last executing test programs: 58.171491159s ago: executing program 1 (id=158): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@checkpoint_diasble}, {@data_flush}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x162) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file2\x00', 0x81c0, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 57.461332129s ago: executing program 1 (id=172): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 56.778973089s ago: executing program 1 (id=192): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 56.533992612s ago: executing program 1 (id=186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100) fallocate(r0, 0x3, 0x0, 0x8000c62) 56.064705679s ago: executing program 1 (id=198): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x400) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x167) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x0, 0x0, 0x9, 0x3}) 55.835738152s ago: executing program 1 (id=208): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)) 55.799682173s ago: executing program 32 (id=208): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)) 2.662405231s ago: executing program 5 (id=2163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 2.563809643s ago: executing program 5 (id=2165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$eJzs3M9rHGUYB/Bn2/wyNdmotdqC9EUvehmbHDx5CZKCdEFpm0IrCFMz0WU3uyGzBLaI7c2rf4d49CaI/0AuXjwL3nLx2IM40p1gTUiRFNrdhs/nsg8775d9ZncZ2OF9dv/D77Y6m2W2mQ/iTKMRU9sR6WGKFGfibNQexHu3fvv9rRu371xbbbXWrqd0dfXm8gcppcXLP3/29Q9v/zI4d+vHxZ9mY2/p8/0/V/7Yu7B3cf/vm1+1y9QuU68/SHm62+8P8rvdIm20y06W0qfdIi+L1O6Vxc6h45vd/vb2MOW9jYX57Z2iLFPeG6ZOMUyDfhrsDFP+Zd7upSzL0sJ88PRmYv37h1VVRVTVdMxEVVXVSzEf5+LlWIjFaMbSdMSr8Vqcj9fjQrwRb8bF0apxdw4AAAAAAAAAAAAAAAAAAACny//M/8cr5v8BAAAAAAAAAAAAAAAAAADgmTP/DwAAAAAAAAAAAAAAAAAAAONn/h8AAAAAAAAAAAAAAAAAAADG78btO9dWW6216ynNRWx9u7u+u14/1sdXN6Md3SjiSjTjrxhN/9fq+urHrbUraWQp3t+6f5C/v7t+9nB+efR3Asfml+t8Opyfjfn/5leiGeePz68cm5+Ld9+p841H+Sya8esX0Y9ubMSj7OP8N8spffRJ60j+0mgdAAAAnAZZ+texv9+zLDUa9dIjx+snn3x/oGoeuT/QOJyfiktTYzxxRsrhvU7e7RY7L1Zx8JWMe5388iT08+Ri5qDTSelnAoqDd+TBpPTzghbTEfEMX+LIhWIuImaf44WJ5+Lxhz7uTgAAAAAAAAAAADiJE2wMnKr32558O+G4zxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAfduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcFQAA//8my+RP") unlink(&(0x7f0000000040)='./file2\x00') 2.439839185s ago: executing program 5 (id=2171): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001880)={[{@delalloc}, {@data_err_abort}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x141042, 0xa9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x8, 0xb, 0x7, 0x3, 0x6}) fallocate(r0, 0x1, 0xffc, 0x1) 2.235792028s ago: executing program 5 (id=2175): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 2.212128058s ago: executing program 5 (id=2176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x1, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x201000003, 0x0, 0x8, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x48, 0x0, 0x2, r2, 0x3}) 2.183189369s ago: executing program 5 (id=2177): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0xfffd, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.06380634s ago: executing program 0 (id=2178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.06351531s ago: executing program 0 (id=2179): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b45"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x3, 0x200, 0x0, 0x310b, 0x5, 0x1}) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 1.215803773s ago: executing program 3 (id=2199): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) utimes(0x0, 0x0) 1.159616963s ago: executing program 3 (id=2201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1.151189653s ago: executing program 3 (id=2204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.059804985s ago: executing program 3 (id=2206): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000400)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 1.059179805s ago: executing program 3 (id=2208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1.045384275s ago: executing program 3 (id=2209): getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a9000070600000083"], 0x0}, 0x0) 588.249661ms ago: executing program 4 (id=2211): unshare(0x22000400) ioperm(0x0, 0x7c9, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sync_file_range(r0, 0x6, 0x1, 0x1) 573.114901ms ago: executing program 4 (id=2212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 572.581481ms ago: executing program 2 (id=2213): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x14000000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) lstat(0x0, 0x0) 548.487212ms ago: executing program 4 (id=2214): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000080)=0x9, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 414.937074ms ago: executing program 4 (id=2215): ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={0x5, 0x7fffffff, 0x2, 0x4, 0x3, 0x0, [{0xbc, 0x803, 0x40, '\x00', 0x4}, {0x800, 0x5, 0xfffffffffffffffe, '\x00', 0x100}, {0xa97, 0xfffffffffffffefe, 0x5e, '\x00', 0x400}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001"]) 414.195744ms ago: executing program 2 (id=2216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000140)="aa", &(0x7f0000000000)=@tcp6=r1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f00000003c0)=@udp6=r3, 0x1}, 0x20) 402.781104ms ago: executing program 2 (id=2217): syz_io_uring_complete(0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x25, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}, "d889e52303"}}}}}}, 0x0) 402.420824ms ago: executing program 4 (id=2218): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x6, 0x7], 0x0, 0x0, 0x0}, 0x108) write$binfmt_script(r1, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)) 347.125755ms ago: executing program 4 (id=2219): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)}], 0x1}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 336.526685ms ago: executing program 2 (id=2229): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) 90.834509ms ago: executing program 0 (id=2220): unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x3, 0x4, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x0, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x11, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x200, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x5, 0x9602, 0x5, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 90.248889ms ago: executing program 2 (id=2231): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 76.426839ms ago: executing program 0 (id=2221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000000)) 62.927369ms ago: executing program 0 (id=2222): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 62.620829ms ago: executing program 2 (id=2223): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 0 (id=2224): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/39, 0x27}], 0x1, 0x3ff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 22.871317][ T30] audit: type=1400 audit(1748013943.473:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.872794][ T273] cgroup: Unknown subsys name 'net' [ 22.900145][ T30] audit: type=1400 audit(1748013943.473:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.935497][ T30] audit: type=1400 audit(1748013943.503:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.935670][ T273] cgroup: Unknown subsys name 'devices' [ 23.092315][ T273] cgroup: Unknown subsys name 'hugetlb' [ 23.101056][ T273] cgroup: Unknown subsys name 'rlimit' [ 23.240495][ T30] audit: type=1400 audit(1748013943.843:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.259674][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.272359][ T30] audit: type=1400 audit(1748013943.843:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.318037][ T30] audit: type=1400 audit(1748013943.843:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.348006][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.351440][ T30] audit: type=1400 audit(1748013943.893:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.396803][ T30] audit: type=1400 audit(1748013943.893:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.432249][ T30] audit: type=1400 audit(1748013943.923:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.465290][ T30] audit: type=1400 audit(1748013943.923:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.028298][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.037508][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.048259][ T282] device bridge_slave_0 entered promiscuous mode [ 24.057630][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.068264][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.077018][ T282] device bridge_slave_1 entered promiscuous mode [ 24.141123][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.149378][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.158665][ T285] device bridge_slave_0 entered promiscuous mode [ 24.177824][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.188611][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.199697][ T285] device bridge_slave_1 entered promiscuous mode [ 24.220133][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.229334][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.240775][ T281] device bridge_slave_0 entered promiscuous mode [ 24.271451][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.280025][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.290036][ T281] device bridge_slave_1 entered promiscuous mode [ 24.408884][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.419455][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.430527][ T283] device bridge_slave_0 entered promiscuous mode [ 24.439607][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.449344][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.461357][ T283] device bridge_slave_1 entered promiscuous mode [ 24.472280][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.481561][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.494494][ T284] device bridge_slave_0 entered promiscuous mode [ 24.507379][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.516652][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.528135][ T284] device bridge_slave_1 entered promiscuous mode [ 24.681503][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.689787][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.710720][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.718697][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.726614][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.737177][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.749355][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.758221][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.769053][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.780291][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.855492][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.866092][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.874916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.888044][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.899429][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.910829][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.933434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.943405][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.955313][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.981445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.992684][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.002148][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.020836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.031119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.042003][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.051969][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.080313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.090658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.101279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.112798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.123290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.137955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.151323][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.164909][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.176677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.190119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.202472][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.213788][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.225518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.238797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.252961][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.267940][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.300083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.311048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.322012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.336390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.346784][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.359856][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.371751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.383149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.400693][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.413018][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.432276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.440435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.450681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.461791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.473692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.483803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.494806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.509326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.519337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.538277][ T281] device veth0_vlan entered promiscuous mode [ 25.550764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.561138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.573361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.582856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.596130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.608147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.619663][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.630380][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.640988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.649985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.669413][ T281] device veth1_macvtap entered promiscuous mode [ 25.679948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.690712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.702091][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.733644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.744868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.758931][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.769652][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.780158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.795163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.806659][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.817779][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.834208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.846107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.858946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.872463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.883102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.894947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.906907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.917436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.928103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.947343][ T285] device veth0_vlan entered promiscuous mode [ 25.959511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.970835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.981835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.992289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.002355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.011864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.022096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.030065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.038694][ T282] device veth0_vlan entered promiscuous mode [ 26.056099][ T285] device veth1_macvtap entered promiscuous mode [ 26.066045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.076924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.089187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.104459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.119449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.129398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.140212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.152251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.161524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.175287][ T284] device veth0_vlan entered promiscuous mode [ 26.185692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.197382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.207471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.222516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.247103][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.256767][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.269107][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.283059][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.295083][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.308589][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.329260][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 26.330346][ T282] device veth1_macvtap entered promiscuous mode [ 26.348701][ T284] device veth1_macvtap entered promiscuous mode [ 26.364704][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.376828][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.387001][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.398252][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.413853][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.426146][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.450032][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.461128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.472680][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.483205][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.499684][ T283] device veth0_vlan entered promiscuous mode [ 26.529000][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.545205][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.555313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.567904][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.578607][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.590195][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.601055][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.610615][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.661862][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.675582][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.696385][ T283] device veth1_macvtap entered promiscuous mode [ 26.751273][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.770393][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.781008][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.797425][ T20] kernel write not supported for file /rfkill (pid: 20 comm: kworker/0:1) [ 26.812231][ T319] loop3: detected capacity change from 0 to 512 [ 26.825485][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.835667][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.858148][ T319] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.880583][ T319] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 26.934490][ T319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 26.945717][ T319] System zones: 1-12 [ 26.951583][ T319] EXT4-fs (loop3): 1 truncate cleaned up [ 26.960472][ T319] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 27.004243][ T335] loop0: detected capacity change from 0 to 1024 [ 27.021469][ T335] ======================================================= [ 27.021469][ T335] WARNING: The mand mount option has been deprecated and [ 27.021469][ T335] and is ignored by this kernel. Remove the mand [ 27.021469][ T335] option from the mount to silence this warning. [ 27.021469][ T335] ======================================================= [ 27.099265][ T335] EXT4-fs (loop0): Ignoring removed bh option [ 27.112327][ T337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.132909][ T335] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #3: block 1: comm syz.0.11: lblock 1 mapped to illegal pblock 1 (length 1) [ 27.161154][ T335] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.11: Failed to acquire dquot type 0 [ 27.199557][ T335] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.11: Freeing blocks not in datazone - block = 0, count = 4096 [ 27.225999][ T341] loop1: detected capacity change from 0 to 512 [ 27.230470][ T335] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.11: Invalid inode bitmap blk 0 in block_group 0 [ 27.256873][ T317] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 27.274006][ T335] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 27.288974][ T335] EXT4-fs (loop0): 1 orphan inode deleted [ 27.291547][ T317] EXT4-fs error (device loop0): ext4_release_dquot:6231: comm kworker/u4:4: Failed to release dquot type 0 [ 27.295263][ T335] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; nodioread_nolock,nodiscard,bh,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue. Quota mode: writeback. [ 27.363847][ T341] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.419437][ T341] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.13: casefold flag without casefold feature [ 27.437682][ T341] EXT4-fs (loop1): Remounting filesystem read-only [ 27.444922][ T356] loop2: detected capacity change from 0 to 2048 [ 27.447355][ T341] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.13: couldn't read orphan inode 15 (err -117) [ 27.471348][ T341] EXT4-fs (loop1): Remounting filesystem read-only [ 27.480115][ T341] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,usrjquota=,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,jqfmt=vfsold,journal_ioprio=0x0000000000000005,. Quota mode: writeback. [ 27.523834][ T341] EXT4-fs (loop1): shut down requested (1) [ 27.590645][ T356] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,i_version,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 27.620148][ T356] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.635564][ T371] loop3: detected capacity change from 0 to 512 [ 27.661760][ T356] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.19: bg 0: block 345: padding at end of block bitmap is not set [ 27.680669][ T356] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 27.696678][ T356] EXT4-fs (loop2): This should not happen!! Data will be lost [ 27.696678][ T356] [ 27.716135][ T371] EXT4-fs (loop3): Ignoring removed oldalloc option [ 27.750028][ T371] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 27.753245][ T356] syz.2.19 (356) used greatest stack depth: 22176 bytes left [ 27.773349][ T371] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 27.790446][ T371] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 27.802687][ T371] System zones: 0-2, 18-18, 34-34 [ 27.809906][ T371] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.23: bad orphan inode 15 [ 27.825942][ T371] ext4_test_bit(bit=14, block=18) = 1 [ 27.835226][ T371] is_bad_inode(inode)=0 [ 27.840571][ T371] NEXT_ORPHAN(inode)=2264924160 [ 27.847694][ T371] max_ino=32 [ 27.852400][ T371] i_nlink=0 [ 27.855847][ T371] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 27.879538][ T371] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.23: bg 0: block 80: padding at end of block bitmap is not set [ 27.895321][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 27.895337][ T30] audit: type=1400 audit(1748013948.503:134): avc: denied { write } for pid=379 comm="syz.4.28" name="tcp" dev="proc" ino=4026532479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.931901][ T371] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 27.955347][ T371] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,jqfmt=vfsold,init_itable,init_itable,inode_readahead_blks=0x0000000000800000,data_err=abort,oldalloc,jqfmt=vfsv0,min_batch_time=0x0000000000000003,grpid,,errors=continue. Quota mode: none. [ 28.104222][ T384] loop2: detected capacity change from 0 to 40427 [ 28.125791][ T384] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 28.142374][ T384] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 28.154729][ T384] F2FS-fs (loop2): invalid crc value [ 28.178473][ T384] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.228761][ T384] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 28.236208][ T30] audit: type=1400 audit(1748013948.823:135): avc: denied { read write } for pid=387 comm="syz.4.29" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.237932][ T384] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.265206][ T30] audit: type=1400 audit(1748013948.823:136): avc: denied { open } for pid=387 comm="syz.4.29" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.317341][ T30] audit: type=1400 audit(1748013948.823:137): avc: denied { ioctl } for pid=387 comm="syz.4.29" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.366549][ T302] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 28.378394][ T30] audit: type=1400 audit(1748013948.953:138): avc: denied { setattr } for pid=383 comm="syz.2.26" name="file1" dev="loop2" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.408326][ T302] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 28.487148][ T400] loop0: detected capacity change from 0 to 1024 [ 28.520011][ T312] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.552236][ T404] loop3: detected capacity change from 0 to 1024 [ 28.573047][ T400] EXT4-fs (loop0): Ignoring removed bh option [ 28.591505][ T400] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 28.618099][ T408] loop2: detected capacity change from 0 to 2048 [ 28.639068][ T400] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.34: Allocating blocks 497-513 which overlap fs metadata [ 28.655495][ T400] EXT4-fs (loop0): Remounting filesystem read-only [ 28.662413][ T404] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.665174][ T400] EXT4-fs (loop0): pa ffff8881119be738: logic 131104, phys. 177, len 21 [ 28.680035][ T408] EXT4-fs (loop2): Ignoring removed nobh option [ 28.687301][ T400] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 28.707003][ T404] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.738583][ T408] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nobh,nodelalloc,abort,,errors=continue. Quota mode: writeback. [ 28.745295][ T404] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.35: bg 0: block 393: padding at end of block bitmap is not set [ 28.768395][ T400] EXT4-fs (loop0): Remounting filesystem read-only [ 28.779989][ T408] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.819829][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 28.868916][ T30] audit: type=1400 audit(1748013949.463:139): avc: denied { ioctl } for pid=407 comm="syz.2.30" path="/5/file0/file0/file0" dev="loop2" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.869012][ T408] fs-verity: sha256 using implementation "sha256-avx2" [ 28.925264][ T408] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -30 [ 28.949856][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 28.969284][ T30] audit: type=1400 audit(1748013949.573:140): avc: denied { setattr } for pid=407 comm="syz.2.30" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.975933][ T415] loop1: detected capacity change from 0 to 8192 [ 28.995431][ T408] syz.2.30 (408) used greatest stack depth: 21280 bytes left [ 29.022246][ T312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.049819][ T312] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 29.062460][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.079803][ T30] audit: type=1400 audit(1748013949.683:141): avc: denied { mount } for pid=414 comm="syz.1.38" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.117345][ T30] audit: type=1326 audit(1748013949.683:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74add5d969 code=0x7ffc0000 [ 29.150154][ T312] usb 5-1: config 0 descriptor?? [ 29.173096][ T30] audit: type=1326 audit(1748013949.683:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74add5d969 code=0x7ffc0000 [ 29.231739][ T429] loop2: detected capacity change from 0 to 512 [ 29.255777][ T433] loop0: detected capacity change from 0 to 1024 [ 29.310637][ T429] EXT4-fs (loop2): Test dummy encryption mode enabled [ 29.328634][ T429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 29.345254][ T433] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 29.360982][ T429] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.41: bad orphan inode 131083 [ 29.440321][ T429] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,minixdf,,errors=continue. Quota mode: none. [ 29.481408][ T429] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 29.500700][ T454] loop0: detected capacity change from 0 to 128 [ 29.512035][ T435] loop3: detected capacity change from 0 to 40427 [ 29.521485][ T435] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 29.536539][ T435] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.548929][ T454] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.558180][ T454] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.566727][ T435] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.592024][ T454] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 29.631842][ T454] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.639641][ T435] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 29.652498][ T312] kye 0003:0458:5019.0001: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 29.653024][ T435] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.701437][ T312] kye 0003:0458:5019.0001: tablet-enabling feature report not found [ 29.715416][ T312] kye 0003:0458:5019.0001: tablet enabling failed [ 29.845099][ T312] usb 5-1: USB disconnect, device number 2 [ 29.909859][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.928208][ T477] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 30.219888][ T488] loop0: detected capacity change from 0 to 1024 [ 30.278417][ T488] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 30.290405][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.307916][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.308174][ T488] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #11: comm syz.0.65: directory missing '..' [ 30.332999][ T488] EXT4-fs (loop0): Remounting filesystem read-only [ 30.348901][ T488] EXT4-fs error (device loop0): ext4_remount:5846: comm syz.0.65: Abort forced by user [ 30.368353][ T488] EXT4-fs (loop0): Remounting filesystem read-only [ 30.380361][ T488] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 30.419998][ T39] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.440683][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.449226][ T39] usb 2-1: SerialNumber: syz [ 30.599358][ T527] device vlan3 entered promiscuous mode [ 30.607811][ T527] device veth0 entered promiscuous mode [ 30.640711][ T530] netlink: 48 bytes leftover after parsing attributes in process `syz.2.84'. [ 30.702382][ T536] loop0: detected capacity change from 0 to 512 [ 30.744236][ T39] usb 2-1: 0:2 : does not exist [ 30.765312][ T536] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.86: casefold flag without casefold feature [ 30.800300][ T536] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.86: couldn't read orphan inode 15 (err -117) [ 30.815064][ T536] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 30.845218][ T39] usb 2-1: USB disconnect, device number 2 [ 30.921105][ T556] loop2: detected capacity change from 0 to 512 [ 30.924126][ T552] capability: warning: `syz.4.93' uses 32-bit capabilities (legacy support in use) [ 30.954470][ T556] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 30.976311][ T556] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.000499][ T562] loop4: detected capacity change from 0 to 256 [ 31.090369][ T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.141990][ T566] loop4: detected capacity change from 0 to 128 [ 31.209825][ T312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.320006][ T427] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.453691][ T589] netlink: 'syz.1.108': attribute type 34 has an invalid length. [ 31.517138][ T596] loop1: detected capacity change from 0 to 512 [ 31.569878][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.582131][ T596] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.586626][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.599222][ T596] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.611125][ T312] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 31.631757][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.647845][ T312] usb 1-1: config 0 descriptor?? [ 31.650839][ T596] EXT4-fs error (device loop1): ext4_do_update_inode:5234: inode #2: comm syz.1.111: corrupted inode contents [ 31.670805][ T596] EXT4-fs error (device loop1): ext4_dirty_inode:6070: inode #2: comm syz.1.111: mark_inode_dirty error [ 31.685974][ T596] EXT4-fs error (device loop1): ext4_do_update_inode:5234: inode #2: comm syz.1.111: corrupted inode contents [ 31.701454][ T596] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.111: mark_inode_dirty error [ 31.715589][ T289] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.730142][ T427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.743305][ T427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.755155][ T427] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 31.767759][ T427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.779278][ T427] usb 3-1: config 0 descriptor?? [ 32.099834][ T289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.113061][ T289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.126200][ T289] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.132820][ T312] wacom 0003:056A:00FA.0002: hidraw0: USB HID v0.00 Device [HID 056a:00fa] on usb-dummy_hcd.0-1/input0 [ 32.142608][ T289] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.168181][ T289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.196184][ T289] usb 4-1: config 0 descriptor?? [ 32.393071][ T312] usb 1-1: USB disconnect, device number 2 [ 32.475874][ T602] loop4: detected capacity change from 0 to 40427 [ 32.498226][ T602] F2FS-fs (loop4): invalid crc value [ 32.505998][ T602] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.548843][ T602] F2FS-fs (loop4): Start checkpoint disabled! [ 32.556330][ T602] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 32.597980][ T602] attempt to access beyond end of device [ 32.597980][ T602] loop4: rw=2049, want=45104, limit=40427 [ 32.611562][ T602] attempt to access beyond end of device [ 32.611562][ T602] loop4: rw=2049, want=45144, limit=40427 [ 32.626669][ T602] attempt to access beyond end of device [ 32.626669][ T602] loop4: rw=2049, want=45176, limit=40427 [ 32.640280][ T602] attempt to access beyond end of device [ 32.640280][ T602] loop4: rw=2049, want=45208, limit=40427 [ 32.654267][ T602] attempt to access beyond end of device [ 32.654267][ T602] loop4: rw=2049, want=45256, limit=40427 [ 32.670301][ T602] attempt to access beyond end of device [ 32.670301][ T602] loop4: rw=2049, want=45280, limit=40427 [ 32.681405][ T289] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x6 [ 32.687476][ T606] attempt to access beyond end of device [ 32.687476][ T606] loop4: rw=2049, want=45304, limit=40427 [ 32.700092][ T289] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 32.707219][ T427] hid-led 0003:27B8:01ED.0003: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 32.730481][ T602] attempt to access beyond end of device [ 32.730481][ T602] loop4: rw=2049, want=45336, limit=40427 [ 32.745071][ T289] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 32.746988][ T427] hid-led 0003:27B8:01ED.0003: ThingM blink(1) initialized [ 32.775180][ T606] attempt to access beyond end of device [ 32.775180][ T606] loop4: rw=2049, want=45360, limit=40427 [ 32.812457][ T602] attempt to access beyond end of device [ 32.812457][ T602] loop4: rw=2049, want=45368, limit=40427 [ 32.953054][ T289] usb 3-1: USB disconnect, device number 2 [ 32.985513][ T20] usb 4-1: USB disconnect, device number 2 [ 33.031683][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 33.031701][ T30] audit: type=1400 audit(1748013953.633:259): avc: denied { create } for pid=619 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.090047][ T30] audit: type=1400 audit(1748013953.663:260): avc: denied { write } for pid=619 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.127116][ T30] audit: type=1400 audit(1748013953.663:261): avc: denied { nlmsg_write } for pid=619 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.169872][ T30] audit: type=1400 audit(1748013953.663:262): avc: denied { setopt } for pid=619 comm="syz.0.118" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.267531][ T30] audit: type=1400 audit(1748013953.863:263): avc: denied { create } for pid=624 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.324148][ T30] audit: type=1400 audit(1748013953.903:264): avc: denied { getopt } for pid=624 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.535021][ T633] loop2: detected capacity change from 0 to 256 [ 33.650694][ T633] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.667162][ T633] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 33.702691][ T633] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 33.761354][ T30] audit: type=1400 audit(1748013954.353:265): avc: denied { write } for pid=631 comm="syz.2.121" name="file0" dev="loop2" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.809972][ T642] loop3: detected capacity change from 0 to 16 [ 33.824906][ T30] audit: type=1400 audit(1748013954.353:266): avc: denied { add_name } for pid=631 comm="syz.2.121" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.847674][ T644] loop4: detected capacity change from 0 to 128 [ 33.863218][ T30] audit: type=1400 audit(1748013954.353:267): avc: denied { associate } for pid=631 comm="syz.2.121" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.901326][ T642] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 33.902794][ T644] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.936145][ T30] audit: type=1400 audit(1748013954.363:268): avc: denied { read write } for pid=631 comm="syz.2.121" name="file0" dev="loop2" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.962201][ T644] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.120549][ T660] overlayfs: missing 'lowerdir' [ 34.164328][ T658] input: syz0 as /devices/virtual/input/input7 [ 34.266759][ T668] syz.1.140 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.356074][ T681] loop1: detected capacity change from 0 to 1024 [ 34.475621][ T681] EXT4-fs (loop1): Ignoring removed nobh option [ 34.504117][ T681] EXT4-fs (loop1): Ignoring removed bh option [ 34.524693][ T681] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.575574][ T681] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000003,data_err=abort,barrier,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 34.658479][ T681] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.145: Allocating blocks 497-513 which overlap fs metadata [ 34.692170][ T681] EXT4-fs (loop1): pa ffff8881119be5e8: logic 128, phys. 385, len 8 [ 34.700842][ T681] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 34.779809][ T427] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 34.969127][ T675] loop0: detected capacity change from 0 to 131072 [ 34.984224][ T675] F2FS-fs (loop0): invalid crc value [ 35.008365][ T675] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.011807][ T670] loop3: detected capacity change from 0 to 131072 [ 35.043164][ T675] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 35.108503][ T670] F2FS-fs (loop3): Test dummy encryption mode enabled [ 35.128063][ T670] F2FS-fs (loop3): invalid crc value [ 35.149887][ T427] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.166004][ T427] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.177226][ T670] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.249354][ T670] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.279889][ T427] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 35.317807][ T427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 35.341264][ T427] usb 5-1: SerialNumber: syz [ 35.650544][ T427] usb 5-1: 0:2 : does not exist [ 35.655424][ T718] loop1: detected capacity change from 0 to 40427 [ 35.689995][ T427] usb 5-1: USB disconnect, device number 3 [ 35.696872][ T718] F2FS-fs (loop1): invalid crc value [ 35.740926][ T718] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.805033][ T718] F2FS-fs (loop1): Start checkpoint disabled! [ 35.828076][ T747] loop2: detected capacity change from 0 to 1024 [ 35.835305][ T718] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 35.856712][ T747] EXT4-fs (loop2): Ignoring removed bh option [ 35.896502][ T747] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #3: block 1: comm syz.2.171: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.920116][ T610] udevd[610]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.937519][ T747] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.171: Failed to acquire dquot type 0 [ 35.965036][ T747] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.171: Freeing blocks not in datazone - block = 0, count = 4096 [ 35.989983][ T747] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.171: Invalid inode bitmap blk 0 in block_group 0 [ 36.019817][ T8] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.061167][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6231: comm kworker/u4:0: Failed to release dquot type 0 [ 36.075195][ T747] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 36.111060][ T747] EXT4-fs (loop2): 1 orphan inode deleted [ 36.124165][ T747] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; nodioread_nolock,nodiscard,bh,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue. Quota mode: writeback. [ 36.615953][ T770] loop2: detected capacity change from 0 to 2048 [ 36.659831][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.703840][ T780] loop1: detected capacity change from 0 to 4096 [ 36.721656][ T770] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.746862][ T784] loop3: detected capacity change from 0 to 1024 [ 36.756062][ T784] EXT4-fs (loop3): Ignoring removed nobh option [ 36.763768][ T780] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 36.774510][ T784] EXT4-fs (loop3): Ignoring removed bh option [ 36.784688][ T784] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.785370][ T770] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.827057][ T770] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 25 with max blocks 1 with error 28 [ 36.840623][ T770] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.840623][ T770] [ 36.853776][ T784] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000003,data_err=abort,barrier,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 36.888689][ T770] EXT4-fs (loop2): Total free blocks count 0 [ 36.913996][ T770] EXT4-fs (loop2): Free/Dirty block details [ 36.922076][ T770] EXT4-fs (loop2): free_blocks=2415919504 [ 36.928853][ T770] EXT4-fs (loop2): dirty_blocks=16 [ 36.934567][ T770] EXT4-fs (loop2): Block reservation details [ 36.941140][ T770] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 37.014372][ T784] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.183: Allocating blocks 497-513 which overlap fs metadata [ 37.035450][ T784] EXT4-fs (loop3): pa ffff888128d88000: logic 128, phys. 385, len 8 [ 37.044555][ T784] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 37.049863][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.083267][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.103307][ T795] loop1: detected capacity change from 0 to 1024 [ 37.106306][ T20] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 37.136286][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.160921][ T20] usb 5-1: config 0 descriptor?? [ 37.172286][ T799] kvm [798]: vcpu1, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x200000000101, nop [ 37.259027][ T795] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 37.290517][ T810] tipc: Started in network mode [ 37.299818][ T810] tipc: Node identity , cluster identity 4711 [ 37.309800][ T810] tipc: Failed to obtain node identity [ 37.316774][ T810] tipc: Enabling of bearer rejected, failed to enable media [ 37.422003][ T281] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 37.440537][ T281] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 37.640909][ T20] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 37.657784][ T20] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 37.676830][ T20] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 37.706364][ T20] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 37.716613][ T845] process 'syz.0.212' launched '/dev/fd/3' with NULL argv: empty string added [ 37.724709][ T20] cp2112 0003:10C4:EA90.0005: item fetching failed at offset 5/7 [ 37.746268][ T20] cp2112 0003:10C4:EA90.0005: parse failed [ 37.760141][ T20] cp2112: probe of 0003:10C4:EA90.0005 failed with error -22 [ 37.829713][ T831] loop2: detected capacity change from 0 to 40427 [ 37.877305][ T831] F2FS-fs (loop2): invalid crc value [ 37.890876][ T6] usb 5-1: USB disconnect, device number 4 [ 37.908922][ T831] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.948815][ T846] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.963188][ T861] loop0: detected capacity change from 0 to 512 [ 37.966793][ T846] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.971417][ T831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.989393][ T846] device bridge_slave_0 entered promiscuous mode [ 38.023965][ T846] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.032527][ T846] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.043105][ T846] device bridge_slave_1 entered promiscuous mode [ 38.052746][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 38.052761][ T30] audit: type=1400 audit(1748013958.653:343): avc: denied { read write } for pid=863 comm="syz.3.217" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.073936][ T20] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 38.093300][ T20] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 38.102738][ T20] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 38.104870][ T30] audit: type=1400 audit(1748013958.653:344): avc: denied { open } for pid=863 comm="syz.3.217" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.116258][ T20] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 38.141299][ T30] audit: type=1400 audit(1748013958.703:345): avc: denied { write } for pid=860 comm="syz.0.216" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 38.175751][ T285] handle_bad_sector: 26 callbacks suppressed [ 38.175771][ T285] attempt to access beyond end of device [ 38.175771][ T285] loop2: rw=2049, want=45112, limit=40427 [ 38.242168][ T867] fido_id[867]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.271626][ T398] device bridge_slave_1 left promiscuous mode [ 38.278699][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.287440][ T398] device bridge_slave_0 left promiscuous mode [ 38.294261][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.321934][ T398] device veth1_macvtap left promiscuous mode [ 38.328619][ T398] device veth0_vlan left promiscuous mode [ 38.328641][ T875] loop3: detected capacity change from 0 to 4096 [ 38.424117][ T875] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 38.460303][ T882] loop4: detected capacity change from 0 to 256 [ 38.499942][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.525671][ T30] audit: type=1400 audit(1748013959.123:346): avc: denied { connect } for pid=886 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.595160][ T893] device sit0 entered promiscuous mode [ 38.610634][ T30] audit: type=1400 audit(1748013959.213:347): avc: denied { wake_alarm } for pid=895 comm="syz.2.231" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.612385][ T893] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 38.644828][ T893] netlink: 1 bytes leftover after parsing attributes in process `syz.3.229'. [ 38.722081][ T30] audit: type=1400 audit(1748013959.323:348): avc: denied { create } for pid=901 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.738262][ T904] loop4: detected capacity change from 0 to 128 [ 38.759943][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 38.764666][ T906] loop3: detected capacity change from 0 to 256 [ 38.773670][ T30] audit: type=1400 audit(1748013959.353:349): avc: denied { write } for pid=901 comm="syz.3.234" path="socket:[17775]" dev="sockfs" ino=17775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.800412][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.807945][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.823860][ T906] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.824059][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.835108][ T906] FAT-fs (loop3): Filesystem has been set read-only [ 38.844363][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.859494][ T906] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.867792][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.878319][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.878782][ T906] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.886847][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.909807][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.922319][ T904] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 38.926357][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.932758][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.945793][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.953601][ T904] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.957640][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.969028][ T20] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 38.976294][ T904] ext2 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.987411][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.001067][ T910] netlink: 80 bytes leftover after parsing attributes in process `syz.3.237'. [ 39.010028][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 39.029544][ T20] usb 1-1: config 0 descriptor?? [ 39.052134][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.061983][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.073454][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.100200][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.111659][ T30] audit: type=1400 audit(1748013959.713:350): avc: denied { create } for pid=912 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.117482][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.142623][ T904] EXT4-fs error (device loop4): make_indexed_dir:2333: inode #2: block 63: comm syz.4.235: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=0, rec_len=5, size=1000 fake=1 [ 39.149796][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.184700][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.194448][ T846] device veth0_vlan entered promiscuous mode [ 39.216124][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.228534][ T846] device veth1_macvtap entered promiscuous mode [ 39.236549][ T918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 39.258067][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.266925][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.278259][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.290263][ T918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 39.324495][ T30] audit: type=1400 audit(1748013959.923:351): avc: denied { mounton } for pid=846 comm="syz-executor" path="/root/syzkaller.FkAPG2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.326370][ T922] netlink: 27 bytes leftover after parsing attributes in process `syz.4.242'. [ 39.420452][ T931] loop5: detected capacity change from 0 to 512 [ 39.439844][ T6] usb 3-1: config index 0 descriptor too short (expected 60443, got 27) [ 39.448729][ T6] usb 3-1: config 1 has an invalid interface number: 0 but max is -1 [ 39.461041][ T30] audit: type=1400 audit(1748013960.063:352): avc: denied { read write } for pid=932 comm="syz.4.245" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.502741][ T20] savu 0003:1E7D:2D5A.