1107): avc: denied { unmount } for pid=3114 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.193328][ T3288] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3288 comm=syz-executor.4 [ 84.474085][ T3358] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=3358 comm=syz-executor.4 [ 84.539028][ T28] audit: type=1400 audit(1717975534.011:1108): avc: denied { ioctl } for pid=3377 comm="syz-executor.1" path="socket:[25785]" dev="sockfs" ino=25785 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.695601][ T28] audit: type=1400 audit(1717975534.161:1109): avc: denied { ioctl } for pid=3427 comm="syz-executor.4" path="socket:[26885]" dev="sockfs" ino=26885 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.740107][ T3435] serio: Serial port pts1 [ 84.949599][ T3449] loop4: detected capacity change from 0 to 512 [ 84.957932][ T3449] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 84.971279][ T3449] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.4: missing EA_INODE flag [ 84.983375][ T3449] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 2 err=-117 [ 84.996250][ T3449] EXT4-fs (loop4): 1 orphan inode deleted [ 85.001890][ T3449] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 85.048876][ T3449] loop4: detected capacity change from 512 to 11 [ 85.060514][ T913] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.4: error -12 reading directory block [ 85.078455][ T913] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Out of memory [ 85.083795][ T3459] serio: Serial port pts1 [ 85.087600][ T913] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor.4: mark_inode_dirty error [ 85.104035][ T913] EXT4-fs (loop4): unmounting filesystem. [ 85.300481][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.307770][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.315315][ T3464] device bridge_slave_0 entered promiscuous mode [ 85.325991][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.333143][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.340450][ T3464] device bridge_slave_1 entered promiscuous mode [ 85.396700][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.403570][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.410647][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.417428][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.444432][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.451986][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.460211][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.471526][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.479953][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.486817][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.497959][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.506116][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.512968][ T746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.532136][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.540287][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.570771][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.586603][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.594245][ T869] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 85.598916][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.603302][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 85.617966][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.625384][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.642911][ T3464] device veth0_vlan entered promiscuous mode [ 85.666577][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.682170][ T3503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3503 comm=syz-executor.3 [ 85.683624][ T3464] device veth1_macvtap entered promiscuous mode [ 85.718992][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.734865][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.743206][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.760435][ T497] device bridge_slave_1 left promiscuous mode [ 85.766661][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.774785][ T497] device bridge_slave_0 left promiscuous mode [ 85.781337][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.789609][ T497] device veth1_macvtap left promiscuous mode [ 85.792457][ T3518] serio: Serial port pts1 [ 85.795459][ T497] device veth0_vlan left promiscuous mode [ 85.812267][ T3520] serio: Serial port pts2 [ 85.998925][ T869] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 86.154717][ T3553] serio: Serial port pts1 [ 86.208943][ T869] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.217923][ T869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.226048][ T869] usb 3-1: Product: syz [ 86.229954][ T869] usb 3-1: Manufacturer: syz [ 86.234346][ T869] usb 3-1: SerialNumber: syz [ 86.258883][ T746] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.279301][ T869] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 86.379011][ T28] audit: type=1400 audit(1717975535.851:1110): avc: denied { read } for pid=3563 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.429475][ T28] audit: type=1400 audit(1717975535.901:1111): avc: denied { bind } for pid=3563 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.449027][ T28] audit: type=1400 audit(1717975535.901:1112): avc: denied { setopt } for pid=3563 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.479432][ T3567] loop0: detected capacity change from 0 to 128 [ 86.481450][ T869] usb 3-1: USB disconnect, device number 11 [ 86.486525][ T3567] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 86.501695][ T3567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.510024][ T746] usb 5-1: Using ep0 maxpacket: 32 [ 86.512068][ T3567] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 86.531144][ T3567] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0 [ 86.547090][ T1930] EXT4-fs (loop0): unmounting filesystem. [ 86.595717][ T3583] serio: Serial port pts1 [ 86.628919][ T746] usb 5-1: config 0 has no interfaces? [ 86.634253][ T746] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 86.643282][ T746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.651728][ T746] usb 5-1: config 0 descriptor?? [ 86.863441][ T3622] loop1: detected capacity change from 0 to 512 [ 86.872176][ T3622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 86.880347][ T3622] System zones: 1-12 [ 86.885187][ T3622] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.1: invalid block [ 86.897967][ T3622] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1) [ 86.912398][ T3622] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 86.927428][ T3622] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 86.936328][ T3622] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 86.950236][ T3622] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 86.967151][ T3622] EXT4-fs (loop1): 1 truncate cleaned up [ 86.972857][ T3622] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.982516][ T3622] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 87.000551][ T3637] selinux_netlink_send: 1 callbacks suppressed [ 87.000569][ T3637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3637 comm=syz-executor.0 [ 87.020326][ T948] EXT4-fs (loop1): unmounting filesystem. [ 87.050768][ T3649] serio: Serial port pts1 [ 87.104038][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 87.366772][ T3684] serio: Serial port pts1 [ 87.759037][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 87.759509][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.848447][ T3710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1550 sclass=netlink_audit_socket pid=3710 comm=syz-executor.3 [ 87.898990][ T346] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 87.998183][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.005265][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.012651][ T3715] device bridge_slave_0 entered promiscuous mode [ 88.019503][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.026372][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.033839][ T3715] device bridge_slave_1 entered promiscuous mode [ 88.095112][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.102068][ T3715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.109153][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.115983][ T3715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.140036][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.147256][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.148958][ T346] usb 2-1: Using ep0 maxpacket: 32 [ 88.172054][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.179440][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.186917][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.195117][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.203248][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.210112][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.217399][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.225624][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.233720][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.240561][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.247989][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.256073][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.267146][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.275111][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.282748][ T346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.293006][ T346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.304007][ T346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.313606][ T346] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 88.326461][ T346] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 88.335380][ T346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.344582][ T346] usb 2-1: config 0 descriptor?? [ 88.353017][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.361338][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.373294][ T3715] device veth0_vlan entered promiscuous mode [ 88.382390][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.390947][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.403828][ T3715] device veth1_macvtap entered promiscuous mode [ 88.410544][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.417843][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.425284][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.433268][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.441530][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.457670][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.465816][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.473955][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.482380][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.516989][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.589607][ T43] device bridge_slave_1 left promiscuous mode [ 88.595642][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.602867][ T43] device bridge_slave_0 left promiscuous mode [ 88.608982][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.616825][ T43] device veth1_macvtap left promiscuous mode [ 88.622699][ T43] device veth0_vlan left promiscuous mode [ 88.830362][ T346] hid-generic 0003:1B96:9F0A.0009: unknown main item tag 0x0 [ 88.840679][ T346] hid-generic 0003:1B96:9F0A.0009: unknown main item tag 0x0 [ 88.847912][ T346] hid-generic 0003:1B96:9F0A.0009: unknown main item tag 0x0 [ 88.858961][ T346] hid-generic 0003:1B96:9F0A.0009: unknown main item tag 0x0 [ 88.868274][ T346] hid-generic 0003:1B96:9F0A.0009: unknown main item tag 0x0 [ 88.876962][ T346] hid-generic 0003:1B96:9F0A.0009: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.1-1/input0 [ 88.994968][ T346] usb 5-1: USB disconnect, device number 4 [ 89.011882][ T3768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3768 comm=syz-executor.4 [ 89.100084][ T869] usb 2-1: USB disconnect, device number 9 [ 89.203243][ T3806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=3806 comm=syz-executor.2 [ 89.266678][ T3816] SELinux: Context system_u:object_r:gpg_helper_exec_t:s0 is not valid (left unmapped). [ 89.276620][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 89.276635][ T28] audit: type=1400 audit(1717975538.751:1119): avc: denied { relabelto } for pid=3815 comm="syz-executor.2" name="235" dev="sda1" ino=1936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_helper_exec_t:s0" [ 89.310492][ T28] audit: type=1400 audit(1717975538.751:1120): avc: denied { write } for pid=514 comm="syz-executor.2" name="235" dev="sda1" ino=1936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_helper_exec_t:s0" [ 89.337667][ T28] audit: type=1400 audit(1717975538.751:1121): avc: denied { remove_name } for pid=514 comm="syz-executor.2" name="cgroup.cpu" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_helper_exec_t:s0" [ 89.366636][ T28] audit: type=1400 audit(1717975538.751:1122): avc: denied { rmdir } for pid=514 comm="syz-executor.2" name="235" dev="sda1" ino=1936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_helper_exec_t:s0" [ 89.470063][ T3836] loop2: detected capacity change from 0 to 512 [ 89.533361][ T3850] loop0: detected capacity change from 0 to 2048 [ 89.545373][ T3852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3852 comm=syz-executor.2 [ 89.559321][ T3850] loop0: p1 < > p4 [ 89.564467][ T3850] loop0: p4 size 8388608 extends beyond EOD, truncated [ 89.609166][ T3850] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 89.619562][ T41] blk_print_req_error: 246 callbacks suppressed [ 89.619577][ T41] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.693934][ T3876] serio: Serial port pts1 [ 89.958901][ T746] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 90.348928][ T746] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 90.359471][ T746] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.372221][ T746] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.381146][ T746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.389582][ T746] usb 2-1: config 0 descriptor?? [ 90.429303][ T746] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 90.505920][ T28] audit: type=1400 audit(1717975539.971:1123): avc: denied { read } for pid=3896 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.558997][ T422] Bluetooth: hci0: command 0x1003 tx timeout [ 90.559052][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.725451][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.929605][ T3929] loop4: detected capacity change from 0 to 32768 [ 91.406721][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 92.272478][ T3968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=3968 comm=syz-executor.2 [ 92.418746][ T28] audit: type=1400 audit(1717975541.881:1124): avc: denied { ioctl } for pid=3987 comm="syz-executor.2" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.441547][ T4001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4001 comm=syz-executor.4 [ 92.491132][ T4011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4011 comm=syz-executor.2 [ 92.689789][ T314] usb 2-1: USB disconnect, device number 10 [ 92.798968][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.800272][ T422] Bluetooth: hci0: command 0x1003 tx timeout [ 92.822587][ T4061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4061 comm=syz-executor.4 [ 92.873254][ T4071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4071 comm=syz-executor.3 [ 92.957784][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.142761][ T4107] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.236852][ T4115] serio: Serial port pts1 [ 93.908162][ T28] audit: type=1400 audit(1717975543.371:1125): avc: denied { create } for pid=4126 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 94.004739][ T28] audit: type=1400 audit(1717975543.371:1126): avc: denied { read } for pid=4126 comm="syz-executor.2" name="file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 94.103015][ T28] audit: type=1400 audit(1717975543.371:1127): avc: denied { open } for pid=4126 comm="syz-executor.2" path="/root/syzkaller-testdir892585383/syzkaller.f4j2Hs/276/file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 94.248022][ T28] audit: type=1400 audit(1717975543.711:1128): avc: denied { remount } for pid=4147 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 