last executing test programs: 2.246437721s ago: executing program 0 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.769441249s ago: executing program 2 (id=294): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) getsockopt(r1, 0xff, 0x24, 0x0, &(0x7f00000002c0)) 1.75379198s ago: executing program 2 (id=296): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x20300) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/206) 1.679601161s ago: executing program 2 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2c, 0x25dfdbec, {0x7, 0x0, 0x0, r1, 0x80, 0x24, 0x1}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040040) 1.566632973s ago: executing program 2 (id=298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 1.566418023s ago: executing program 2 (id=299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) 1.519040563s ago: executing program 2 (id=300): syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x0, 0x5b, 0xbd, 0x97}}]}}]}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.322745257s ago: executing program 0 (id=302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) 1.304733717s ago: executing program 0 (id=304): r0 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000073000040"]) 1.234373629s ago: executing program 0 (id=306): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000500000000000000a358a0c0850000002800000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100004}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001400000004"], 0x20) 1.234284249s ago: executing program 0 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x1}) 1.189909519s ago: executing program 0 (id=308): syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ff000040720501cb652601c403010902120001000000000904"], 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) 423.610673ms ago: executing program 1 (id=315): socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5f}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 366.817443ms ago: executing program 3 (id=316): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r0, &(0x7f0000000e40)="c9674c462c5ef0eee2a73a0586d24c0840838404000000000000005082f564bede790baa386f5eb014d51c07b7a687fa384b406b77e9b502c21ff3e1db099ed64054e16b472c0755b87858c190c14af9873683a67424b7d209954a0eab4ee6c29c048d766eff2ef6aa28781f53a8819065a6aa63055e111e84d2fdcf79cabffc745605d6618dba7d24e5e3e024d244fb694275c6a540338f840f99a80d8049bf118172c53112e45ba2602d837ca0af846bdd75e9edd810198590dde425e662d3eb6f34d60fdc7ac2afa3da14e8e9a14af5e398f67f6c5cbc81e91e6132e8da326eff0a06cf", 0xfffffde9) 366.323434ms ago: executing program 1 (id=317): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 339.170164ms ago: executing program 1 (id=318): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) 309.599195ms ago: executing program 1 (id=319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0x8000000}) 144.802367ms ago: executing program 3 (id=321): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000140), 0x200008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x362026, &(0x7f0000000600)=ANY=[], 0x1, 0x0, 0x0) setreuid(0x0, 0xee00) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1dd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 144.554497ms ago: executing program 1 (id=322): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x240, &(0x7f0000000300)="$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") 143.859617ms ago: executing program 1 (id=325): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}, {@errors_remount}, {@zero_size_dir}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@time_offset}, {@dmask={'dmask', 0x3d, 0x1}}, {@allow_utime={'allow_utime', 0x3d, 0x400}}, {@gid}, {@utf8}, {@fmask}, {@time_offset={'time_offset', 0x3d, 0xb}}], [{@obj_role={'obj_role', 0x3d, 'active_logs=4'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@measure}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x26}}]}, 0xfc, 0x1557, &(0x7f0000004a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) 137.227498ms ago: executing program 3 (id=327): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0xfffffc69, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@dev}, {@multicast2}]}]}}, @timestamp}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) 74.783168ms ago: executing program 4 (id=329): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x2200003, 0x0, 0x0, 0x3, 0x80000001}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 74.507508ms ago: executing program 3 (id=330): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000, 0x200000005c832, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) 74.333228ms ago: executing program 4 (id=331): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file1\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x20, 0x1c, "fe04a3ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000018000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac000000000000000000110000000000000000000000000000000000000000000500", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 57.024539ms ago: executing program 3 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, 0x0) 55.065619ms ago: executing program 4 (id=333): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, 0x0, 0x0) 757.16µs ago: executing program 4 (id=334): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="e0000002000000000000000000000000000004d332000000fc0200000000000000000000000000000200000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000c0010000000000000000000000000000000000df11000000000000fdffffffffffffff00000000000000000a0000000000000009000000"], 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e01000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f0000000d80)=[{&(0x7f0000000200)="19f8cd8d33b93c5d78041b1bb794bc", 0xf}, {&(0x7f0000000300)="e2ede35c13fe14963ccacca78ec63eba813883fc9d559d5b5a7ae3fc8d90a0e381c099800f9477af1b753415950553f5648c7aa1d8b7f6", 0x37}], 0x2) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000008c0)=[{{&(0x7f0000000380)=@l2tp={0x2, 0x0, @local}, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/139}, {&(0x7f00000007c0)=""/193}], 0x0, &(0x7f0000001200)=""/4092}, 0x200004}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000004200)=""/4103}, {&(0x7f0000003200)=""/4096}], 0x0, &(0x7f0000000680)=""/103}, 0xa}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r9}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 377.41µs ago: executing program 4 (id=335): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xf}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 250.33µs ago: executing program 3 (id=336): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=337): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 20.266422][ T30] audit: type=1400 audit(1753636740.304:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.268111][ T274] cgroup: Unknown subsys name 'net' [ 20.289232][ T30] audit: type=1400 audit(1753636740.304:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.316581][ T30] audit: type=1400 audit(1753636740.334:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.316805][ T274] cgroup: Unknown subsys name 'devices' [ 20.549355][ T274] cgroup: Unknown subsys name 'hugetlb' [ 20.554960][ T274] cgroup: Unknown subsys name 'rlimit' [ 20.755239][ T30] audit: type=1400 audit(1753636740.794:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.778435][ T30] audit: type=1400 audit(1753636740.794:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.790165][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.803496][ T30] audit: type=1400 audit(1753636740.794:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.834857][ T30] audit: type=1400 audit(1753636740.854:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.852357][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.860920][ T30] audit: type=1400 audit(1753636740.854:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.894805][ T30] audit: type=1400 audit(1753636740.894:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.920339][ T30] audit: type=1400 audit(1753636740.894:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.243314][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.250572][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.258146][ T282] device bridge_slave_0 entered promiscuous mode [ 23.277561][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.284618][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.292122][ T282] device bridge_slave_1 entered promiscuous mode [ 23.325784][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.332905][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.340425][ T283] device