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 39.515782][ T931] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.519296][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 39.527640][ T931] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.564406][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.590789][ T931] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.246: Failed to acquire dquot type 1 [ 39.607688][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 39.646128][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.780537][ T427] usb 1-1: USB disconnect, device number 3 [ 39.809113][ T962] incfs: iterate_incfs_dir / -22 [ 39.819986][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 39.835415][ T964] capability: warning: `syz.3.258' uses deprecated v2 capabilities in a way that may be insecure [ 39.848886][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.860674][ T968] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 39.872994][ T6] usb 3-1: Product: syz [ 39.877459][ T6] usb 3-1: Manufacturer: syz [ 39.891946][ T6] usb 3-1: SerialNumber: syz [ 40.161242][ T6] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 40.169892][ T312] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.177486][ T6] usb 3-1: USB disconnect, device number 3 [ 40.190636][ T20] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.202166][ T6] usblp0: removed [ 40.421410][ T998] TCP: TCP_TX_DELAY enabled [ 40.980025][ T1068] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 41.029935][ T1068] netlink: 'syz.2.306': attribute type 2 has an invalid length. [ 41.060382][ T1075] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 41.069801][ T1075] netlink: 'syz.2.306': attribute type 2 has an invalid length. [ 41.237603][ T1094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1094 comm=syz.2.320 [ 41.862503][ T1212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1212 comm=syz.3.375 [ 43.060604][ T30] kauditd_printk_skb: 517 callbacks suppressed [ 43.060621][ T30] audit: type=1400 audit(1748013963.663:868): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 43.128932][ T30] audit: type=1400 audit(1748013963.703:869): avc: denied { map_create } for pid=1297 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.160814][ T1302] device pim6reg1 entered promiscuous mode [ 43.179517][ T30] audit: type=1400 audit(1748013963.703:870): avc: denied { prog_load } for pid=1297 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.209768][ T30] audit: type=1400 audit(1748013963.703:871): avc: denied { map_create } for pid=1297 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.267265][ T30] audit: type=1400 audit(1748013963.713:872): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 43.280377][ T1308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 43.294136][ T1306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 43.319822][ T1306] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 43.321200][ T1308] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 43.328085][ T1306] audit: backlog limit exceeded [ 45.234595][ T1471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 45.243921][ T1471] netem: change failed [ 46.235539][ T1598] sch_fq: defrate 0 ignored. [ 46.542565][ T1641] netlink: 96 bytes leftover after parsing attributes in process `syz.2.568'. [ 47.113848][ T1691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 47.192958][ T1695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1695 comm=syz.4.596 [ 48.091920][ T30] kauditd_printk_skb: 701 callbacks suppressed [ 48.091968][ T30] audit: type=1400 audit(1748013968.693:1573): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.159303][ T30] audit: type=1400 audit(1748013968.733:1574): avc: denied { read write } for pid=846 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.202121][ T30] audit: type=1400 audit(1748013968.733:1575): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.236702][ T30] audit: type=1400 audit(1748013968.733:1576): avc: denied { map_create } for pid=1756 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 48.281726][ T30] audit: type=1400 audit(1748013968.733:1577): avc: denied { map_create } for pid=1758 comm="syz.5.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 48.325047][ T30] audit: type=1400 audit(1748013968.733:1578): avc: denied { prog_load } for pid=1756 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 48.373661][ T30] audit: type=1400 audit(1748013968.733:1579): avc: denied { prog_load } for pid=1758 comm="syz.5.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 48.426704][ T30] audit: type=1400 audit(1748013968.733:1580): avc: denied { create } for pid=1756 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 48.482859][ T30] audit: type=1400 audit(1748013968.743:1581): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.589086][ T30] audit: type=1400 audit(1748013968.743:1582): avc: denied { read write } for pid=1760 comm="syz.3.625" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.620618][ T1806] netlink: 'syz.4.647': attribute type 5 has an invalid length. [ 49.186048][ T1849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 50.125451][ T1933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 50.345365][ T1949] sit: Src spoofed 1.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 50.406696][ T1955] netlink: 92 bytes leftover after parsing attributes in process `syz.0.717'. [ 51.044581][ T2029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2029 comm=syz.3.752 [ 51.381677][ T2066] netlink: 'syz.4.770': attribute type 4 has an invalid length. [ 51.397214][ T2066] netlink: 'syz.4.770': attribute type 4 has an invalid length. [ 51.414376][ T2066] syz.4.770 (2066) used greatest stack depth: 20864 bytes left [ 52.689304][ T2208] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 52.767431][ T2224] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 53.100682][ T30] kauditd_printk_skb: 1009 callbacks suppressed [ 53.100698][ T30] audit: type=1400 audit(1748013973.703:2592): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.136339][ T30] audit: type=1400 audit(1748013973.703:2593): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.173113][ T30] audit: type=1400 audit(1748013973.743:2594): avc: denied { map_create } for pid=2262 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 53.197294][ T30] audit: type=1400 audit(1748013973.743:2595): avc: denied { prog_load } for pid=2262 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 53.221570][ T30] audit: type=1400 audit(1748013973.743:2596): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.257540][ T30] audit: type=1400 audit(1748013973.773:2597): avc: denied { prog_load } for pid=2264 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 53.280580][ T30] audit: type=1400 audit(1748013973.773:2598): avc: denied { prog_load } for pid=2264 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 53.308506][ T30] audit: type=1400 audit(1748013973.773:2599): avc: denied { read write } for pid=846 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.356525][ T30] audit: type=1400 audit(1748013973.803:2600): avc: denied { prog_load } for pid=2264 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 53.385518][ T30] audit: type=1400 audit(1748013973.803:2601): avc: denied { prog_load } for pid=2270 comm="syz.5.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 54.017365][ T2383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 54.253306][ T2406] sch_fq: defrate 6 ignored. [ 55.081028][ T2537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 55.090888][ T2537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 56.347937][ T2642] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 56.356679][ T2642] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 56.370415][ T2642] netlink: 'syz.3.1036': attribute type 2 has an invalid length. [ 56.379320][ T2642] netlink: 'syz.3.1036': attribute type 2 has an invalid length. [ 56.388748][ T2642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 56.388774][ T2643] mmap: syz.0.1037 (2643) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 56.990426][ T2679] netem: change failed [ 58.260777][ T30] kauditd_printk_skb: 714 callbacks suppressed [ 58.260793][ T30] audit: type=1400 audit(1748013978.863:3316): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.315651][ T30] audit: type=1400 audit(1748013978.863:3317): avc: denied { prog_load } for pid=2736 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.354279][ T30] audit: type=1400 audit(1748013978.863:3318): avc: denied { prog_load } for pid=2736 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.404234][ T30] audit: type=1400 audit(1748013978.863:3319): avc: denied { create } for pid=2736 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 58.427405][ T30] audit: type=1400 audit(1748013978.863:3320): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.459278][ T30] audit: type=1400 audit(1748013978.863:3321): avc: denied { map_create } for pid=2738 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.487964][ T30] audit: type=1400 audit(1748013978.863:3322): avc: denied { prog_load } for pid=2738 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.511835][ T30] audit: type=1326 audit(1748013978.903:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c41f2969 code=0x7ffc0000 [ 58.540321][ T30] audit: type=1326 audit(1748013978.903:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7ff5c41f2969 code=0x7ffc0000 [ 58.568619][ T30] audit: type=1326 audit(1748013978.903:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c41f2969 code=0x7ffc0000 [ 58.729692][ T2774] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 58.907342][ T2807] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 58.916182][ T2807] syzkaller0: owner set to 1 [ 59.168626][ T2867] xt_bpf: check failed: parse error [ 59.590464][ T2936] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1170'. [ 59.637184][ T2943] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1173'. [ 59.865248][ T2965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1183'. [ 59.875410][ T2965] netem: change failed [ 60.568686][ T3014] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 60.586917][ T302] Bluetooth: hci2: Frame reassembly failed (-84) [ 60.695616][ T3025] serio: Serial port ptm1 [ 60.769782][ T6] Bluetooth: hci1: command 0x1003 tx timeout [ 60.777136][ T3015] Bluetooth: hci1: sending frame failed (-49) [ 61.151898][ T3074] netlink: 'syz.2.1236': attribute type 5 has an invalid length. [ 62.599772][ T289] Bluetooth: hci2: command 0x1003 tx timeout [ 62.609009][ T3015] Bluetooth: hci2: sending frame failed (-49) [ 62.612749][ T3142] sit: Src spoofed 1.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 62.839809][ T289] Bluetooth: hci1: command 0x1001 tx timeout [ 62.848029][ T3015] Bluetooth: hci1: sending frame failed (-49) [ 63.582255][ T30] kauditd_printk_skb: 646 callbacks suppressed [ 63.582271][ T30] audit: type=1400 audit(1748013984.183:3972): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.613806][ T30] audit: type=1400 audit(1748013984.183:3973): avc: denied { read write } for pid=3160 comm="syz.2.1276" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.641570][ T30] audit: type=1400 audit(1748013984.193:3974): avc: denied { mounton } for pid=3160 comm="syz.2.1276" path="/265/bus" dev="tmpfs" ino=1392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 63.664060][ T3167] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 63.666398][ T30] audit: type=1400 audit(1748013984.193:3975): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.698657][ T30] audit: type=1400 audit(1748013984.203:3976): avc: denied { read } for pid=3162 comm="syz.2.1277" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 63.722448][ T30] audit: type=1400 audit(1748013984.213:3977): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.747762][ T30] audit: type=1400 audit(1748013984.213:3978): avc: denied { prog_load } for pid=3164 comm="syz.2.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.768066][ T30] audit: type=1400 audit(1748013984.253:3979): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.793782][ T30] audit: type=1400 audit(1748013984.263:3980): avc: denied { prog_load } for pid=3166 comm="syz.2.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.816570][ T30] audit: type=1400 audit(1748013984.283:3981): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.875478][ T3178] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1284'. [ 64.542167][ T3239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3239 comm=syz.5.1312 [ 64.680067][ T6] Bluetooth: hci2: command 0x1001 tx timeout [ 64.686879][ T3015] Bluetooth: hci2: sending frame failed (-49) [ 64.919790][ T6] Bluetooth: hci1: command 0x1009 tx timeout [ 65.370660][ T3320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 65.411728][ T3322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 65.532145][ T3324] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 65.954590][ T3343] xt_bpf: check failed: parse error [ 66.233368][ T3381] device wireguard0 entered promiscuous mode [ 66.406127][ T398] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.759914][ T289] Bluetooth: hci2: command 0x1009 tx timeout [ 68.449772][ T289] Bluetooth: hci0: command 0x1003 tx timeout [ 68.456539][ T3015] Bluetooth: hci0: sending frame failed (-49) [ 68.628999][ T30] kauditd_printk_skb: 424 callbacks suppressed [ 68.629018][ T30] audit: type=1400 audit(1748014245.228:4406): avc: denied { execute } for pid=3491 comm="syz.4.1430" path="/247/bus" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 68.680146][ T30] audit: type=1400 audit(1748014245.278:4407): avc: denied { read write } for pid=846 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.713884][ T30] audit: type=1400 audit(1748014245.318:4408): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.744971][ T30] audit: type=1400 audit(1748014245.348:4409): avc: denied { read write } for pid=846 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.780304][ T30] audit: type=1400 audit(1748014245.378:4410): avc: denied { name_bind } for pid=3497 comm="syz.5.1433" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 68.805643][ T30] audit: type=1400 audit(1748014245.388:4411): avc: denied { read write } for pid=846 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.849788][ T30] audit: type=1400 audit(1748014245.448:4412): avc: denied { read write } for pid=846 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.874423][ T30] audit: type=1400 audit(1748014245.458:4413): avc: denied { map_create } for pid=3501 comm="syz.5.