94.282240][ T28] audit: type=1400 audit(1717975543.751:1129): avc: denied { bind } for pid=4149 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.583429][ T28] audit: type=1400 audit(1717975544.051:1130): avc: denied { unlink } for pid=514 comm="syz-executor.2" name="file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 94.968926][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.168709][ T4202] loop2: detected capacity change from 0 to 1024 [ 95.176683][ T4202] EXT4-fs: Ignoring removed orlov option [ 95.192221][ T4202] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.203294][ T4202] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 95.215778][ T4202] EXT4-fs (loop2): invalid journal inode [ 95.221465][ T4202] EXT4-fs (loop2): can't get journal size [ 95.228277][ T4202] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.244571][ T514] EXT4-fs (loop2): unmounting filesystem. [ 95.258590][ T28] audit: type=1400 audit(1717975544.721:1131): avc: denied { create } for pid=4209 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.676813][ T4253] tmpfs: Unknown parameter 'usrquota' [ 95.829845][ T28] audit: type=1400 audit(1717975545.291:1132): avc: denied { getopt } for pid=4270 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.590548][ T4446] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1001 sclass=netlink_xfrm_socket pid=4446 comm=syz-executor.0 [ 96.595669][ T4449] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=4449 comm=syz-executor.4 [ 96.617683][ T28] audit: type=1400 audit(1717975546.081:1133): avc: denied { create } for pid=4444 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.713745][ T28] audit: type=1400 audit(1717975546.181:1134): avc: denied { setattr } for pid=4478 comm="syz-executor.3" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.740671][ T4484] serio: Serial port pts0 [ 96.882354][ T4523] serio: Serial port pts1 [ 97.473773][ T28] audit: type=1400 audit(1717975546.941:1135): avc: denied { read } for pid=4546 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.539699][ T580] Bluetooth: hci0: sending frame failed (-49) [ 97.546024][ T422] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 97.802820][ T4558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4558 comm=syz-executor.0 [ 97.874088][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.411461][ T4603] can0: slcan on ptm3. [ 98.448981][ T4602] can0 (unregistered): slcan off ptm3. [ 99.104172][ T28] audit: type=1400 audit(1717975548.571:1136): avc: denied { sqpoll } for pid=4625 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.320715][ T4630] cgroup: Unknown subsys name 'devices' [ 99.423428][ T28] audit: type=1400 audit(1717975548.891:1137): avc: denied { getattr } for pid=4640 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.637655][ T4674] loop1: detected capacity change from 0 to 128 [ 99.644538][ T4674] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 99.655232][ T4674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.664624][ T4674] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 99.680173][ T4674] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 99.796172][ T4677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4677 comm=syz-executor.3 [ 99.912908][ T4689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=4689 comm=syz-executor.3 [ 99.925894][ T422] Bluetooth: hci0: command 0x1003 tx timeout [ 99.932008][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.968508][ T4703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4703 comm=syz-executor.4 [ 99.986002][ T4709] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4709 comm=syz-executor.3 [ 100.124697][ T4753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4753 comm=syz-executor.3 [ 100.137696][ T4753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4753 comm=syz-executor.3 [ 100.196566][ T948] EXT4-fs (loop1): unmounting filesystem. [ 100.235648][ T4776] loop1: detected capacity change from 0 to 1024 [ 100.244876][ T4776] EXT4-fs: Ignoring removed orlov option [ 100.251031][ T4776] EXT4-fs (loop1): Test dummy encryption mode enabled [ 100.257735][ T4776] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.269094][ T4776] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 100.280429][ T4776] EXT4-fs (loop1): invalid journal inode [ 100.285938][ T4776] EXT4-fs (loop1): can't get journal size [ 100.292618][ T4776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.309372][ T948] EXT4-fs (loop1): unmounting filesystem. [ 100.350403][ T4804] loop0: detected capacity change from 0 to 512 [ 100.358170][ T4804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 100.366593][ T4804] System zones: 1-12 [ 100.371606][ T28] audit: type=1400 audit(1717975549.841:1138): avc: denied { bind } for pid=4808 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.392248][ T4804] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.0: invalid block [ 100.405067][ T4804] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 100.421119][ T4804] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 100.424928][ T4814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4814 comm=syz-executor.3 [ 100.435934][ T28] audit: type=1400 audit(1717975549.841:1139): avc: denied { node_bind } for pid=4808 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 100.449400][ T4804] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 100.482389][ T4804] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 100.505600][ T4804] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 100.526521][ T4804] EXT4-fs (loop0): 1 truncate cleaned up [ 100.534878][ T4804] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.546294][ T4825] loop4: detected capacity change from 0 to 128 [ 100.548414][ T4804] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz-executor.0: Directory hole found for htree index block [ 100.569983][ T4825] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 100.581449][ T1930] EXT4-fs (loop0): unmounting filesystem. [ 100.588270][ T4825] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.597992][ T4825] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 100.613731][ T4825] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 100.632134][ T3464] EXT4-fs (loop4): unmounting filesystem. [ 100.650800][ T4841] serio: Serial port pts0 [ 100.707089][ T28] audit: type=1400 audit(1717975550.171:1140): avc: denied { getopt } for pid=4861 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 100.735900][ T4866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4866 comm=syz-executor.1 [ 101.213426][ T4935] input: syz0 as /devices/virtual/input/input8 [ 101.220477][ T28] audit: type=1400 audit(1717975550.691:1141): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=414 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.231431][ T4938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4938 comm=syz-executor.1 [ 101.243263][ T28] audit: type=1400 audit(1717975550.691:1142): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=414 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.279338][ T28] audit: type=1400 audit(1717975550.691:1143): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=414 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.435102][ T4958] loop1: detected capacity change from 0 to 2048 [ 101.459258][ T4958] loop1: p1 p3 p4 [ 101.464208][ T4958] loop1: p4 size 8388608 extends beyond EOD, truncated [ 101.509193][ T4958] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 101.510242][ T4965] loop2: detected capacity change from 0 to 2048 [ 101.566101][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.584819][ T514] EXT4-fs (loop2): unmounting filesystem. [ 101.604140][ T4978] loop2: detected capacity change from 0 to 128 [ 101.617648][ T4978] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 101.639648][ T4978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.653994][ T4978] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 101.671547][ T4978] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz-executor.2: checksumming directory block 0 [ 101.697523][ T514] EXT4-fs (loop2): unmounting filesystem. [ 