bridge_slave_0 entered promiscuous mode [ 23.348675][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.355737][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.363471][ T283] device bridge_slave_1 entered promiscuous mode [ 23.393688][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.400796][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.408258][ T286] device bridge_slave_0 entered promiscuous mode [ 23.416519][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.423601][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.431063][ T286] device bridge_slave_1 entered promiscuous mode [ 23.465433][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.472532][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.480097][ T285] device bridge_slave_0 entered promiscuous mode [ 23.499435][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.506496][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.513986][ T285] device bridge_slave_1 entered promiscuous mode [ 23.575912][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.583010][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.590642][ T284] device bridge_slave_0 entered promiscuous mode [ 23.612482][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.619597][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.626942][ T284] device bridge_slave_1 entered promiscuous mode [ 23.755745][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.762831][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.770195][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.777240][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.792188][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.799274][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.806546][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.813608][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.828583][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.835736][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.843058][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.850109][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.867601][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.874669][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.881963][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.889108][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.903098][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.910179][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.917479][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.924546][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.965610][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.972982][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.980389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.988569][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.995827][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.003120][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.010370][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.017982][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.025269][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.032822][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.040386][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.068177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.076630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.084305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.092684][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.099769][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.107644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.115812][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.122865][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.130383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.137932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.145321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.153559][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.160605][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.168226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.175686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.183888][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.190937][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.198440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.206607][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.213660][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.258295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.266694][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.273794][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.281321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.289834][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.296855][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.304268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.312458][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.319525][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.326877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.335154][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.342215][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.349698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.357983][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.365004][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.372429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.380420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.388455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.396373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.404603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.412938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.420883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.429011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.436907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.445023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.452976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.461244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.481964][ T284] device veth0_vlan entered promiscuous mode [ 24.488612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.497043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.505243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.512930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.520788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.528942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.539750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.548265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.561411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.569884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.582258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.590881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.604481][ T283] device veth0_vlan entered promiscuous mode [ 24.619312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.627760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.636049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.644159][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.652391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.660482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.669283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.676791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.684443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.692001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.701593][ T286] device veth0_vlan entered promiscuous mode [ 24.710854][ T285] device veth0_vlan entered promiscuous mode [ 24.718646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.726643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.734878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.743036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.750911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.758749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.766190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.776882][ T284] device veth1_macvtap entered promiscuous mode [ 24.787914][ T282] device veth0_vlan entered promiscuous mode [ 24.794467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.802972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.811417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.824973][ T286] device veth1_macvtap entered promiscuous mode [ 24.834164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.848487][ T285] device veth1_macvtap entered promiscuous mode [ 24.856050][ T283] device veth1_macvtap