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.894195][ T30] audit: type=1400 audit(1748014245.458:4414): avc: denied { prog_load } for pid=3501 comm="syz.5.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.914638][ T30] audit: type=1400 audit(1748014245.458:4415): avc: denied { read write } for pid=846 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.828401][ T3555] serio: Serial port ptm1 [ 69.890764][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1460'. [ 69.901390][ T3559] Zero length message leads to an empty skb [ 70.519833][ T6] Bluetooth: hci0: command 0x1001 tx timeout [ 70.526640][ T2573] Bluetooth: hci0: sending frame failed (-49) [ 70.673051][ T3604] bridge0: port 3(syz_tun) entered blocking state [ 70.679884][ T3604] bridge0: port 3(syz_tun) entered disabled state [ 70.687178][ T3604] device syz_tun entered promiscuous mode [ 70.693362][ T3604] bridge0: port 3(syz_tun) entered blocking state [ 70.700710][ T3604] bridge0: port 3(syz_tun) entered forwarding state [ 70.891076][ T3651] device wg2 entered promiscuous mode [ 70.909344][ T3655] netlink: 'syz.4.1507': attribute type 4 has an invalid length. [ 70.921290][ T3655] netlink: 'syz.4.1507': attribute type 4 has an invalid length. [ 70.986922][ T3674] device bridge1 entered promiscuous mode [ 71.038391][ T3684] device vlan0 entered promiscuous mode [ 72.599920][ T312] Bluetooth: hci0: command 0x1009 tx timeout [ 72.755944][ T3834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1590'. [ 73.330420][ T3908] netlink: 'syz.3.1626': attribute type 4 has an invalid length. [ 73.344325][ T3908] netlink: 'syz.3.1626': attribute type 4 has an invalid length. [ 73.473427][ T3935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'. [ 73.485528][ T3935] bridge0: port 3(syz_tun) entered disabled state [ 73.493768][ T3935] device syz_tun left promiscuous mode [ 73.499509][ T3935] bridge0: port 3(syz_tun) entered disabled state [ 73.634875][ T30] kauditd_printk_skb: 681 callbacks suppressed [ 73.634892][ T30] audit: type=1400 audit(1748014250.238:5097): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.669204][ T30] audit: type=1400 audit(1748014250.248:5098): avc: denied { map_create } for pid=3959 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.690066][ T3967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 73.693410][ T30] audit: type=1400 audit(1748014250.248:5099): avc: denied { prog_load } for pid=3959 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.715349][ T3967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 73.727018][ T30] audit: type=1400 audit(1748014250.248:5100): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.761235][ T30] audit: type=1400 audit(1748014250.248:5101): avc: denied { read } for pid=3961 comm="syz.4.1651" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 73.787056][ T30] audit: type=1400 audit(1748014250.248:5102): avc: denied { create } for pid=3961 comm="syz.4.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 73.809460][ T30] audit: type=1400 audit(1748014250.248:5103): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.835269][ T30] audit: type=1400 audit(1748014250.278:5104): avc: denied { prog_load } for pid=3964 comm="syz.4.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.860873][ T30] audit: type=1400 audit(1748014250.278:5105): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.898277][ T30] audit: type=1400 audit(1748014250.308:5106): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.200252][ T4009] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 74.209861][ T4009] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 74.218121][ T4009] netlink: 'syz.4.1672': attribute type 2 has an invalid length. [ 74.231896][ T4009] netlink: 'syz.4.1672': attribute type 2 has an invalid length. [ 74.241353][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 75.057393][ T4088] serio: Serial port ptm0 [ 76.077432][ T4130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1725'. [ 76.094673][ T4130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1725'. [ 76.163496][ T4140] binfmt_misc: register: failed to install interpreter file ./file0 [ 77.490698][ T4241] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1778'. [ 77.672540][ T4259] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1787'. [ 77.682959][ T4259] netem: change failed [ 78.639747][ T30] kauditd_printk_skb: 648 callbacks suppressed [ 78.639763][ T30] audit: type=1400 audit(1748014255.238:5755): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.685048][ T30] audit: type=1400 audit(1748014255.258:5756): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.747943][ T30] audit: type=1400 audit(1748014255.278:5757): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.817694][ T30] audit: type=1400 audit(1748014255.288:5758): avc: denied { create } for pid=4366 comm="syz.3.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 78.819838][ T4387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.847286][ T4387] IPv6: NLM_F_CREATE should be set when creating new route [ 78.850375][ T30] audit: type=1400 audit(1748014255.288:5759): avc: denied { read write } for pid=846 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.906625][ T4398] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1854'. [ 78.914939][ T30] audit: type=1400 audit(1748014255.288:5760): avc: denied { create } for pid=4366 comm="syz.3.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 78.954207][ T30] audit: type=1400 audit(1748014255.288:5761): avc: denied { prog_load } for pid=4369 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.975931][ T30] audit: type=1400 audit(1748014255.318:5762): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.028843][ T30] audit: type=1400 audit(1748014255.318:5763): avc: denied { read } for pid=4368 comm="syz.0.1840" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 79.055168][ T30] audit: type=1400 audit(1748014255.328:5764): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.102363][ T4414] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 79.218129][ T4436] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1872'. [ 79.298893][ T4443] binfmt_misc: register: failed to install interpreter file ./file2 [ 79.926962][ T4467] netem: change failed [ 80.346936][ T375] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.779452][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 80.844588][ T4559] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 81.366588][ T4597] loop3: detected capacity change from 0 to 512 [ 81.385285][ T4597] EXT4-fs (loop3): Test dummy encryption mode enabled [ 81.421042][ T4597] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 81.452361][ T4597] EXT4-fs (loop3): old and new quota format mixing [ 81.990942][ T4623] netlink: 'syz.5.1952': attribute type 1 has an invalid length. [ 82.014284][ T4620] loop0: detected capacity change from 0 to 8192 [ 82.021491][ T4623] netlink: 'syz.5.1952': attribute type 1 has an invalid length. [ 82.041710][ T4623] netlink: 'syz.5.1952': attribute type 2 has an invalid length. [ 82.059784][ T4623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1952'. [ 82.070872][ T4620] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.113204][ T4620] FAT-fs (loop0): error, corrupted file size (i_pos 1046, 9000) [ 82.129892][ T4620] FAT-fs (loop0): Filesystem has been set read-only [ 82.147218][ T4620] FAT-fs (loop0): error, corrupted file size (i_pos 1046, 9000) [ 82.148467][ T4617] loop3: detected capacity change from 0 to 40427 [ 82.162448][ T4620] FAT-fs (loop0): error, corrupted file size (i_pos 1046, 9000) [ 82.180154][ T4620] FAT-fs (loop0): error, corrupted file size (i_pos 1046, 9000) [ 82.190588][ T4617] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.235425][ T4617] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 82.258720][ T4617] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.359837][ T26] Bluetooth: hci0: command 0x1003 tx timeout [ 82.366702][ T2778] Bluetooth: hci0: sending frame failed (-49) [ 82.394458][ T4617] attempt to access beyond end of device [ 82.394458][ T4617] loop3: rw=0, want=77832, limit=40427 [ 82.431255][ T284] attempt to access beyond end of device [ 82.431255][ T284] loop3: rw=2049, want=45104, limit=40427 [ 82.533158][ T4656] loop5: detected capacity change from 0 to 512 [ 82.586650][ T4644] loop0: detected capacity change from 0 to 40427 [ 82.597407][ T4656] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.616053][ T4656] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 82.627839][ T4656] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 82.637389][ T4656] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 82.647344][ T4656] System zones: 0-2, 18-18, 34-34 [ 82.688356][ T4656] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 82.705558][ T4644] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.713719][ T4656] EXT4-fs (loop5): 1 truncate cleaned up [ 82.729804][ T4656] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.777561][ T4644] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.809506][ T4644] attempt to access beyond end of device [ 82.809506][ T4644] loop0: rw=2049, want=53256, limit=40427 [ 82.830029][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.848641][ T282] attempt to access beyond end of device [ 82.848641][ T282] loop0: rw=2049, want=45104, limit=40427 [ 82.971761][ T4679] loop3: detected capacity change from 0 to 256 [ 82.993507][ T4679] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.209823][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.222454][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.241119][ T26] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 83.251483][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.270332][ T26] usb 5-1: config 0 descriptor?? [ 83.569818][ T427] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 83.768764][ T30] kauditd_printk_skb: 349 callbacks suppressed [ 83.768782][ T30] audit: type=1326 audit(1748014260.368:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.5.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9823640969 code=0x7fc00000 [ 83.929795][ T427] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 83.939010][ T427] usb 4-1: config 0 has no interface number 0 [ 83.946194][ T427] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 83.961183][ T30] audit: type=1326 audit(1748014260.568:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fff8f8969 code=0x7ffc0000 [ 83.987119][ T30] audit: type=1326 audit(1748014260.568:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fff8f8969 code=0x7ffc0000 [ 84.012396][ T30] audit: type=1326 audit(1748014260.568:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fff8f8969 code=0x7ffc0000 [ 84.037977][ T30] audit: type=1326 audit(1748014260.568:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fff8f8969 code=0x7ffc0000 [ 84.063776][ T30] audit: type=1326 audit(1748014260.568:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fff8f8969 code=0x7ffc0000 [ 84.090518][ T30] audit: type=1326 audit(1748014260.568:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fff8f8969 code=0x7ffc0000 [ 84.117168][ T30] audit: type=1326 audit(1748014260.568:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fff8f8969 code=0x7ffc0000 [ 84.142328][ T30] audit: type=1326 audit(1748014260.588:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fff8f8969 code=0x7ffc0000 [ 84.169204][ T427] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 84.179150][ T30] audit: type=1326 audit(1748014260.598:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fff8f8969 code=0x7ffc0000 [ 84.179164][ T427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.179190][ T427] usb 4-1: Product: syz [ 84.221336][ T427] usb 4-1: Manufacturer: syz [ 84.226950][ T427] usb 4-1: SerialNumber: syz [ 84.232956][ T427] usb 4-1: config 0 descriptor?? [ 84.421549][ T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0008/input/input8 [ 84.435706][ T26] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0008/input/input9 [ 84.449224][ T26] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 84.464271][ T26] Bluetooth: hci0: command 0x1001 tx timeout [ 84.472226][ T2778] Bluetooth: hci0: sending frame failed (-49) [ 84.623427][ T6] usb 5-1: USB disconnect, device number 6 [ 84.646709][ T26] usb 4-1: USB disconnect, device number 4 [ 84.750678][ T4749] serio: Serial port ptm1 [ 84.941177][ T4761] loop5: detected capacity change from 0 to 512 [ 84.942347][ T4763] loop0: detected capacity change from 0 to 256 [ 85.046497][ T4761] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.059369][ T4761] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.074528][ T4761] EXT4-fs error (device loop5): ext4_do_update_inode:5234: inode #2: comm syz.5.2009: corrupted inode contents [ 85.089466][ T4761] EXT4-fs error (device loop5): ext4_dirty_inode:6070: inode #2: comm syz.5.2009: mark_inode_dirty error [ 85.098782][ T4772] loop0: detected capacity change from 0 to 512 [ 85.104784][ T4761] EXT4-fs error (device loop5): ext4_do_update_inode:5234: inode #2: comm syz.5.2009: corrupted inode contents [ 85.127357][ T4761] EXT4-fs error (device loop5): ext4_do_update_inode:5234: inode #2: comm syz.5.2009: corrupted inode contents [ 85.140433][ T4761] EXT4-fs error (device loop5): ext4_setattr:5495: inode #2: comm syz.5.2009: mark_inode_dirty error [ 85.154387][ T4772] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 85.223042][ T4785] loop4: detected capacity change from 0 to 128 [ 85.250214][ T4787] xt_hashlimit: max too large, truncated to 1048576 [ 85.261876][ T4785] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.276041][ T4785] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.332298][ T4795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=144 sclass=netlink_audit_socket pid=4795 comm=syz.5.2022 [ 85.352308][ T302] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.365758][ T4795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4795 comm=syz.5.2022 [ 85.514530][ T4821] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4821 comm=syz.4.2034 [ 85.616157][ T4831] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 85.625188][ T4831] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 85.669790][ T427] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.688376][ T4839] loop4: detected capacity change from 0 to 512 [ 85.720282][ T4839] SELinux: security_context_str_to_sid(unconfined_u,errors=continue) failed for (dev ?, type ?) errno=-22 [ 85.749328][ T4839] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 85.760918][ T4839] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 85.771447][ T4839] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 85.782453][ T4839] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 85.788574][ T4834] loop0: detected capacity change from 0 to 40427 [ 85.793533][ T4839] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 85.810745][ T4839] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 85.819472][ T4839] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e018, mo2=0000] [ 85.827798][ T4839] EXT4-fs (loop4): failed to initialize system zone (-117) [ 85.835241][ T4839] EXT4-fs (loop4): mount failed [ 85.861543][ T4834] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 85.870762][ T4834] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.880666][ T4834] F2FS-fs (loop0): invalid crc value [ 85.887743][ T4834] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.947767][ T4834] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 85.955745][ T4834] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 85.988915][ T4834] attempt to access beyond end of device [ 85.988915][ T4834] loop0: rw=524288, want=78024, limit=40427 [ 86.006626][ T4834] attempt to access beyond end of device [ 86.006626][ T4834] loop0: rw=0, want=77832, limit=40427 [ 86.028900][ T4834] attempt to access beyond end of device [ 86.028900][ T4834] loop0: rw=0, want=77832, limit=40427 [ 86.040959][ T4834] attempt to access beyond end of device [ 86.040959][ T4834] loop0: rw=0, want=77832, limit=40427 [ 86.059891][ T427] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.063226][ T4834] attempt to access beyond end of device [ 86.063226][ T4834] loop0: rw=0, want=77832, limit=40427 [ 86.079795][ T427] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.081777][ T4834] attempt to access beyond end of device [ 86.081777][ T4834] loop0: rw=16812033, want=77856, limit=40427 [ 86.169843][ T427] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.181209][ T427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.189604][ T427] usb 4-1: SerialNumber: syz [ 86.344469][ T4866] loop0: detected capacity change from 0 to 128 [ 86.445631][ T4866] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.458471][ T4866] ext4 filesystem being mounted at /371/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.470657][ T427] usb 4-1: 0:2 : does not exist [ 86.477467][ T427] usb 4-1: USB disconnect, device number 5 [ 86.487795][ T4866] syz.0.2048 (pid 4866) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 86.520020][ T39] Bluetooth: hci0: command 0x1009 tx timeout [ 86.700557][ T4719] udevd[4719]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.819783][ T6] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 87.050454][ T4898] syz.4.2064[4898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.050536][ T4898] syz.4.2064[4898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.190610][ T6] usb 1-1: config 0 has no interfaces? [ 87.230803][ T4926] loop4: detected capacity change from 0 to 1024 [ 87.240549][ T39] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 87.275289][ T4926] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.304719][ T283] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 87.318505][ T283] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 87.389835][ T6] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 87.404132][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.413277][ T6] usb 1-1: Product: syz [ 87.417820][ T6] usb 1-1: Manufacturer: syz [ 87.422929][ T6] usb 1-1: SerialNumber: syz [ 87.429670][ T6] usb 1-1: config 0 descriptor?? [ 87.516599][ T4938] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.524284][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.533380][ T4938] device bridge_slave_0 entered promiscuous mode [ 87.541728][ T4938] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.549336][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.557185][ T4938] device bridge_slave_1 entered promiscuous mode [ 87.609930][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.610242][ T4938] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.621213][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.628530][ T4938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.646065][ T4938] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.653466][ T4938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.676101][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.683789][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.691749][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.702229][ T4871] netlink: 'syz.0.2051': attribute type 5 has an invalid length. [ 87.711083][ T6] usb 1-1: USB disconnect, device number 4 [ 87.718152][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.727125][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.734766][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.742573][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.751497][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.758740][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.770255][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.791511][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.800481][ T39] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.800600][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.810374][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.826634][ T39] usb 6-1: Product: syz [ 87.831151][ T39] usb 6-1: Manufacturer: syz [ 87.832244][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.835789][ T39] usb 6-1: SerialNumber: syz [ 87.845319][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.856526][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.864455][ T4938] device veth0_vlan entered promiscuous mode [ 87.878291][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.890175][ T4938] device veth1_macvtap entered promiscuous mode [ 87.902554][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.915168][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.971645][ T4945] SELinux: failed to load policy [ 88.164698][ T39] usb 6-1: 0:2 : does not exist [ 88.181087][ T39] usb 6-1: USB disconnect, device number 2 [ 88.202240][ T4719] udevd[4719]: setting mode of /dev/snd/controlC0 to 020660 failed: No such file or directory [ 88.229906][ T4719] udevd[4719]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 88.249922][ T4953] sch_fq: defrate 6 ignored. [ 88.381383][ T398] device bridge_slave_1 left promiscuous mode [ 88.388053][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.397021][ T398] device bridge_slave_0 left promiscuous mode [ 88.403902][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.419839][ T398] device veth1_macvtap left promiscuous mode [ 88.529772][ T4968] loop4: detected capacity change from 0 to 256 [ 88.775329][ T30] kauditd_printk_skb: 3078 callbacks suppressed [ 88.775348][ T30] audit: type=1326 audit(1748014265.378:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74adcf9b39 code=0x7ffc0000 [ 88.809173][ T30] audit: type=1326 audit(1748014265.378:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74adcf9b39 code=0x7ffc0000 [ 88.809909][ T4983] overlayfs: failed to clone upperpath [ 88.833941][ T30] audit: type=1326 audit(1748014265.378:9186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74adcf9b39 code=0x7ffc0000 [ 88.865644][ T30] audit: type=1326 audit(1748014265.378:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74adcf9b39 code=0x7ffc0000 [ 88.893796][ T30] audit: type=1326 audit(1748014265.378:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74adcf9b39 code=0x7ffc0000 [ 88.939907][ T30] audit: type=1326 audit(1748014265.378:9189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74adcf9b39 code=0x7ffc0000 [ 88.981694][ T30] audit: type=1326 audit(1748014265.378:9190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74adcf9b39 code=0x7ffc0000 [ 89.014503][ T30] audit: type=1326 audit(1748014265.378:9191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74adcf9b39 code=0x7ffc0000 [ 89.045818][ T30] audit: type=1326 audit(1748014265.378:9192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74adcf9b39 code=0x7ffc0000 [ 89.072543][ T30] audit: type=1326 audit(1748014265.378:9193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74adcf9b39 code=0x7ffc0000 [ 89.337862][ T5010] sit: Src spoofed 1.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 89.724640][ T5031] loop3: detected capacity change from 0 to 512 [ 89.735684][ T5031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 89.744732][ T5031] System zones: 1-12 [ 89.749537][ T5031] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2121: Directory hole found for htree index block 0 [ 89.763686][ T5031] EXT4-fs (loop3): Remounting filesystem read-only [ 89.770468][ T5031] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 89.778807][ T5031] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2121: Directory hole found for htree index block 0 [ 89.792212][ T5031] EXT4-fs (loop3): Remounting filesystem read-only [ 89.799574][ T5031] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 89.808548][ T5031] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 90.359268][ T5067] SELinux: policydb version 0 does not match my version range 15-33 [ 90.367812][ T5067] SELinux: failed to load policy [ 90.649653][ T5118] netlink: 'syz.5.2159': attribute type 4 has an invalid length. [ 90.663272][ T5118] netlink: 'syz.5.2159': attribute type 4 has an invalid length. [ 90.907514][ T5132] loop5: detected capacity change from 0 to 8192 [ 90.939937][ T5132] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 90.948907][ T5132] FAT-fs (loop5): Filesystem has been set read-only [ 91.023064][ T5144] loop5: detected capacity change from 0 to 1024 [ 91.101692][ T5144] EXT4-fs (loop5): Ignoring removed nobh option [ 91.108537][ T5144] EXT4-fs (loop5): Ignoring removed bh option [ 91.116330][ T5144] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.131359][ T5144] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,journal_dev=0x0000000000000003,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 91.539793][ T289] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 91.629886][ T427] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.725563][ T5168] loop3: detected capacity change from 0 to 1024 [ 91.751969][ T5168] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.763558][ T5168] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.781449][ T5168] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 91.796709][ T5168] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 91.810590][ T5168] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.810590][ T5168] [ 91.820499][ T5168] EXT4-fs (loop3): Total free blocks count 0 [ 91.826699][ T5168] EXT4-fs (loop3): Free/Dirty block details [ 91.833398][ T5168] EXT4-fs (loop3): free_blocks=4293918720 [ 91.839294][ T5168] EXT4-fs (loop3): dirty_blocks=16 [ 91.844830][ T5168] EXT4-fs (loop3): Block reservation details [ 91.851162][ T5168] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 91.909818][ T289] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.925137][ T289] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 91.952873][ T5186] overlayfs: failed to resolve './file0': -2 [ 91.987264][ T5192] loop2: detected capacity change from 0 to 128 [ 91.989977][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.019384][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.030765][ T427] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.035904][ T5198] netlink: 'syz.3.2193': attribute type 4 has an invalid length. [ 92.045521][ T427] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.063076][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.066197][ T5198] netlink: 'syz.3.2193': attribute type 4 has an invalid length. [ 92.072926][ T427] usb 1-1: config 0 descriptor?? [ 92.095954][ T5192] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 92.119943][ T5192] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.131570][ T289] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.142387][ T289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.151138][ T289] usb 6-1: Product: syz [ 92.155522][ T289] usb 6-1: Manufacturer: syz [ 92.160335][ T289] usb 6-1: SerialNumber: syz [ 92.189879][ T5161] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.374032][ T5231] loop2: detected capacity change from 0 to 256 [ 92.580885][ T427] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 92.589106][ T427] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 92.597515][ T427] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 92.606147][ T427] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 92.614485][ T427] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 92.623636][ T427] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 92.633155][ T427] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 92.641836][ T427] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 92.650152][ T427] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 92.659658][ T427] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 92.669338][ T427] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 92.691374][ T306] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.850647][ T20] usb 1-1: USB disconnect, device number 5 [ 92.881768][ T5245] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2212'. [ 92.939788][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 93.059847][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.075186][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.086557][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.101039][ T306] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.111778][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.121499][ T306] usb 4-1: config 0 descriptor?? [ 93.320146][ T289] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 93.327477][ T289] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 93.335420][ T289] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 93.539845][ T289] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 93.561928][ T289] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 93.584118][ T289] usb 6-1: USB disconnect, device number 3 [ 93.593008][ T289] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 93.604212][ T306] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 93.615042][ T306] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 93.626019][ T306] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 93.635957][ T306] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 93.644540][ T306] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 93.656378][ T306] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 93.665451][ T306] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 93.676276][ T306] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 93.685253][ T306] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 93.693690][ T306] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 93.708309][ T306] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000A/input/input10 [ 93.721737][ T6] ================================================================== [ 93.730530][ T6] BUG: KASAN: use-after-free in worker_thread+0xa2e/0x1200 [ 93.738913][ T6] Read of size 8 at addr ffff888106ba6c60 by task kworker/0:0/6 [ 93.748279][ T6] [ 93.751125][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 5.15.184-syzkaller-00118-g4b77ae0e7f58 #0 [ 93.761959][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.773222][ T6] Workqueue: 0x0 (events_long) [ 93.778465][ T6] Call Trace: [ 93.782282][ T6] [ 93.785328][ T6] __dump_stack+0x21/0x30 [ 93.789996][ T6] dump_stack_lvl+0xee/0x150 [ 93.795478][ T6] ? show_regs_print_info+0x20/0x20 [ 93.800989][ T6] ? load_image+0x3a0/0x3a0 [ 93.805712][ T6] ? __schedule+0xb76/0x14c0 [ 93.810522][ T6] print_address_description+0x7f/0x2c0 [ 93.816656][ T6] ? worker_thread+0xa2e/0x1200 [ 93.821806][ T6] kasan_report+0xf1/0x140 [ 93.826622][ T6] ? worker_thread+0xa2e/0x1200 [ 93.831889][ T6] __asan_report_load8_noabort+0x14/0x20 [ 93.838115][ T6] worker_thread+0xa2e/0x1200 [ 93.843148][ T6] kthread+0x411/0x500 [ 93.847768][ T6] ? worker_clr_flags+0x190/0x190 [ 93.853270][ T6] ? kthread_blkcg+0xd0/0xd0 [ 93.858216][ T6] ret_from_fork+0x1f/0x30 [ 93.863751][ T6] [ 93.867347][ T6] [ 93.870037][ T6] Allocated by task 289: [ 93.874566][ T6] __kasan_kmalloc+0xda/0x110 [ 93.879889][ T6] __kmalloc+0x13d/0x2c0 [ 93.884901][ T6] kvmalloc_node+0x242/0x330 [ 93.889920][ T6] alloc_netdev_mqs+0x8d/0xc90 [ 93.895239][ T6] alloc_etherdev_mqs+0x34/0x40 [ 93.900452][ T6] usbnet_probe+0x219/0x2860 [ 93.905995][ T6] usb_probe_interface+0x5ff/0xae0 [ 93.911379][ T6] really_probe+0x285/0x970 [ 93.916317][ T6] __driver_probe_device+0x198/0x280 [ 93.922001][ T6] driver_probe_device+0x54/0x3e0 [ 93.927451][ T6] __device_attach_driver+0x2a6/0x460 [ 93.933202][ T6] bus_for_each_drv+0x175/0x200 [ 93.938344][ T6] __device_attach+0x2a2/0x400 [ 93.943767][ T6] device_initial_probe+0x1a/0x20 [ 93.949160][ T6] bus_probe_device+0xc0/0x1e0 [ 93.954525][ T6] device_add+0xb31/0xed0 [ 93.959601][ T6] usb_set_configuration+0x19c2/0x1f10 [ 93.965399][ T6] usb_generic_driver_probe+0x91/0x150 [ 93.971590][ T6] usb_probe_device+0x148/0x260 [ 93.976471][ T6] really_probe+0x285/0x970 [ 93.981064][ T6] __driver_probe_device+0x198/0x280 [ 93.986899][ T6] driver_probe_device+0x54/0x3e0 [ 93.992316][ T6] __device_attach_driver+0x2a6/0x460 [ 93.998793][ T6] bus_for_each_drv+0x175/0x200 [ 94.003918][ T6] __device_attach+0x2a2/0x400 [ 94.009300][ T6] device_initial_probe+0x1a/0x20 [ 94.014941][ T6] bus_probe_device+0xc0/0x1e0 [ 94.019981][ T6] device_add+0xb31/0xed0 [ 94.025045][ T6] usb_new_device+0xd06/0x1620 [ 94.030493][ T6] hub_event+0x27d8/0x42c0 [ 94.035994][ T6] process_one_work+0x6be/0xba0 [ 94.042134][ T6] worker_thread+0xa59/0x1200 [ 94.047179][ T6] kthread+0x411/0x500 [ 94.051383][ T6] ret_from_fork+0x1f/0x30 [ 94.056124][ T6] [ 94.058612][ T6] Freed by task 289: [ 94.063045][ T6] kasan_set_track+0x4a/0x70 [ 94.067846][ T6] kasan_set_free_info+0x23/0x40 [ 94.072969][ T6] ____kasan_slab_free+0x125/0x160 [ 94.078352][ T6] __kasan_slab_free+0x11/0x20 [ 94.083855][ T6] slab_free_freelist_hook+0xc2/0x190 [ 94.090571][ T6] kfree+0xc4/0x270 [ 94.095013][ T6] kvfree+0x35/0x40 [ 94.099213][ T6] netdev_freemem+0x3f/0x60 [ 94.104022][ T6] netdev_release+0x7f/0xb0 [ 94.109041][ T6] device_release+0x96/0x1c0 [ 94.114146][ T6] kobject_put+0x18a/0x270 [ 94.119045][ T6] put_device+0x1f/0x30 [ 94.124279][ T6] free_netdev+0x34b/0x450 [ 94.129770][ T6] usbnet_disconnect+0x24b/0x3a0 [ 94.135294][ T6] usb_unbind_interface+0x212/0x8c0 [ 94.141003][ T6] device_release_driver_internal+0x4c1/0x760 [ 94.147951][ T6] device_release_driver+0x19/0x20 [ 94.153872][ T6] bus_remove_device+0x2dd/0x340 [ 94.160360][ T6] device_del+0x696/0xe90 [ 94.165237][ T6] usb_disable_device+0x3a8/0x750 [ 94.171613][ T6] usb_disconnect+0x31e/0x850 [ 94.177893][ T6] hub_event+0x190c/0x42c0 [ 94.182764][ T6] process_one_work+0x6be/0xba0 [ 94.188082][ T6] worker_thread+0xd7b/0x1200 [ 94.193769][ T6] kthread+0x411/0x500 [ 94.198661][ T6] ret_from_fork+0x1f/0x30 [ 94.204368][ T6] [ 94.208433][ T6] Last potentially related work creation: [ 94.214443][ T6] kasan_save_stack+0x3a/0x60 [ 94.219975][ T6] __kasan_record_aux_stack+0xd2/0x100 [ 94.226346][ T6] kasan_record_aux_stack_noalloc+0xb/0x10 [ 94.233265][ T6] insert_work+0x51/0x310 [ 94.238638][ T6] __queue_work+0x8e5/0xc60 [ 94.246659][ T6] queue_work_on+0xd2/0x140 [ 94.253846][ T6] usbnet_link_change+0x176/0x1a0 [ 94.259749][ T6] usbnet_probe+0x1dfd/0x2860 [ 94.264894][ T6] usb_probe_interface+0x5ff/0xae0 [ 94.270616][ T6] really_probe+0x285/0x970 [ 94.275945][ T6] __driver_probe_device+0x198/0x280 [ 94.282904][ T6] driver_probe_device+0x54/0x3e0 [ 94.289281][ T6] __device_attach_driver+0x2a6/0x460 [ 94.295537][ T6] bus_for_each_drv+0x175/0x200 [ 94.300628][ T6] __device_attach+0x2a2/0x400 [ 94.306065][ T6] device_initial_probe+0x1a/0x20 [ 94.311666][ T6] bus_probe_device+0xc0/0x1e0 [ 94.317032][ T6] device_add+0xb31/0xed0 [ 94.322075][ T6] usb_set_configuration+0x19c2/0x1f10 [ 94.328912][ T6] usb_generic_driver_probe+0x91/0x150 [ 94.334955][ T6] usb_probe_device+0x148/0x260 [ 94.340249][ T6] really_probe+0x285/0x970 [ 94.346241][ T6] __driver_probe_device+0x198/0x280 [ 94.352494][ T6] driver_probe_device+0x54/0x3e0 [ 94.358813][ T6] __device_attach_driver+0x2a6/0x460 [ 94.366233][ T6] bus_for_each_drv+0x175/0x200 [ 94.372235][ T6] __device_attach+0x2a2/0x400 [ 94.377349][ T6] device_initial_probe+0x1a/0x20 [ 94.383838][ T6] bus_probe_device+0xc0/0x1e0 [ 94.391985][ T6] device_add+0xb31/0xed0 [ 94.396578][ T6] usb_new_device+0xd06/0x1620 [ 94.402343][ T6] hub_event+0x27d8/0x42c0 [ 94.407389][ T6] process_one_work+0x6be/0xba0 [ 94.413427][ T6] worker_thread+0xa59/0x1200 [ 94.420050][ T6] kthread+0x411/0x500 [ 94.424566][ T6] ret_from_fork+0x1f/0x30 [ 94.429715][ T6] [ 94.432047][ T6] The buggy address belongs to the object at ffff888106ba6000 [ 94.432047][ T6] which belongs to the cache kmalloc-4k of size 4096 [ 94.448979][ T6] The buggy address is located 3168 bytes inside of [ 94.448979][ T6] 4096-byte region [ffff888106ba6000, ffff888106ba7000) [ 94.465067][ T6] The buggy address belongs to the page: [ 94.471209][ T6] page:ffffea00041ae800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106ba0 [ 94.483698][ T6] head:ffffea00041ae800 order:3 compound_mapcount:0 compound_pincount:0 [ 94.493165][ T6] flags: 0x4000000000010200(slab|head|zone=1) [ 94.500487][ T6] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 94.510966][ T6] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 94.520911][ T6] page dumped because: kasan: bad access detected [ 94.528618][ T6] page_owner tracks the page as allocated [ 94.535321][ T6] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 1324899476, free_ts 0 [ 94.555377][ T6] post_alloc_hook+0x192/0x1b0 [ 94.560592][ T6] prep_new_page+0x1c/0x110 [ 94.567655][ T6] get_page_from_freelist+0x2cc5/0x2d50 [ 94.575626][ T6] __alloc_pages+0x18f/0x440 [ 94.580581][ T6] new_slab+0xa1/0x4d0 [ 94.585475][ T6] ___slab_alloc+0x381/0x810 [ 94.591525][ T6] __slab_alloc+0x49/0x90 [ 94.596413][ T6] kmem_cache_alloc_trace+0x146/0x270 [ 94.602077][ T6] kobject_uevent_env+0x272/0x700 [ 94.609403][ T6] kobject_uevent+0x1d/0x30 [ 94.615130][ T6] kernel_add_sysfs_param+0x103/0x130 [ 94.621640][ T6] param_sysfs_builtin+0x164/0x1e0 [ 94.628024][ T6] param_sysfs_init+0x6a/0x70 [ 94.633593][ T6] do_one_initcall+0x17f/0x500 [ 94.639464][ T6] do_initcall_level+0x16f/0x2d0 [ 94.645958][ T6] do_initcalls+0x50/0xa0 [ 94.651644][ T6] page_owner free stack trace missing [ 94.657966][ T6] [ 94.660474][ T6] Memory state around the buggy address: [ 94.668954][ T6] ffff888106ba6b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.678603][ T6] ffff888106ba6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.688222][ T6] >ffff888106ba6c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.698312][ T6] ^ [ 94.707257][ T6] ffff888106ba6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.715999][ T6] ffff888106ba6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.724717][ T6] ================================================================== [ 94.733791][ T6] Disabling lock debugging due to kernel taint [ 94.747878][ T30] kauditd_printk_skb: 2205 callbacks suppressed [ 94.747893][ T30] audit: type=1400 audit(1748014271.348:11399): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 94.782353][ T306] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 94.800314][ T306] usb 4-1: USB disconnect, device number 6 [ 94.807878][ T30] audit: type=1400 audit(1748014271.378:11400): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.831549][ T30] audit: type=1400 audit(1748014271.378:11401): avc: denied { append } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.841066][ T5303] fido_id[5303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 94.856094][ T30] audit: type=1400 audit(1748014271.378:11402): avc: denied { open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.894785][ T30] audit: type=1400 audit(1748014271.378:11403): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1