101.728720][ T4992] loop3: detected capacity change from 0 to 2048 [ 101.741211][ T4992] loop3: p1 p3 p4 [ 101.745850][ T4992] loop3: p4 size 8388608 extends beyond EOD, truncated [ 101.799286][ T4992] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 102.145221][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 102.250378][ T380] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.787253][ T28] audit: type=1400 audit(1717975552.251:1144): avc: denied { mounton } for pid=5122 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 102.831746][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.838617][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.845995][ T5122] device bridge_slave_0 entered promiscuous mode [ 102.857392][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.864261][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.871476][ T5122] device bridge_slave_1 entered promiscuous mode [ 102.925252][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.932202][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.939286][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.946070][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.970777][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.978415][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.985964][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.001936][ T5127] loop3: detected capacity change from 0 to 2048 [ 103.020609][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.028603][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.035468][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.043082][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.051254][ T5127] loop3: p1 p3 p4 [ 103.055209][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.056039][ T5127] loop3: p4 size 8388608 extends beyond EOD, [ 103.062066][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.062272][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.083234][ T5127] truncated [ 103.083905][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.110676][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.124653][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.132758][ T5127] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 103.140316][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.147646][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.158069][ T5139] selinux_netlink_send: 7 callbacks suppressed [ 103.158090][ T5139] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5139 comm=syz-executor.2 [ 103.163462][ T5122] device veth0_vlan entered promiscuous mode [ 103.205294][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.218036][ T5122] device veth1_macvtap entered promiscuous mode [ 103.242743][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.258204][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.301457][ T5163] loop3: detected capacity change from 0 to 2048 [ 103.314754][ T5169] loop0: detected capacity change from 0 to 1024 [ 103.322397][ T5169] EXT4-fs: Ignoring removed orlov option [ 103.328231][ T5169] EXT4-fs (loop0): Test dummy encryption mode enabled [ 103.335912][ T5163] loop3: p1 p3 p4 [ 103.339969][ T5169] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.345104][ T5163] loop3: p4 size 8388608 extends beyond EOD, [ 103.350702][ T5169] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 103.350787][ T5163] truncated [ 103.357872][ T5169] EXT4-fs (loop0): invalid journal inode [ 103.379758][ T5169] EXT4-fs (loop0): can't get journal size [ 103.386629][ T5169] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.404106][ T5122] EXT4-fs (loop0): unmounting filesystem. [ 103.410499][ T5163] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 103.419441][ T43] device bridge_slave_1 left promiscuous mode [ 103.427174][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.436539][ T43] device bridge_slave_0 left promiscuous mode [ 103.446297][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.458647][ T43] device veth1_macvtap left promiscuous mode [ 103.466887][ T43] device veth0_vlan left promiscuous mode [ 103.469611][ T5190] loop2: detected capacity change from 0 to 1024 [ 103.485580][ T28] audit: type=1400 audit(1717975552.951:1145): avc: denied { map } for pid=5195 comm="syz-executor.3" path="socket:[32251]" dev="sockfs" ino=32251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 103.493286][ T5190] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.528032][ T514] EXT4-fs (loop2): unmounting filesystem. [ 103.559017][ T28] audit: type=1400 audit(1717975553.031:1146): avc: denied { map } for pid=5203 comm="syz-executor.2" path="socket:[33270]" dev="sockfs" ino=33270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 103.697274][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 104.008874][ T531] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.258814][ T531] usb 1-1: Using ep0 maxpacket: 8 [ 104.319602][ T422] Bluetooth: hci0: command 0x1003 tx timeout [ 104.325594][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.379008][ T531] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 104.387098][ T531] usb 1-1: config 179 has no interface number 0 [ 104.396102][ T531] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 104.407177][ T531] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 104.422108][ T531] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.434111][ T531] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 104.445433][ T531] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.462880][ T531] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 104.471766][ T5251] loop1: detected capacity change from 0 to 128 [ 104.471843][ T531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.486301][ T5251] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 104.497460][ T5251] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.508123][ T5251] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 104.508979][ T5232] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.531115][ T5251] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 104.555400][ T380] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.566185][ T948] EXT4-fs (loop1): unmounting filesystem. [ 104.608376][ T28] audit: type=1400 audit(1717975554.071:1147): avc: denied { remount } for pid=5275 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 104.641672][ T28] audit: type=1400 audit(1717975554.081:1148): avc: denied { setattr } for pid=5273 comm="syz-executor.4" name="" dev="pipefs" ino=26917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 104.676637][ T5291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5291 comm=syz-executor.4 [ 104.720023][ T5306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5306 comm=syz-executor.4 [ 104.759647][ T531] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10 [ 105.153547][ T347] usb 1-1: USB disconnect, device number 3 [ 105.168860][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 105.176995][ T347] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 105.750751][ T28] audit: type=1400 audit(1717975555.221:1149): avc: denied { create } for pid=5377 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.848071][ T28] audit: type=1400 audit(1717975555.311:1150): avc: denied { unmount } for pid=5122 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.895453][ T5408] loop0: detected capacity change from 0 to 512 [ 105.909262][ T5408] EXT4-fs (loop0): filesystem is read-only [ 105.923724][ T5408] EXT4-fs (loop0): filesystem is read-only [ 105.941512][ T5408] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.951091][ T5408] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 16 [ 105.975845][ T5408] ext4_test_bit(bit=15, block=3) = 0 [ 105.986035][ T5408] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.995540][ T5408] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 3: comm syz-executor.0: lblock 0 mapped to illegal pblock 3 (length 1) [ 106.026182][ T5122] EXT4-fs (loop0): unmounting filesystem. [ 106.093168][ T5452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5452 comm=syz-executor.1 [ 106.117712][ T5457] loop2: detected capacity