entered promiscuous mode [ 24.865748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.874155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.881987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.890682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.899221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.907686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.926579][ T282] device veth1_macvtap entered promiscuous mode [ 24.933707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.942283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.951109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.959842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.968598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.976731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.985154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.992996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.001512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.010066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.018617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.044521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.053739][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 25.055970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.071238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.079607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.090372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.098718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.107033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.115368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.156353][ T334] loop6: detected capacity change from 0 to 7 [ 25.209088][ T341] loop1: detected capacity change from 0 to 1024 [ 25.220016][ T341] ======================================================= [ 25.220016][ T341] WARNING: The mand mount option has been deprecated and [ 25.220016][ T341] and is ignored by this kernel. Remove the mand [ 25.220016][ T341] option from the mount to silence this warning. [ 25.220016][ T341] ======================================================= [ 25.268821][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 25.268837][ T30] audit: type=1400 audit(1753636745.314:114): avc: denied { read write } for pid=335 comm="syz.2.3" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 25.314194][ T30] audit: type=1400 audit(1753636745.314:115): avc: denied { open } for pid=335 comm="syz.2.3" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 25.340089][ T341] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 25.381591][ T350] loop3: detected capacity change from 0 to 1024 [ 25.410105][ T30] audit: type=1400 audit(1753636745.314:116): avc: denied { ioctl } for pid=335 comm="syz.2.3" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 25.439734][ T350] EXT4-fs (loop3): Ignoring removed nobh option [ 25.446109][ T350] EXT4-fs (loop3): Ignoring removed bh option [ 25.452343][ T350] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.584996][ T341] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c802e018, mo2=0000] [ 25.653822][ T350] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 26.060135][ T341] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.2: bad orphan inode 11 [ 26.119551][ T341] ext4_test_bit(bit=10, block=4) = 1 [ 26.841314][ T30] audit: type=1400 audit(1753636745.524:117): avc: denied { read } for pid=87 comm="acpid" name="event7" dev="devtmpfs" ino=561 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 26.863441][ T341] is_bad_inode(inode)=0 [ 26.868468][ T359] fuse: Bad value for 'fd' [ 26.876514][ T341] NEXT_ORPHAN(inode)=3254779904 [ 26.882566][ T341] max_ino=32 [ 26.885826][ T341] i_nlink=0 [ 26.893957][ T341] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 2: comm syz.1.2: lblock 2 mapped to illegal pblock 2 (length 1) [ 26.911936][ T30] audit: type=1400 audit(1753636745.524:118): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=561 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 26.934881][ T364] fuse: Bad value for 'fd' [ 26.935065][ T30] audit: type=1400 audit(1753636745.524:119): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=561 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 26.939408][ T341] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 26.964059][ T30] audit: type=1400 audit(1753636745.534:120): avc: denied { write } for pid=335 comm="syz.2.3" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.993088][ T341] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 48: comm syz.1.2: lblock 0 mapped to illegal pblock 48 (length 1) [ 27.008025][ T341] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 27.008039][ T30] audit: type=1400 audit(1753636745.724:121): avc: denied { mount } for pid=342 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.027041][ T341] EXT4-fs error (device loop1): ext4_acquire_dquot:6198: comm syz.1.2: Failed to acquire dquot type 0 [ 27.051682][ T341] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 27.061506][ T341] EXT4-fs error (device loop1): ext4_evict_inode:283: inode #11: comm syz.1.2: mark_inode_dirty error [ 27.072968][ T341] EXT4-fs warning (device loop1): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 27.083503][ T341] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,noblock_validity,mblk_io_submit,data_err=ignore,debug,inlinecrypt,,errors=continue. Quota mode: none. [ 27.123786][ T341] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 1: comm syz.1.2: lblock 1 mapped to illegal pblock 1 (length 1) [ 27.138010][ T341] EXT4-fs error (device loop1): ext4_acquire_dquot:6198: comm syz.1.2: Failed to acquire dquot type 0 [ 27.160448][ T283] EXT4-fs error (device loop1): __ext4_get_inode_loc:4352: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 27.181650][ T283] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 27.191762][ T283] EXT4-fs error (device loop1): ext4_quota_off:6504: inode #3: comm syz-executor: mark_inode_dirty error [ 27.209073][ T350] syz.3.4 (350) used greatest stack depth: 21880 bytes left [ 27.270320][ T372] loop3: detected capacity change from 0 to 512 [ 27.279146][ T372] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 27.288270][ T372] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.302145][ T372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 27.333927][ T372] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 27.347514][ T372] EXT4-fs (loop3): 1 truncate cleaned up [ 27.353261][ T372] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 27.466664][ T381] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 27.475454][ T381] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 27.484731][ T381] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 28.278973][ T390] loop4: detected capacity change from 0 to 256 [ 29.123073][ T386] fuse: Bad value for 'fd' [ 29.128666][ T390] FAT-fs (loop4): Unrecognized mount option "uni_xlate=ìJ!e0AÀ_ :ö\1" or missing value [ 29.133424][ T59] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 29.152359][ T390] binder: 389:390 unknown command 1701080931 [ 29.158731][ T390] binder: 389:390 ioctl c0306201 200000000080 returned -22 [ 29.723975][ T407] loop4: detected capacity change from 0 to 512 [ 29.796952][ T407] EXT4-fs (loop4): orphan cleanup on readonly fs [ 29.804233][ T407] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.16: Failed to acquire dquot type 1 [ 29.816366][ T407] EXT4-fs (loop4): 1 truncate cleaned up [ 29.822430][ T407] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 29.846053][ T407] bridge0: port 3(gretap0) entered blocking state [ 29.852567][ T407] bridge0: port 3(gretap0) entered disabled state [ 29.859538][ T407] device gretap0 entered promiscuous mode [ 29.865404][ T407] bridge0: port 3(gretap0) entered blocking state [ 29.871856][ T407] bridge0: port 3(gretap0) entered forwarding state [ 30.017316][ T59] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 30.059109][ T59] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 30.069908][ T59] usb 2-1: config 135 has no interface number 0 [ 30.076340][ T59] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 30.290035][ T59] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 30.343933][ T59] usb 2-1: config 135 interface 230 has no altsetting 0 [ 30.381545][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 30.381560][ T30] audit: type=1326 audit(1753636750.424:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=402 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffa1d9a9 code=0x7ffc0000 [ 30.387243][ T59] usb 2-1: string descriptor 0 read error: -71 [ 30.393902][ T423] loop4: detected capacity change from 0 to 512 [ 30.414576][ T59] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 30.418929][ T30] audit: type=1326 audit(1753636750.424:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=402 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f37ffa1d9a9 code=0x7ffc0000 [ 30.455878][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.460568][ T416] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'. [ 30.472837][ T416] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 30.485124][ T416] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 30.494771][ T416] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 30.497272][ T59] usb 2-1: can't set config #135, error -71 [ 30.547992][ T59] usb 2-1: USB disconnect, device number 2 [ 30.555140][ T30] audit: type=1326 audit(1753636750.424:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=402 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffa1d9a9 code=0x7ffc0000 [ 30.566684][ T423] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.19: casefold flag without casefold feature [ 30.589043][ T30] audit: type=1326 audit(1753636750.424:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=402 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f37ffa1d9a9 code=0x7ffc0000 [ 30.614495][ T30] audit: type=1326 audit(1753636750.424:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=402 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffa1d9a9 code=0x7ffc0000 [ 30.638320][ T30] audit: type=1326 audit(1753636750.434:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=402 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f37ffa1d9a9 code=0x7ffc0000 [ 30.662009][ T30] audit: type=1326 audit(1753636750.434:163): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=402 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffa1d9a9 code=0x7ffc0000 [ 30.686915][ T30] audit: type=1326 audit(1753636750.434:164): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=402 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f37ffa1d9a9 code=0x7ffc0000 [ 30.701943][ T423] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.19: couldn't read orphan inode 15 (err -117) [ 30.718620][ T30] audit: type=1326 audit(1753636750.434:165): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=402 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffa1d9a9 code=0x7ffc0000 [ 30.765434][ T423] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 30.780311][ T429] fuse: Bad value for 'fd' [ 30.789749][ T436] loop3: detected capacity change from 0 to 128 [ 30.790238][ T30] audit: type=1326 audit(1753636750.434:166): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=402 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f37ffa1d9a9 code=0x7ffc0000 [ 30.831542][ T436] mmap: syz.3.25 (436) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 30.973538][ T427] loop1: detected capacity change from 0 to 40427 [ 30.987355][ T427] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 31.007790][ T427] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 31.142672][ T443] overlayfs: missing 'workdir' [ 31.404129][ T427] F2FS-fs (loop1): invalid crc value [ 31.440049][ T450] loop0: detected capacity change from 0 to 16 [ 31.452531][ T427] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.501257][ T453] fuse: Bad value for 'fd' [ 31.511911][ T427] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.519229][ T427] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.527233][ T450] erofs: dax options not supported [ 31.577324][ T427] syz.1.22[427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.577401][ T427] syz.1.22[427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.599360][ T461] loop4: detected capacity change from 0 to 128 [ 31.672086][ T465] fuse: Bad value for 'fd' [ 31.678349][ T427] attempt to access beyond end of device [ 31.678349][ T427] loop1: rw=2049, want=79872, limit=40427 [ 31.854912][ T466] sch_fq: defrate 0 ignored. [ 31.991780][ T427] attempt to access beyond end of device [ 31.991780][ T427] loop1: rw=2049, want=81920, limit=40427 [ 32.015037][ T427] attempt to access beyond end of device [ 32.015037][ T427] loop1: rw=2049, want=51064, limit=40427 [ 32.024688][ T461] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.047065][ T450] xt_hashlimit: size too large, truncated to 1048576 [ 32.080011][ T461] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.154513][ T461] syz.4.31 (pid 461) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 32.192523][ T461] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.258119][ T10] attempt to access beyond end of device [ 32.258119][ T10] loop1: rw=1, want=79872, limit=40427 [ 32.279520][ T10] attempt to access beyond end of device [ 32.279520][ T10] loop1: rw=1, want=81920, limit=40427 [ 32.300419][ T10] attempt to access beyond end of device [ 32.300419][ T10] loop1: rw=1, want=51064, limit=40427 [ 32.475734][ T59] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 33.587471][ T59] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 33.649568][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.661094][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 33.671837][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 33.685179][ T59] usb 3-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00 [ 33.694543][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.705814][ T59] usb 3-1: config 0 descriptor?? [ 33.727239][ T387] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 33.734962][ T471] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.927210][ T361] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.107330][ T387] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.118563][ T387] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 34.208101][ T387] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 34.222945][ T387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 34.231154][ T387] usb 2-1: SerialNumber: syz [ 34.279311][ T387] usb 2-1: bad CDC descriptors [ 34.285115][ T387] usb-storage 2-1:1.0: USB Mass Storage device detected [ 34.308823][ T59] logitech-djreceiver 0003:046D:C70A.0001: hidraw0: USB HID v0.00 Device [HID 046d:c70a] on usb-dummy_hcd.2-1/input0 [ 34.327473][ T361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.327649][ T387] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 34.347290][ T361] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 34.347436][ T387] scsi host1: usb-storage 2-1:1.0 [ 34.361977][ T361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.367397][ T417] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 34.404070][ T361] usb 1-1: config 0 descriptor?? [ 34.687813][ T361] usb 3-1: USB disconnect, device number 2 [ 34.718126][ T511] fido_id[511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 34.787247][ T417] usb 5-1: Using ep0 maxpacket: 32 [ 34.907234][ T417] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 34.916380][ T417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.925656][ T417] usb 5-1: config 0 descriptor?? [ 35.017197][ T20] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 35.309410][ T533] loop2: detected capacity change from 0 to 1024 [ 35.377234][ T20] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 35.385856][ T20] usb 4-1: config 0 has no interface number 0 [ 35.482744][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 35.482758][ T30] audit: type=1400 audit(1753636755.524:209): avc: denied { name_bind } for pid=537 comm="syz.2.56" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 35.510346][ T30] audit: type=1400 audit(1753636755.524:210): avc: denied { node_bind } for pid=537 comm="syz.2.56" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.567258][ T20] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 35.576473][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.584701][ T20] usb 4-1: Product: syz [ 35.588937][ T20] usb 4-1: Manufacturer: syz [ 35.593544][ T20] usb 4-1: SerialNumber: syz [ 35.599065][ T20] usb 4-1: config 0 descriptor?? [ 35.748742][ T59] usb 1-1: USB disconnect, device number 2 [ 35.763978][ T30] audit: type=1400 audit(1753636755.804:211): avc: denied { write } for pid=542 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.790320][ T30] audit: type=1326 audit(1753636755.824:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=478 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26174f9a9 code=0x7fc00000 [ 35.859790][ T30] audit: type=1400 audit(1753636755.904:213): avc: denied { create } for pid=547 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.880082][ T30] audit: type=1400 audit(1753636755.904:214): avc: denied { write } for pid=547 