change from 0 to 512 [ 106.142267][ T5457] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 106.150269][ T5457] System zones: 0-5 [ 106.169199][ T5457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.183137][ T5457] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 106.208710][ T514] EXT4-fs (loop2): unmounting filesystem. [ 106.559018][ T422] Bluetooth: hci0: command 0x1003 tx timeout [ 106.565400][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.630898][ T28] audit: type=1400 audit(1717975556.101:1151): avc: denied { watch watch_reads } for pid=5515 comm="syz-executor.2" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 106.653848][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 107.096569][ T5579] mmap: syz-executor.1 (5579) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.164498][ T5598] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5598 comm=syz-executor.1 [ 107.371088][ T28] audit: type=1400 audit(1717975556.841:1152): avc: denied { write } for pid=5646 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.498894][ T531] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 107.530864][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.537708][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.545040][ T5655] device bridge_slave_0 entered promiscuous mode [ 107.552267][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.559178][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.566337][ T5655] device bridge_slave_1 entered promiscuous mode [ 107.621961][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.628851][ T5655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.635904][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.642706][ T5655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.666602][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.674103][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.681991][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.703789][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.711889][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.718726][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.726001][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.734066][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.740909][ T746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.748822][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.756649][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.769312][ T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.780648][ T5655] device veth0_vlan entered promiscuous mode [ 107.788971][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.796776][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.804070][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.815280][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.824295][ T5655] device veth1_macvtap entered promiscuous mode [ 107.837548][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.846224][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.870686][ T5663] input: syz0 as /devices/virtual/input/input12 [ 107.898888][ T531] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.920717][ T531] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 108.025601][ T5705] loop4: detected capacity change from 0 to 128 [ 108.032951][ T5705] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 108.043549][ T5705] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.052998][ T5705] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 108.068877][ T5705] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 108.086859][ T5655] EXT4-fs (loop4): unmounting filesystem. [ 108.098915][ T531] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.107901][ T531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.113215][ T5710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1546 sclass=netlink_audit_socket pid=5710 comm=syz-executor.4 [ 108.115734][ T531] usb 2-1: Product: syz [ 108.115753][ T531] usb 2-1: Manufacturer: syz [ 108.136938][ T531] usb 2-1: SerialNumber: syz [ 108.370215][ T43] device bridge_slave_1 left promiscuous mode [ 108.376185][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.383755][ T43] device bridge_slave_0 left promiscuous mode [ 108.383946][ T5613] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.389738][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.404887][ T43] device veth1_macvtap left promiscuous mode [ 108.410813][ T43] device veth0_vlan left promiscuous mode [ 108.555557][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.562903][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.570136][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.577323][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.585141][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.592397][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.599630][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.607063][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.614561][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.621911][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.629133][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.636310][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.643803][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.651021][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.658304][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.665611][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.672948][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.680169][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.687417][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.694679][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.701862][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.709061][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.716233][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.723666][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.730905][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.738180][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.745431][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.752604][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.759968][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.767484][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.774730][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.782038][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.789242][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.796421][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.803862][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.817444][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.825185][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.836819][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.844842][ T5779] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5779 comm=syz-executor.2 [ 108.851351][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.871697][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.879102][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.895966][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.908713][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.915985][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.918141][ T5789] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5789 comm=syz-executor.0 [ 108.923614][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.944109][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.955539][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.964532][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.973445][ T5797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5797 comm=syz-executor.0 [ 108.980060][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.002740][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.010169][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.019230][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.024845][ T5613] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.032449][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.051008][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.061866][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.077237][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.089160][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.096456][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.105967][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.116122][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.125132][ T28] audit: type=1400 audit(1717975558.591:1153): avc: denied { create } for pid=5828 comm="syz-executor.0" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 109.128262][ T5830] loop2: detected capacity change from 0 to 512 [ 109.146273][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.159726][ T28] audit: type=1400 audit(1717975558.591:1154): avc: denied { rename } for pid=5828 comm="syz-executor.0" name="file1" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 109.171528][ T5830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 109.182423][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.197254][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.197546][ T5830] System zones: 1-12 [ 109.208550][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.216064][ T28] audit: type=1400 audit(1717975558.681:1155): avc: denied { ioctl } for pid=5835 comm="syz-executor.0" path="socket:[34485]" dev="sockfs" ino=34485 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.242013][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.249467][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.256837][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.264300][ T28] audit: type=1400 audit(1717975558.681:1156): avc: denied { write } for pid=5838 comm="syz-executor.0" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.268205][ T5830] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.2: invalid block [ 109.291053][ T531] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 109.301634][ T5830] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 1) [ 109.311511][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.321683][ T5830] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 361: padding at end of block bitmap is not set [ 109.329760][ T531] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 109.343120][ T5830] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 109.352449][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.359039][ T5830] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz-executor.2: attempt to clear invalid blocks 33619980 len 1 [ 109.378418][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.379574][ T5830] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 0) [ 109.391913][ T531] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 109.406135][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.410491][ T5830] EXT4-fs (loop2): 1 truncate cleaned up [ 109.413818][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.426307][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.428829][ T5830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.434046][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.449286][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.456632][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.464006][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.465250][ T5830] EXT4-fs error (device loop2): dx_probe:822: inode #2: comm syz-executor.2: Directory hole found for htree index block [ 109.471677][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.491310][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.498561][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.505797][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.513057][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.521269][ T514] EXT4-fs (loop2): unmounting filesystem. [ 109.528887][ T531] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 109.536071][ T531] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 109.546849][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.554091][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.563098][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.570450][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.577613][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.584834][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.592077][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.599531][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.606686][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.613940][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.621110][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.628292][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.635537][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.642719][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.650038][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.657201][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.664420][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.671703][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.678995][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.686194][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.693433][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.700642][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.707804][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.715066][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.722318][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.729509][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.731924][ T315] usb 2-1: USB disconnect, device number 11 [ 109.736709][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.736738][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.748331][ T315] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 109.749653][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.773134][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.780433][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.787618][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.794839][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.802056][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.809353][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.816533][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.824306][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.831620][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.838911][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.846096][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.853327][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.860554][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.867820][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.875143][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.882329][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.889546][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.896760][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.904043][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.919087][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.926463][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.933825][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.943924][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.955601][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.963293][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.970625][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.982969][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.990830][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.998379][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.005730][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.016311][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.027666][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.035101][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.042402][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.049985][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.059392][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.067135][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.074404][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.080921][ C0] ================================================================== [ 110.081748][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.089419][ C0] BUG: KASAN: use-after-free in __list_add_valid+0x6a/0xf0 [ 110.100157][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.103654][ C0] Read of size 8 at addr ffff888119598ce8 by task kworker/0:3/315 [ 110.110897][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.118493][ C0] [ 110.118502][ C0] CPU: 0 PID: 315 Comm: kworker/0:3 Not tainted 6.1.78-syzkaller-00164-gac9706483e98 #0 [ 110.125739][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.127866][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 110.137526][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 110.137540][ T28] audit: type=1400 audit(1717975559.551:1158): avc: denied { setattr } for pid=5855 comm="syz-executor.3" name="NFC_LLCP" dev="sockfs" ino=35592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.144625][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 110.154832][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.160527][ C0] [ 110.160544][ C0] Call Trace: [ 110.160552][ C0] [ 110.160561][ C0] dump_stack_lvl+0x151/0x1b7 [ 110.184060][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.190993][ C0] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 110.191019][ C0] ? _printk+0xd1/0x111 [ 110.191046][ C0] ? __virt_addr_valid+0x242/0x2f0 [ 110.198360][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.200545][ C0] print_report+0x158/0x4e0 [ 110.203715][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.206472][ C0] ? __virt_addr_valid+0x242/0x2f0 [ 110.211021][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.218371][ C0] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 110.223866][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.227863][ C0] ? __list_add_valid+0x6a/0xf0 [ 110.227894][ C0] kasan_report+0x13c/0x170 [ 110.232854][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.240072][ C0] ? __list_add_valid+0x6a/0xf0 [ 110.240101][ C0] ? __virt_addr_valid+0xc3/0x2f0 [ 110.240131][ C0] __asan_report_load8_noabort+0x14/0x20 [ 110.240163][ C0] __list_add_valid+0x6a/0xf0 [ 110.253251][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.256564][ C0] insert_work+0x104/0x310 [ 110.276077][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.277711][ C0] __queue_work+0x9b6/0xd70 [ 110.288882][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.293943][ C0] queue_work_on+0x105/0x170 [ 110.298641][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.303531][ C0] ? __kasan_check_write+0x14/0x20 [ 110.303555][ C0] ? wq_worker_last_func+0x50/0x50 [ 110.328825][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.332128][ C0] ? _find_next_bit+0x88/0x130 [ 110.336478][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.343681][ C0] wg_packet_receive+0xd8d/0x2010 [ 110.343708][ C0] ? wg_packet_decrypt_worker+0xda0/0xda0 [ 110.363866][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.365412][ C0] ? wg_socket_init+0xcd0/0xcd0 [ 110.380338][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.384418][ C0] wg_receive+0x75/0xa0 [ 110.398828][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.402122][ C0] udp_queue_rcv_one_skb+0x1481/0x1630 [ 110.406828][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.414012][ C0] udp_queue_rcv_skb+0x49b/0x5a0 [ 110.437492][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.437798][ C0] udp_unicast_rcv_skb+0x215/0x360 [ 110.448067][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.449773][ C0] __udp4_lib_rcv+0x10a8/0x1f00 [ 110.454735][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.461926][ C0] udp_rcv+0x21/0x30 [ 110.475913][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.477551][ C0] ip_protocol_deliver_rcu+0x32f/0x720 [ 110.490139][ C0] ip_local_deliver_finish+0x24b/0x430 [ 110.495432][ C0] ip_local_deliver+0x1b3/0x3b0 [ 110.496292][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.500113][ C0] ? ip_protocol_deliver_rcu+0x720/0x720 [ 110.508083][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 110.512962][ C0] ? ip_local_deliver+0x3b0/0x3b0 [ 110.524991][ C0] ? ip_rcv_finish_core+0xb40/0x14d0 [ 110.530119][ C0] ip_rcv+0x16e/0x310 [ 110.533927][ C0] ? ip_local_deliver_finish+0x430/0x430 [ 110.539391][ C0] ? ip_rcv_core+0xba0/0xba0 [ 110.543816][ C0] ? __kasan_check_read+0x11/0x20 [ 110.548684][ C0] ? ip_local_deliver_finish+0x430/0x430 [ 110.554145][ C0] __netif_receive_skb+0x1c6/0x530 [ 110.559094][ C0] ? ttwu_do_activate+0x17c/0x290 [ 110.563954][ C0] ? __netif_receive_skb_list_core+0x890/0x890 [ 110.569945][ C0] ? __kasan_check_write+0x14/0x20 [ 110.574890][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 110.579836][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 110.585226][ C0] ? cpu_curr_snapshot+0x90/0x90 [ 110.589994][ C0] process_backlog+0x32c/0x630 [ 110.594606][ C0] __napi_poll+0xbe/0x5c0 [ 110.598787][ C0] net_rx_action+0x595/0xdd0 [ 110.603372][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 110.608392][ C0] ? net_tx_action+0x560/0x560 [ 110.612995][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 110.617767][ C0] ? irqtime_account_irq+0x79/0x260 [ 110.622799][ C0] __do_softirq+0x1d8/0x661 [ 110.627226][ C0] do_softirq+0xf6/0x150 [ 110.631302][ C0] [ 110.634080][ C0] [ 110.636858][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 110.641892][ C0] __local_bh_enable_ip+0x75/0x80 [ 110.646845][ C0] _raw_read_unlock_bh+0x29/0x30 [ 110.651622][ C0] wg_socket_send_skb_to_peer+0x178/0x1d0 [ 110.657194][ C0] wg_socket_send_buffer_to_peer+0x11a/0x170 [ 110.663000][ C0] wg_packet_send_handshake_response+0x190/0x1f0 [ 110.669162][ C0] ? wg_packet_send_queued_handshake_initiation+0x250/0x250 [ 110.676278][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xc5/0x120 [ 110.682788][ C0] wg_packet_handshake_receive_worker+0x566/0xa00 [ 110.689035][ C0] process_one_work+0x73d/0xcb0 [ 110.693722][ C0] worker_thread+0xa60/0x1260 [ 110.698237][ C0] kthread+0x26d/0x300 [ 110.702143][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 110.706996][ C0] ? kthread_blkcg+0xd0/0xd0 [ 110.711422][ C0] ret_from_fork+0x1f/0x30 [ 110.715676][ C0] [ 110.718624][ C0] [ 110.720799][ C0] Allocated by task 531: [ 110.724876][ C0] kasan_set_track+0x4b/0x70 [ 110.729299][ C0] kasan_save_alloc_info+0x1f/0x30 [ 110.734246][ C0] __kasan_kmalloc+0x9c/0xb0 [ 110.738673][ C0] __kmalloc_node+0xb4/0x1e0 [ 110.743098][ C0] kvmalloc_node+0x221/0x640 [ 110.747524][ C0] alloc_netdev_mqs+0x8c/0xf90 [ 110.752128][ C0] alloc_etherdev_mqs+0x36/0x40 [ 110.756813][ C0] usbnet_probe+0x207/0x27c0 [ 110.761337][ C0] usb_probe_interface+0x5b6/0xa90 [ 110.766272][ C0] really_probe+0x2b8/0x920 [ 110.770611][ C0] __driver_probe_device+0x1a0/0x310 [ 110.775732][ C0] driver_probe_device+0x54/0x3d0 [ 110.780593][ C0] __device_attach_driver+0x2e3/0x490 [ 110.785800][ C0] bus_for_each_drv+0x183/0x200 [ 110.790488][ C0] __device_attach+0x312/0x510 [ 110.795090][ C0] device_initial_probe+0x1a/0x20 [ 110.799954][ C0] bus_probe_device+0xbe/0x1e0 [ 110.804546][ C0] device_add+0xb60/0xf10 [ 110.808734][ C0] usb_set_configuration+0x190f/0x1e80 [ 110.814094][ C0] usb_generic_driver_probe+0x8b/0x150 [ 110.819390][ C0] usb_probe_device+0x144/0x260 [ 110.824083][ C0] really_probe+0x2b8/0x920 [ 110.828421][ C0] __driver_probe_device+0x1a0/0x310 [ 110.833539][ C0] driver_probe_device+0x54/0x3d0 [ 110.838396][ C0] __device_attach_driver+0x2e3/0x490 [ 110.843605][ C0] bus_for_each_drv+0x183/0x200 [ 110.848294][ C0] __device_attach+0x312/0x510 [ 110.852891][ C0] device_initial_probe+0x1a/0x20 [ 110.857752][ C0] bus_probe_device+0xbe/0x1e0 [ 110.862438][ C0] device_add+0xb60/0xf10 [ 110.866606][ C0] usb_new_device+0xf32/0x1810 [ 110.871219][ C0] hub_event+0x2db1/0x4830 [ 110.875465][ C0] process_one_work+0x73d/0xcb0 [ 110.880155][ C0] worker_thread+0xa60/0x1260 [ 110.884665][ C0] kthread+0x26d/0x300 [ 110.888563][ C0] ret_from_fork+0x1f/0x30 [ 110.892825][ C0] [ 110.895008][ C0] Freed by task 315: [ 110.898720][ C0] kasan_set_track+0x4b/0x70 [ 110.903276][ C0] kasan_save_free_info+0x2b/0x40 [ 110.908132][ C0] ____kasan_slab_free+0x131/0x180 [ 110.913075][ C0] __kasan_slab_free+0x11/0x20 [ 110.917670][ C0] __kmem_cache_free+0x218/0x3b0 [ 110.922443][ C0] kfree+0x7a/0xf0 [ 110.926004][ C0] kvfree+0x35/0x40 [ 110.929684][ C0] netdev_freemem+0x3f/0x60 [ 110.933987][ C0] netdev_release+0x7f/0xb0 [ 110.938414][ C0] device_release+0x95/0x1c0 [ 110.942846][ C0] kobject_put+0x178/0x260 [ 110.947093][ C0] put_device+0x1f/0x30 [ 110.951105][ C0] free_netdev+0x393/0x480 [ 110.955336][ C0] usbnet_disconnect+0x245/0x390 [ 110.960111][ C0] usb_unbind_interface+0x1fa/0x8c0 [ 110.965142][ C0] device_release_driver_internal+0x53e/0x870 [ 110.971047][ C0] device_release_driver+0x19/0x20 [ 110.975992][ C0] bus_remove_device+0x2fa/0x360 [ 110.980768][ C0] device_del+0x663/0xe90 [ 110.984932][ C0] usb_disable_device+0x380/0x720 [ 110.989791][ C0] usb_disconnect+0x32a/0x890 [ 110.994306][ C0] hub_event+0x1ed8/0x4830 [ 110.998562][ C0] process_one_work+0x73d/0xcb0 [ 111.003245][ C0] worker_thread+0xa60/0x1260 [ 111.007761][ C0] kthread+0x26d/0x300 [ 111.011663][ C0] ret_from_fork+0x1f/0x30 [ 111.015923][ C0] [ 111.018087][ C0] Last potentially related work creation: [ 111.023665][ C0] kasan_save_stack+0x3b/0x60 [ 111.028155][ C0] __kasan_record_aux_stack+0xb4/0xc0 [ 111.033364][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 111.039008][ C0] insert_work+0x56/0x310 [ 111.043281][ C0] __queue_work+0x9b6/0xd70 [ 111.047614][ C0] queue_work_on+0x105/0x170 [ 111.052040][ C0] usbnet_link_change+0xeb/0x100 [ 111.056820][ C0] usbnet_probe+0x1dbe/0x27c0 [ 111.061324][ C0] usb_probe_interface+0x5b6/0xa90 [ 111.066359][ C0] really_probe+0x2b8/0x920 [ 111.070698][ C0] __driver_probe_device+0x1a0/0x310 [ 111.075822][ C0] driver_probe_device+0x54/0x3d0 [ 111.080679][ C0] __device_attach_driver+0x2e3/0x490 [ 111.085888][ C0] bus_for_each_drv+0x183/0x200 [ 111.090574][ C0] __device_attach+0x312/0x510 [ 111.095175][ C0] device_initial_probe+0x1a/0x20 [ 111.100309][ C0] bus_probe_device+0xbe/0x1e0 [ 111.105347][ C0] device_add+0xb60/0xf10 [ 111.109510][ C0] usb_set_configuration+0x190f/0x1e80 [ 111.114803][ C0] usb_generic_driver_probe+0x8b/0x150 [ 111.120319][ C0] usb_probe_device+0x144/0x260 [ 111.125001][ C0] really_probe+0x2b8/0x920 [ 111.129336][ C0] __driver_probe_device+0x1a0/0x310 [ 111.134458][ C0] driver_probe_device+0x54/0x3d0 [ 111.139319][ C0] __device_attach_driver+0x2e3/0x490 [ 111.144528][ C0] bus_for_each_drv+0x183/0x200 [ 111.149213][ C0] __device_attach+0x312/0x510 [ 111.153898][ C0] device_initial_probe+0x1a/0x20 [ 111.158764][ C0] bus_probe_device+0xbe/0x1e0 [ 111.163364][ C0] device_add+0xb60/0xf10 [ 111.167525][ C0] usb_new_device+0xf32/0x1810 [ 111.172127][ C0] hub_event+0x2db1/0x4830 [ 111.176379][ C0] process_one_work+0x73d/0xcb0 [ 111.181064][ C0] worker_thread+0xa60/0x1260 [ 111.185576][ C0] kthread+0x26d/0x300 [ 111.189485][ C0] ret_from_fork+0x1f/0x30 [ 111.193736][ C0] [ 111.195907][ C0] The buggy address belongs to the object at ffff888119598000 [ 111.195907][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 111.209792][ C0] The buggy address is located 3304 bytes inside of [ 111.209792][ C0] 4096-byte region [ffff888119598000, ffff888119599000) [ 111.223070][ C0] [ 111.225241][ C0] The buggy address belongs to the physical page: [ 111.231499][ C0] page:ffffea0004656600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119598 [ 111.241557][ C0] head:ffffea0004656600 order:3 compound_mapcount:0 compound_pincount:0 [ 111.249717][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 111.255626][ C0] raw: 4000000000010200 ffffea0004c25400 dead000000000002 ffff888100043380 [ 111.264060][ C0] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 111.272671][ C0] page dumped because: kasan: bad access detected [ 111.278898][ C0] page_owner tracks the page as allocated [ 111.284444][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3464, tgid 3464 (syz-executor.4), ts 85384491282, free_ts 85380050400 [ 111.307305][ C0] post_alloc_hook+0x213/0x220 [ 111.311902][ C0] prep_new_page+0x1b/0x110 [ 111.316258][ C0] get_page_from_freelist+0x27ea/0x2870 [ 111.321614][ C0] __alloc_pages+0x3a1/0x780 [ 111.326049][ C0] alloc_slab_page+0x6c/0xf0 [ 111.330470][ C0] new_slab+0x90/0x3e0 [ 111.334370][ C0] ___slab_alloc+0x6f9/0xb80 [ 111.338798][ C0] __slab_alloc+0x5d/0xa0 [ 111.342962][ C0] __kmem_cache_alloc_node+0x1af/0x250 [ 111.348258][ C0] kmalloc_trace+0x2a/0xa0 [ 111.352514][ C0] register_vlan_dev+0x238/0x5e0 [ 111.357287][ C0] vlan_newlink+0x45c/0x5a0 [ 111.361625][ C0] rtnl_newlink+0x14c6/0x2030 [ 111.366136][ C0] rtnetlink_rcv_msg+0x9a5/0xca0 [ 111.370910][ C0] netlink_rcv_skb+0x1cd/0x410 [ 111.375512][ C0] rtnetlink_rcv+0x1c/0x20 [ 111.379762][ C0] page last free stack trace: [ 111.384276][ C0] free_unref_page_prepare+0x83d/0x850 [ 111.389570][ C0] free_unref_page+0xb2/0x5c0 [ 111.394082][ C0] __free_pages+0x61/0xf0 [ 111.398250][ C0] __free_slab+0xce/0x1a0 [ 111.402416][ C0] __unfreeze_partials+0x165/0x1a0 [ 111.407365][ C0] put_cpu_partial+0xa9/0x100 [ 111.411875][ C0] __slab_free+0x1c8/0x280 [ 111.416128][ C0] ___cache_free+0xc6/0xd0 [ 111.420382][ C0] qlist_free_all+0xc5/0x140 [ 111.424806][ C0] kasan_quarantine_reduce+0x15a/0x180 [ 111.430100][ C0] __kasan_slab_alloc+0x24/0x80 [ 111.434788][ C0] slab_post_alloc_hook+0x53/0x2c0 [ 111.439735][ C0] __kmem_cache_alloc_node+0x191/0x250 [ 111.445029][ C0] kmalloc_trace+0x2a/0xa0 [ 111.449283][ C0] ref_tracker_alloc+0x138/0x450 [ 111.454054][ C0] net_rx_queue_update_kobjects+0x14d/0x4a0 [ 111.459784][ C0] [ 111.461958][ C0] Memory state around the buggy address: [ 111.467428][ C0] ffff888119598b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.475325][ C0] ffff888119598c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.483222][ C0] >ffff888119598c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.491116][ C0] ^ [ 111.498410][ C0] ffff888119598d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.506310][ C0] ffff888119598d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.514214][ C0] ================================================================== 2024/06/09 23:26:01 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 111.522106][ C0] Disabling lock debugging due to kernel taint [ 111.563057][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.588863][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.596092][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.618858][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.626092][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.633688][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.640965][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.648163][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.655385][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.662559][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.669764][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.676954][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.684586][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.691859][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.699030][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.706319][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.713569][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.720748][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.727932][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.735175][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.742338][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.749702][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.757073][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.764319][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.771497][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.778663][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.785860][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.793064][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.800259][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.807449][ T333] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 111.814822][ T333] hid-generic 0000:0000:0000.000A: unk