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.906289][ T30] audit: type=1400 audit(1753636755.944:215): avc: denied { ioctl } for pid=552 comm="syz.0.61" path="socket:[16831]" dev="sockfs" ino=16831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.952426][ T559] loop0: detected capacity change from 0 to 128 [ 35.980781][ T559] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.991512][ T559] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.107258][ T573] loop0: detected capacity change from 0 to 1024 [ 36.128468][ T30] audit: type=1400 audit(1753636756.174:216): avc: denied { write } for pid=574 comm="syz.1.71" name="ptype" dev="proc" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 36.174063][ T573] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.199491][ T573] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 36.215107][ T573] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 420 with error 28 [ 36.223095][ T584] loop8: detected capacity change from 0 to 8 [ 36.227767][ T573] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.227767][ T573] [ 36.243445][ T573] EXT4-fs (loop0): Total free blocks count 0 [ 36.249549][ T573] EXT4-fs (loop0): Free/Dirty block details [ 36.255537][ T573] EXT4-fs (loop0): free_blocks=68451041280 [ 36.261666][ T573] EXT4-fs (loop0): dirty_blocks=448 [ 36.266970][ T573] EXT4-fs (loop0): Block reservation details [ 36.273112][ T573] EXT4-fs (loop0): i_reserved_data_blocks=28 [ 36.288188][ T378] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 36.300901][ T378] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.300901][ T378] [ 36.319194][ T30] audit: type=1400 audit(1753636756.354:217): avc: denied { setopt } for pid=585 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.343052][ T30] audit: type=1400 audit(1753636756.364:218): avc: denied { create } for pid=585 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.434638][ T604] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 36.637500][ T361] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.667719][ T492] usb 2-1: USB disconnect, device number 3 [ 36.877219][ T361] usb 1-1: Using ep0 maxpacket: 16 [ 37.037294][ T361] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.061093][ T624] loop1: detected capacity change from 0 to 512 [ 37.072305][ T20] usb 5-1: USB disconnect, device number 2 [ 37.087603][ T626] loop4: detected capacity change from 0 to 512 [ 37.092230][ T624] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #3: comm syz.1.92: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 37.112135][ T624] EXT4-fs error (device loop1): ext4_quota_enable:6409: comm syz.1.92: Bad quota inode: 3, type: 0 [ 37.123111][ T624] EXT4-fs warning (device loop1): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 37.127314][ T361] usb 1-1: config 4 has an invalid interface number: 237 but max is 0 [ 37.146087][ T361] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 37.154421][ T624] EXT4-fs (loop1): mount failed [ 37.156240][ T361] usb 1-1: config 4 has no interface number 0 [ 37.167358][ T361] usb 1-1: config 4 interface 237 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 37.170101][ T626] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 37.188862][ T626] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 37.197032][ T626] System zones: 0-1, 15-15, 18-18, 34-34 [ 37.204745][ T626] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.211752][ T626] EXT4-fs warning (device loop4): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 37.226865][ T626] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 37.233912][ T626] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.93: bad orphan inode 16 [ 37.244036][ T626] ext4_test_bit(bit=15, block=18) = 1 [ 37.249540][ T626] is_bad_inode(inode)=0 [ 37.260306][ T626] NEXT_ORPHAN(inode)=0 [ 37.265891][ T626] max_ino=32 [ 37.269230][ T626] i_nlink=2 [ 37.272492][ T626] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.304239][ T626] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 37.347315][ T361] usb 1-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=c8.54 [ 37.356706][ T361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.364900][ T361] usb 1-1: Product: syz [ 37.387273][ T361] usb 1-1: Manufacturer: syz [ 37.397991][ T361] usb 1-1: SerialNumber: syz [ 37.437293][ T646] loop1: detected capacity change from 0 to 256 [ 37.467062][ T648] loop4: detected capacity change from 0 to 1024 [ 37.472604][ T646] FAT-fs (loop1): Directory bread(block 64) failed [ 37.480361][ T646] FAT-fs (loop1): Directory bread(block 65) failed [ 37.487601][ T646] FAT-fs (loop1): Directory bread(block 66) failed [ 37.494236][ T646] FAT-fs (loop1): Directory bread(block 67) failed [ 37.500918][ T646] FAT-fs (loop1): Directory bread(block 68) failed [ 37.508462][ T648] EXT4-fs (loop4): Ignoring removed bh option [ 37.512863][ T646] FAT-fs (loop1): Directory bread(block 69) failed [ 37.523236][ T648] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.532414][ T646] FAT-fs (loop1): Directory bread(block 70) failed [ 37.547794][ T646] FAT-fs (loop1): Directory bread(block 71) failed [ 37.556975][ T646] FAT-fs (loop1): Directory bread(block 72) failed [ 37.563976][ T646] FAT-fs (loop1): Directory bread(block 73) failed [ 37.570465][ T648] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 37.608616][ T656] 8021q: VLANs not supported on gre0 [ 37.688865][ T361] usbhid 1-1:4.237: couldn't find an input interrupt endpoint [ 37.706439][ T361] usb 1-1: USB disconnect, device number 3 [ 37.731858][ T666] netlink: 228 bytes leftover after parsing attributes in process `syz.1.109'. [ 37.755880][ T417] usb 4-1: USB disconnect, device number 2 [ 37.810624][ T672] loop1: detected capacity change from 0 to 4096 [ 37.836349][ T672] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 37.882078][ T675] loop6: detected capacity change from 0 to 7 [ 37.900021][ T59] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.007225][ T492] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 38.210868][ T702] process 'syz.0.126' launched './file2' with NULL argv: empty string added [ 38.247429][ T492] usb 5-1: Using ep0 maxpacket: 8 [ 38.317263][ T417] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 38.327349][ T59] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.359876][ T711] loop0: detected capacity change from 0 to 1024 [ 38.367379][ T492] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 38.374820][ T492] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 38.386277][ T492] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 38.417307][ T59] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 38.419077][ T711] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.425515][ T59] usb 3-1: config 6 has no interface number 0 [ 38.425551][ T59] usb 3-1: config 6 interface 200 has no altsetting 0 [ 38.450393][ T711] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 38.465472][ T711] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 38.479526][ T711] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.479526][ T711] [ 38.489533][ T711] EXT4-fs (loop0): Total free blocks count 0 [ 38.495548][ T711] EXT4-fs (loop0): Free/Dirty block details [ 38.501582][ T492] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 38.501831][ T711] EXT4-fs (loop0): free_blocks=68451041280 [ 38.509492][ T492] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 38.515240][ T711] EXT4-fs (loop0): dirty_blocks=64 [ 38.526681][ T492] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 38.531613][ T711] EXT4-fs (loop0): Block reservation details [ 38.548257][ T711] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 38.567232][ T417] usb 4-1: Using ep0 maxpacket: 32 [ 38.572930][ T378] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.585233][ T378] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.585233][ T378] [ 38.585906][ T715] loop1: detected capacity change from 0 to 512 [ 38.617317][ T492] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 38.624908][ T492] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 38.636190][ T715] EXT4-fs (loop1): first meta block group too large: 3 (group descriptor block count 1) [ 38.643332][ T59] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 38.656863][ T492] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 38.673438][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.683360][ T59] usb 3-1: Product: syz [ 38.687832][ T417] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 38.699356][ T59] usb 3-1: Manufacturer: syz [ 38.704006][ T59] usb 3-1: SerialNumber: syz [ 38.708878][ T417] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 38.721032][ T417] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.887238][ T417] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 38.896466][ T417] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 38.906754][ T417] usb 4-1: Product: syz [ 38.911599][ T417] usb 4-1: Manufacturer: syz [ 38.916237][ T417] usb 4-1: SerialNumber: syz [ 38.937248][ T492] usb 5-1: string descriptor 0 read error: -22 [ 38.943506][ T492] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 38.955212][ T492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.188176][ T417] usb 4-1: USB disconnect, device number 3 [ 39.200116][ T492] usb 5-1: USB disconnect, device number 3 [ 39.237468][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.477200][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 39.758043][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 39.768155][ T6] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 39.776267][ T6] usb 2-1: Product: syz [ 39.781271][ T6] usb 2-1: Manufacturer: syz [ 39.785896][ T6] usb 2-1: SerialNumber: syz [ 39.797612][ T6] usb 2-1: config 0 descriptor?? [ 40.005855][ T785] capability: warning: `syz.3.160' uses deprecated v2 capabilities in a way that may be insecure [ 40.007250][ T361] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 40.377299][ T361] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 40.388753][ T361] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.397190][ T492] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 40.399304][ T361] usb 5-1: config 0 interface 0 has no altsetting 0 [ 40.412859][ T361] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 40.421942][ T361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.431032][ T361] usb 5-1: config 0 descriptor?? [ 40.753852][ T417] usb 3-1: USB disconnect, device number 3 [ 40.767322][ T492] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 40.775543][ T492] usb 4-1: config 0 has no interface number 0 [ 40.784727][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 40.784741][ T30] audit: type=1400 audit(1753636760.824:246): avc: denied { mounton } for pid=797 comm="syz.2.166" path="/31/file0" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 40.833446][ T802] 9pnet: Insufficient options for proto=fd [ 40.851369][ T804] loop2: detected capacity change from 0 to 256 [ 40.898616][ T804] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.902761][ T361] uclogic 0003:5543:0064.0002: unknown main item tag 0x4 [ 40.909620][ T804] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 40.917084][ T361] uclogic 0003:5543:0064.0002: item fetching failed at offset 6/7 [ 40.927680][ T804] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 40.933692][ T361] uclogic 0003:5543:0064.0002: parse failed [ 40.950778][ T30] audit: type=1400 audit(1753636760.984:247): avc: denied { remove_name } for pid=803 comm="syz.2.169" name="file0" dev="loop2" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.950983][ T30] audit: type=1400 audit(1753636760.994:248): avc: denied { rename } for pid=803 comm="syz.2.169" name="file0" dev="loop2" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.973862][ T361] uclogic: probe of 0003:5543:0064.0002 failed with error -22 [ 40.996786][ T492] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 41.007890][ T30] audit: type=1400 audit(1753636761.054:249): avc: denied { add_name } for pid=803 comm="syz.2.169" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.022399][ T492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.045941][ T492] usb 4-1: Product: syz [ 41.049977][ T30] audit: type=1400 audit(1753636761.084:250): avc: denied { associate } for pid=803 comm="syz.2.169" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 41.050411][ T492] usb 4-1: Manufacturer: syz [ 41.097718][ T492] usb 4-1: SerialNumber: syz [ 41.103379][ T492] usb 4-1: config 0 descriptor?? [ 41.113027][ T361] usb 5-1: USB disconnect, device number 4 [ 41.161007][ T807] loop2: detected capacity change from 0 to 1024 [ 41.169446][ T807] EXT4-fs (loop2): Ignoring removed oldalloc option [ 41.176111][ T807] EXT4-fs (loop2): Ignoring removed bh option [ 41.182503][ T807] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.198381][ T807] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 41.367261][ T807] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.170: Allocating blocks 1-17 which overlap fs metadata [ 41.386419][ T807] syz.2.170 (807) used greatest stack depth: 19680 bytes left [ 41.887170][ T492] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.927184][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 41.979913][ T417] usb 2-1: USB disconnect, device number 4 [ 42.167281][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 42.247227][ T492] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 42.258172][ T492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.269216][ T492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.278988][ T492] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 42.297234][ T6] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 42.305522][ T6] usb 5-1: config 0 has no interface number 0 [ 42.311643][ T6] usb 5-1: config 0 interface 184 has no altsetting 0 [ 42.337210][ T417] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.367346][ T492] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 42.376457][ T492] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 42.384697][ T492] usb 3-1: Manufacturer: syz [ 42.389972][ T492] usb 3-1: config 0 descriptor?? [ 42.437224][ T59] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.507235][ T6] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 42.516368][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.524522][ T6] usb 5-1: Product: syz [ 42.528809][ T6] usb 5-1: Manufacturer: syz [ 42.533412][ T6] usb 5-1: SerialNumber: syz [ 42.538801][ T6] usb 5-1: config 0 descriptor?? [ 42.577730][ T6] smsc75xx v1.0.0 [ 42.597176][ T417] usb 2-1: Using ep0 maxpacket: 16 [ 42.717344][ T417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.728385][ T417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.738272][ T417] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.751137][ T417] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.760239][ T417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.769293][ T417] usb 2-1: config 0 descriptor?? [ 42.807286][ T59] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 42.818594][ T59] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.831525][ T59] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.840625][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.849326][ T59] usb 1-1: config 0 descriptor?? [ 42.887762][ T59] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 42.917274][ T492] usbhid 3-1:0.0: can't add hid device: -71 [ 42.923403][ T492] usbhid: probe of 3-1:0.0 failed with error -71 [ 42.930889][ T492] usb 3-1: USB disconnect, device number 4 [ 43.123295][ T20] usb 4-1: USB disconnect, device number 4 [ 43.136075][ T30] audit: type=1400 audit(1753636763.174:251): avc: denied { name_bind } for pid=844 comm="syz.3.186" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 43.237309][ T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 43.252839][ T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 43.317234][ T417] usbhid 2-1:0.0: can't add hid device: -71 [ 43.323247][ T417] usbhid: probe of 2-1:0.0 failed with error -71 [ 43.331053][ T417] usb 2-1: USB disconnect, device number 5 [ 43.390548][ T856] loop2: detected capacity change from 0 to 8192 [ 43.441124][ T856] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.454209][ T30] audit: type=1400 audit(1753636763.494:252): avc: denied { mounton } for pid=855 comm="syz.2.191" path="/47/file2/file0" dev="loop2" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 43.522176][ T286] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 43.530882][ T286] FAT-fs (loop2): Filesystem has been set read-only [ 43.651348][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 43.660888][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 43.738368][ T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 43.763865][ T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 43.774290][ T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 43.793773][ T6] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 43.817013][ T6] usb 5-1: USB disconnect, device number 5 [ 43.879760][ T913] loop2: detected capacity change from 0 to 1024 [ 43.922872][ T913] EXT4-fs (loop2): Ignoring removed bh option [ 43.980668][ T913] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,block_validity,max_dir_size_kb=0x0000000000000009,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 44.021504][ T30] audit: type=1400 audit(1753636764.064:253): avc: denied { execute } for pid=912 comm="syz.2.215" path="/55/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.056755][ T930] loop3: detected capacity change from 0 to 16 [ 44.074838][ T930] erofs: (device loop3): mounted with root inode @ nid 36. [ 44.085555][ T930] SELinux: (dev loop3, type erofs) getxattr errno 117 [ 44.181077][ T942] loop3: detected capacity change from 0 to 128 [ 44.188514][ T942] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 44.200092][ T942] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 44.208182][ T942] FAT-fs (loop3): Filesystem has been set read-only [ 44.214850][ T942] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 44.222848][ T942] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 44.277204][ T361] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 44.356921][ T30] audit: type=1400 audit(1753636764.394:254): avc: denied { unmount } for pid=962 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.357201][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.400607][ T967] netlink: 148 bytes leftover after parsing attributes in process `syz.3.239'. [ 44.426055][ T973] loop3: detected capacity change from 0 to 128 [ 44.538531][ T30] audit: type=1326 audit(1753636764.584:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=979 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91dc2269a9 code=0x7ffc0000 [ 44.637253][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 44.677326][ T361] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.701000][ T1001] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 44.727219][ T361] usb 2-1: not running at top speed; connect to a high speed hub [ 44.732325][ T1003] loop3: detected capacity change from 0 to 256 [ 44.757505][ T6] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 44.772537][ T1003] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 44.807331][ T361] usb 2-1: config 8 has an invalid interface number: 24 but max is 0 [ 44.816065][ T361] usb 2-1: config 8 has no interface number 0 [ 44.822224][ T361] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 44.833184][ T361] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid maxpacket 27361, setting to 64 [ 44.844342][ T361] usb 2-1: config 8 interface 24 has no altsetting 0 [ 44.927280][ T6] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 44.936618][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.948845][ T6] usb 3-1: Product: syz [ 44.953213][ T6] usb 3-1: Manufacturer: syz [ 44.958093][ T6] usb 3-1: SerialNumber: syz [ 44.967424][ T6] usb 3-1: config 0 descriptor?? [ 44.971545][ T1017] overlayfs: failed to clone upperpath [ 44.987244][ T934] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 44.989214][ T1019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 45.003163][ T1019] device gretap0 left promiscuous mode [ 45.008852][ T361] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 45.008911][ T1019] bridge0: port 3(gretap0) entered disabled state [ 45.025422][ T361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.033830][ T361] usb 2-1: Product: syz [ 45.039063][ T361] usb 2-1: Manufacturer: syz [ 45.039202][ T1019] device bridge_slave_1 left promiscuous mode [ 45.044068][ T361] usb 2-1: SerialNumber: syz [ 45.052484][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.063615][ T1019] device bridge_slave_0 left promiscuous mode [ 45.067262][ T926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 45.076857][ T926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 45.083951][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.125762][ T632] usb 1-1: USB disconnect, device number 4 [ 45.157211][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.214926][ T492] usb 3-1: USB disconnect, device number 5 [ 45.267483][ T1038] loop0: detected capacity change from 0 to 512 [ 45.328348][ T1038] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.368939][ T361] usb 2-1: USB disconnect, device number 6 [ 45.371052][ T1053] netlink: 48 bytes leftover after parsing attributes in process `syz.4.280'. [ 45.500587][ T1066] overlayfs: failed to clone upperpath [ 45.527258][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.545042][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.564101][ T39] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 45.578900][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.587852][ T39] usb 4-1: config 0 descriptor?? [ 45.823875][ T1086] loop1: detected capacity change from 0 to 256 [ 45.835900][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 45.835916][ T30] audit: type=1400 audit(1753636765.874:269): avc: denied { getopt } for pid=1083 comm="syz.2.294" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.897277][ T1088] input: syz1 as /devices/virtual/input/input4 [ 45.897564][ T30] audit: type=1400 audit(1753636765.934:270): avc: denied { read write } for pid=1087 comm="syz.2.296" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.938554][ T1086] FAT-fs (loop1): Directory bread(block 64) failed [ 45.945132][ T1086] FAT-fs (loop1): Directory bread(block 65) failed [ 45.971588][ T1086] FAT-fs (loop1): Directory bread(block 66) failed [ 45.987319][ T1086] FAT-fs (loop1): Directory bread(block 67) failed [ 45.997229][ T30] audit: type=1400 audit(1753636765.934:271): avc: denied { open } for pid=1087 comm="syz.2.296" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.023928][ T1086] FAT-fs (loop1): Directory bread(block 68) failed [ 46.037647][ T1086] FAT-fs (loop1): Directory bread(block 69) failed [ 46.055408][ T1086] FAT-fs (loop1): Directory bread(block 70) failed [ 46.062713][ T1086] FAT-fs (loop1): Directory bread(block 71) failed [ 46.070083][ T39] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 46.087194][ T30] audit: type=1400 audit(1753636765.934:272): avc: denied { ioctl } for pid=1087 comm="syz.2.296" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.117406][ T39] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 46.129453][ T1086] FAT-fs (loop1): Directory bread(block 72) failed [ 46.136016][ T1086] FAT-fs (loop1): Directory bread(block 73) failed [ 46.147062][ T30] audit: type=1400 audit(1753636765.944:273): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=697 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.174689][ T30] audit: type=1400 audit(1753636765.944:274): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=697 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.204778][ T30] audit: type=1400 audit(1753636765.944:275): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=697 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.267992][ T39] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x4D [ 46.397216][ T361] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 46.487208][ T39] cp2112 0003:10C4:EA90.0003: error requesting SMBus config [ 46.495619][ T39] cp2112: probe of 0003:10C4:EA90.0003 failed with error -71 [ 46.504967][ T39] usb 4-1: USB disconnect, device number 5 [ 46.531898][ T1118] fido_id[1118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 46.647162][ T361] usb 3-1: Using ep0 maxpacket: 32 [ 46.727168][ T492] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.767239][ T361] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 46.775607][ T361] usb 3-1: config 0 has no interface number 0 [ 46.782056][ T361] usb 3-1: config 0 interface 230 has no altsetting 0 [ 46.967222][ T361] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 46.983350][ T361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.992280][ T361] usb 3-1: Product: syz [ 47.002135][ T361] usb 3-1: Manufacturer: syz [ 47.015855][ T361] usb 3-1: SerialNumber: syz [ 47.027441][ T30] audit: type=1400 audit(1753636767.074:276): avc: denied { write } for pid=1121 comm="syz.3.310" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.028131][ T361] usb 3-1: config 0 descriptor?? [ 47.127641][ T361] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 47.144265][ T361] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 47.153447][ T30] audit: type=1400 audit(1753636767.194:277): avc: denied { name_bind } for pid=1129 comm="syz.3.313" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 47.229722][ T1136] loop3: detected capacity change from 0 to 128 [ 47.247251][ T492] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 47.270635][ T492] usb 1-1: New USB device strings: Mfr=1, Product=196, SerialNumber=3 [ 47.279479][ T1136] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.287207][ T492] usb 1-1: Product: syz [ 47.294287][ T492] usb 1-1: Manufacturer: syz [ 47.299098][ T492] usb 1-1: SerialNumber: syz [ 47.307428][ T492] usb 1-1: config 0 descriptor?? [ 47.364656][ T1136] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.376061][ T20] usb 3-1: USB disconnect, device number 6 [ 47.443357][ T1150] loop1: detected capacity change from 0 to 128 [ 47.466699][ T30] audit: type=1400 audit(1753636767.504:278): avc: denied { remount } for pid=1154 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.508403][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.526770][ T1164] loop1: detected capacity change from 0 to 256 [ 47.553155][ T59] usb 1-1: USB disconnect, device number 5 [ 47.558019][ T1164] exfat: Unknown parameter 'zero_size_dir' [ 47.594030][ T1175] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1024 sclass=netlink_xfrm_socket pid=1175 comm=syz.4.334 [ 47.638441][ T1181] ================================================================== [ 47.646561][ T1181] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 47.655800][ T1181] Read of size 1 at addr ffff88811bb51bf8 by task syz.4.337/1181 [ 47.663544][ T1181] [ 47.665887][ T1181] CPU: 0 PID: 1181 Comm: syz.4.337 Not tainted 5.15.189-syzkaller-00079-ga71626bd56a5 #0 [ 47.675696][ T1181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.685764][ T1181] Call Trace: [ 47.689043][ T1181] [ 47.691977][ T1181] __dump_stack+0x21/0x30 [ 47.696318][ T1181] dump_stack_lvl+0xee/0x150 [ 47.700912][ T1181] ? show_regs_print_info+0x20/0x20 [ 47.706110][ T1181] ? load_image+0x3a0/0x3a0 [ 47.710702][ T1181] ? unwind_get_return_address+0x4d/0x90 [ 47.716348][ T1181] print_address_description+0x7f/0x2c0 [ 47.721896][ T1181] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 47.728668][ T1181] kasan_report+0xf1/0x140 [ 47.733085][ T1181] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 47.739611][ T1181] __asan_report_load1_noabort+0x14/0x20 [ 47.745251][ T1181] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 47.751683][ T1181] xfrm_policy_inexact_insert_node+0x5a7/0xb50 [ 47.757848][ T1181] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 47.764005][ T1181] xfrm_policy_inexact_insert+0x70/0x1130 [ 47.769730][ T1181] ? __get_hash_thresh+0x10c/0x420 [ 47.774843][ T1181] ? policy_hash_bysel+0x110/0x4f0 [ 47.779958][ T1181] xfrm_policy_insert+0x126/0x9a0 [ 47.784988][ T1181] ? xfrm_policy_construct+0x54f/0x1f00 [ 47.790556][ T1181] xfrm_add_policy+0x4d1/0x830 [ 47.795345][ T1181] ? xfrm_dump_sa_done+0xc0/0xc0 [ 47.800307][ T1181] xfrm_user_rcv_msg+0x45c/0x6e0 [ 47.805257][ T1181] ? xfrm_netlink_rcv+0x90/0x90 [ 47.810119][ T1181] ? avc_has_perm_noaudit+0x460/0x460 [ 47.815500][ T1181] ? x64_sys_call+0x4b/0x9a0 [ 47.820100][ T1181] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 47.825476][ T1181] netlink_rcv_skb+0x1e0/0x430 [ 47.830252][ T1181] ? xfrm_netlink_rcv+0x90/0x90 [ 47.835108][ T1181] ? netlink_ack+0xb60/0xb60 [ 47.839703][ T1181] ? wait_for_completion_killable_timeout+0x10/0x10 [ 47.846294][ T1181] ? __netlink_lookup+0x387/0x3b0 [ 47.851357][ T1181] xfrm_netlink_rcv+0x72/0x90 [ 47.856038][ T1181] netlink_unicast+0x876/0xa40 [ 47.860806][ T1181] netlink_sendmsg+0x86a/0xb70 [ 47.865578][ T1181] ? netlink_getsockopt+0x530/0x530 [ 47.870784][ T1181] ? sock_alloc_file+0xba/0x260 [ 47.875641][ T1181] ? security_socket_sendmsg+0x82/0xa0 [ 47.881110][ T1181] ? netlink_getsockopt+0x530/0x530 [ 47.886312][ T1181] ____sys_sendmsg+0x5a2/0x8c0 [ 47.891079][ T1181] ? __sys_sendmsg_sock+0x40/0x40 [ 47.896106][ T1181] ? import_iovec+0x7c/0xb0 [ 47.900616][ T1181] ___sys_sendmsg+0x1f0/0x260 [ 47.905298][ T1181] ? __sys_sendmsg+0x250/0x250 [ 47.910062][ T1181] ? __alloc_file+0x181/0x2a0 [ 47.914752][ T1181] ? __fdget+0x1a1/0x230 [ 47.918996][ T1181] __x64_sys_sendmsg+0x1e2/0x2a0 [ 47.923938][ T1181] ? ___sys_sendmsg+0x260/0x260 [ 47.928881][ T1181] ? __kasan_check_write+0x14/0x20 [ 47.934005][ T1181] ? switch_fpu_return+0x15d/0x2c0 [ 47.939121][ T1181] x64_sys_call+0x4b/0x9a0 [ 47.943539][ T1181] do_syscall_64+0x4c/0xa0 [ 47.947958][ T1181] ? clear_bhb_loop+0x50/0xa0 [ 47.952639][ T1181] ? clear_bhb_loop+0x50/0xa0 [ 47.957318][ T1181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.963232][ T1181] RIP: 0033:0x7fae8b5c99a9 [ 47.967651][ T1181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.987375][ T1181] RSP: 002b:00007fae89c32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.995805][ T1181] RAX: ffffffffffffffda RBX: 00007fae8b7f0fa0 RCX: 00007fae8b5c99a9 [ 48.003782][ T1181] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 48.011755][ T1181] RBP: 00007fae8b64bd69 R08: 0000000000000000 R09: 0000000000000000 [ 48.019725][ T1181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.027696][ T1181] R13: 0000000000000000 R14: 00007fae8b7f0fa0 R15: 00007ffc53c5b6a8 [ 48.035671][ T1181] [ 48.038687][ T1181] [ 48.041006][ T1181] Allocated by task 1181: [ 48.045331][ T1181] __kasan_kmalloc+0xda/0x110 [ 48.050019][ T1181] __kmalloc+0x13d/0x2c0 [ 48.054262][ T1181] sk_prot_alloc+0xed/0x320 [ 48.058767][ T1181] sk_alloc+0x38/0x430 [ 48.062836][ T1181] pfkey_create+0x12a/0x660 [ 48.067338][ T1181] __sock_create+0x38d/0x7a0 [ 48.071930][ T1181] __sys_socket+0xec/0x190 [ 48.076348][ T1181] __x64_sys_socket+0x7a/0x90 [ 48.081026][ T1181] x64_sys_call+0x8c5/0x9a0 [ 48.085531][ T1181] do_syscall_64+0x4c/0xa0 [ 48.089951][ T1181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.095852][ T1181] [ 48.098173][ T1181] The buggy address belongs to the object at ffff88811bb51800 [ 48.098173][ T1181] which belongs to the cache kmalloc-1k of size 1024 [ 48.112222][ T1181] The buggy address is located 1016 bytes inside of [ 48.112222][ T1181] 1024-byte region [ffff88811bb51800, ffff88811bb51c00) [ 48.125672][ T1181] The buggy address belongs to the page: [ 48.131303][ T1181] page:ffffea00046ed400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11bb50 [ 48.141553][ T1181] head:ffffea00046ed400 order:3 compound_mapcount:0 compound_pincount:0 [ 48.149879][ T1181] flags: 0x4000000000010200(slab|head|zone=1) [ 48.155959][ T1181] raw: 4000000000010200 ffffea00046eb600 0000000500000005 ffff888100043080 [ 48.164548][ T1181] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 48.173126][ T1181] page dumped because: kasan: bad access detected [ 48.179545][ T1181] page_owner tracks the page as allocated [ 48.185258][ T1181] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 227, ts 13582032441, free_ts 13417075149 [ 48.204274][ T1181] post_alloc_hook+0x192/0x1b0 [ 48.209074][ T1181] prep_new_page+0x1c/0x110 [ 48.213585][ T1181] get_page_from_freelist+0x2cc5/0x2d50 [ 48.219129][ T1181] __alloc_pages+0x18f/0x440 [ 48.223722][ T1181] new_slab+0xa1/0x4d0 [ 48.227796][ T1181] ___slab_alloc+0x381/0x810 [ 48.232387][ T1181] __slab_alloc+0x49/0x90 [ 48.236715][ T1181] __kmalloc+0x16a/0x2c0 [ 48.240963][ T1181] bpf_convert_filter+0xf0/0x5110 [ 48.245986][ T1181] bpf_prepare_filter+0xe7f/0x11c0 [ 48.251097][ T1181] bpf_prog_create_from_user+0x2c7/0x410 [ 48.256731][ T1181] do_seccomp+0x7b1/0x1410 [ 48.261149][ T1181] prctl_set_seccomp+0x4c/0x60 [ 48.265917][ T1181] __se_sys_prctl+0x4e4/0x10a0 [ 48.270677][ T1181] __x64_sys_prctl+0xbf/0xd0 [ 48.275274][ T1181] x64_sys_call+0x633/0x9a0 [ 48.279780][ T1181] page last free stack trace: [ 48.284449][ T1181] free_unref_page_prepare+0x542/0x550 [ 48.289908][ T1181] free_unref_page+0xa2/0x550 [ 48.294584][ T1181] free_compound_page+0x78/0xa0 [ 48.299444][ T1181] __put_compound_page+0x77/0xb0 [ 48.304383][ T1181] __put_page+0xbc/0xe0 [ 48.308538][ T1181] skb_release_data+0x3d3/0xa10 [ 48.313391][ T1181] __kfree_skb+0x50/0x70 [ 48.317635][ T1181] tcp_recvmsg_locked+0x14ac/0x2640 [ 48.322833][ T1181] tcp_recvmsg+0x21b/0x720 [ 48.327253][ T1181] inet_recvmsg+0x134/0x470 [ 48.331755][ T1181] sock_read_iter+0x2a2/0x340 [ 48.336430][ T1181] vfs_read+0x68b/0xbe0 [ 48.340581][ T1181] ksys_read+0x140/0x240 [ 48.344824][ T1181] __x64_sys_read+0x7b/0x90 [ 48.349326][ T1181] x64_sys_call+0x96d/0x9a0 [ 48.353827][ T1181] do_syscall_64+0x4c/0xa0 [ 48.358247][ T1181] [ 48.360572][ T1181] Memory state around the buggy address: [ 48.366200][ T1181] ffff88811bb51a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.374262][ T1181] ffff88811bb51b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.382321][ T1181] >ffff88811bb51b80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 48.390375][ T1181] ^ [ 48.398345][ T1181] ffff88811bb51c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.406411][ T1181] ffff88811bb51c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.414468][ T1181] ================================================================== [ 48.422528][ T1181] Disabling lock debugging due to kernel taint