last executing test programs: 7.700482419s ago: executing program 1 (id=328): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 7.617662249s ago: executing program 1 (id=330): r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xe01) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) 7.591831502s ago: executing program 1 (id=331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 7.503373102s ago: executing program 1 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x1e5, 0x0, 0x0, {0x7, r3}}, 0x18}}, 0x0) 7.405947453s ago: executing program 1 (id=335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x101, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 7.373291617s ago: executing program 1 (id=336): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.463450611s ago: executing program 2 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x700) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) 1.38275451s ago: executing program 2 (id=444): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc3}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8010661b, &(0x7f0000000280)=@v1={0x0, @aes128, 0x0, @auto="ec590953d5fd8e2d"}) 1.343068795s ago: executing program 2 (id=445): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x1}, 0x14}}, 0x0) 1.223396188s ago: executing program 2 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.169398435s ago: executing program 2 (id=451): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) 1.169085675s ago: executing program 2 (id=452): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x10, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x4, @private1}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) close(r0) 512.677111ms ago: executing program 4 (id=470): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 512.406031ms ago: executing program 3 (id=471): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsync(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@bsdgroups}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@prjquota}, {@noload}, {@block_validity}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 512.247431ms ago: executing program 0 (id=472): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, 0x0, 0x0, 0x10000000, 0x0, 0x0) 499.992792ms ago: executing program 0 (id=473): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000001380)) 370.640298ms ago: executing program 4 (id=474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_rm_leaf\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x518, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 325.714523ms ago: executing program 3 (id=475): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3e8}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 313.078384ms ago: executing program 0 (id=476): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001700)={'#! ', './bus', [{0x20, 'block_validity'}], 0xa, "a4d6007de5e3bba3ff17602136841e8a8adf7252101a32ef8af35bb7c3371d055eee6ab98fe00d7321"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x5452, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) 206.716587ms ago: executing program 4 (id=477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008e0083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 157.676842ms ago: executing program 3 (id=478): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) unshare(0x8020480) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0) 156.605532ms ago: executing program 0 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 137.442914ms ago: executing program 4 (id=480): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="e6", 0x1}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 124.998886ms ago: executing program 0 (id=481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000280)={0x24, @long}, 0x9) 69.570272ms ago: executing program 3 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sigaltstack(0x0, 0x0) 69.170212ms ago: executing program 0 (id=483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 68.878282ms ago: executing program 3 (id=484): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f08, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) 68.667133ms ago: executing program 4 (id=485): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) r1 = memfd_create(&(0x7f0000002280)='\xcaB\x89\xed`@>\x89=\x9e', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550c, 0x0) 19.586488ms ago: executing program 3 (id=486): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 0s ago: executing program 4 (id=487): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. [ 18.075813][ T30] audit: type=1400 audit(1730178205.142:66): avc: denied { integrity } for pid=278 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 18.082018][ T30] audit: type=1400 audit(1730178205.152:67): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.082977][ T278] cgroup: Unknown subsys name 'net' [ 18.086816][ T30] audit: type=1400 audit(1730178205.152:68): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.091681][ T30] audit: type=1400 audit(1730178205.162:69): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.091840][ T278] cgroup: Unknown subsys name 'devices' [ 18.188627][ T278] cgroup: Unknown subsys name 'hugetlb' [ 18.194032][ T278] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 18.413789][ T30] audit: type=1400 audit(1730178205.482:70): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.426481][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.436756][ T30] audit: type=1400 audit(1730178205.482:71): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.453108][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.478547][ T30] audit: type=1400 audit(1730178205.482:72): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.501523][ T30] audit: type=1400 audit(1730178205.512:73): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.526694][ T30] audit: type=1400 audit(1730178205.512:74): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.552029][ T30] audit: type=1400 audit(1730178205.522:75): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.972284][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.979183][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.986584][ T288] device bridge_slave_0 entered promiscuous mode [ 19.005412][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.012306][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.019464][ T288] device bridge_slave_1 entered promiscuous mode [ 19.030304][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.037438][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.044563][ T289] device bridge_slave_0 entered promiscuous mode [ 19.057985][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.064832][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.072327][ T289] device bridge_slave_1 entered promiscuous mode [ 19.101775][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.108756][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.115779][ T287] device bridge_slave_0 entered promiscuous mode [ 19.128232][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.135077][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.142435][ T291] device bridge_slave_0 entered promiscuous mode [ 19.150115][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.157051][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.164011][ T291] device bridge_slave_1 entered promiscuous mode [ 19.170552][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.177397][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.184469][ T287] device bridge_slave_1 entered promiscuous mode [ 19.256712][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.263591][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.270782][ T290] device bridge_slave_0 entered promiscuous mode [ 19.279246][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.286095][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.293500][ T290] device bridge_slave_1 entered promiscuous mode [ 19.441126][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.448010][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.455667][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.462973][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.474326][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.481198][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.488280][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.495242][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.509881][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.516740][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.523859][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.530641][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.540005][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.546935][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.554038][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.560854][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.570904][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.577777][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.585453][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.592606][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.636759][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.644068][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.651255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.659114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.667576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.676235][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.683408][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.690503][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.697603][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.704847][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.712070][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.741376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.749782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.757679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.765336][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.773508][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.780375][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.788189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.796062][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.802926][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.817333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.831832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.840138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.848777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.856036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.863393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.871514][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.878443][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.905690][ T289] device veth0_vlan entered promiscuous mode [ 19.914104][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.922339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.930548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.938339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.946460][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.953321][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.960589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.968655][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.975747][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.983169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.991140][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.997997][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.005140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.013135][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.020084][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.027490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.035375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.043275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.051337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.059292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.067376][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.074200][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.095583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.103760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.111626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.121610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.129711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.144356][ T289] device veth1_macvtap entered promiscuous mode [ 20.154278][ T290] device veth0_vlan entered promiscuous mode [ 20.162054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.170921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.179500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.186829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.194924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.202865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.210809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.218866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.227369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.235451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.242936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.255053][ T287] device veth0_vlan entered promiscuous mode [ 20.268222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.276086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.284321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.292924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.301432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.308925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.325718][ T288] device veth0_vlan entered promiscuous mode [ 20.333443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.341803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.350438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.358615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.366826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.374915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.382894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.391310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.399522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.406859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.417837][ T287] device veth1_macvtap entered promiscuous mode [ 20.426196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.433914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.442228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.460070][ T290] device veth1_macvtap entered promiscuous mode [ 20.471351][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.479050][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.487631][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.509189][ T288] device veth1_macvtap entered promiscuous mode [ 20.518990][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.529805][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.538079][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.546504][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.555442][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.563805][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.572349][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.580741][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.589147][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.597694][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.605831][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.615435][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.622953][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.630406][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.639429][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.648331][ T291] device veth0_vlan entered promiscuous mode [ 20.660467][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.668719][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.688893][ T291] device veth1_macvtap entered promiscuous mode [ 20.707686][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.721200][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.729824][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.738507][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.746650][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.802240][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.824873][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.841317][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.871486][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.878765][ T328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.247772][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 21.544204][ T367] loop3: detected capacity change from 0 to 40427 [ 21.565611][ T367] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 21.578222][ T367] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 21.609026][ T367] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 21.627242][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 21.638337][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 21.647963][ T6] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 21.656340][ T367] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 21.656870][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 21.672865][ T6] usb 3-1: config 0 descriptor?? [ 21.686297][ T367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 21.711152][ T422] loop1: detected capacity change from 0 to 256 [ 21.724634][ T367] attempt to access beyond end of device [ 21.724634][ T367] loop3: rw=2049, want=53256, limit=40427 [ 21.736865][ T367] attempt to access beyond end of device [ 21.736865][ T367] loop3: rw=2049, want=53264, limit=40427 [ 21.749258][ T422] exfat: Deprecated parameter 'utf8' [ 21.758548][ T422] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 21.762290][ T425] loop4: detected capacity change from 0 to 512 [ 21.771523][ T367] attempt to access beyond end of device [ 21.771523][ T367] loop3: rw=2049, want=53328, limit=40427 [ 21.809479][ T287] attempt to access beyond end of device [ 21.809479][ T287] loop3: rw=2049, want=45104, limit=40427 [ 21.821510][ T425] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.45: casefold flag without casefold feature [ 21.834482][ T425] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.45: couldn't read orphan inode 15 (err -117) [ 21.846413][ T425] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 21.867036][ T389] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 21.972281][ T432] loop3: detected capacity change from 0 to 2048 [ 22.009886][ T432] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 22.031454][ T429] loop1: detected capacity change from 0 to 40427 [ 22.043349][ T432] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 22.077671][ T429] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 22.085345][ T429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 22.109123][ T429] F2FS-fs (loop1): Found nat_bits in checkpoint [ 22.125619][ T440] syz.3.50 (440) used greatest stack depth: 22056 bytes left [ 22.155941][ T429] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 22.163544][ T429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 22.198966][ T6] hid-steam 0003:28DE:1142.0001: item fetching failed at offset 4/5 [ 22.207237][ T6] hid-steam 0003:28DE:1142.0001: steam_probe:parse of hid interface failed [ 22.215761][ T6] hid-steam: probe of 0003:28DE:1142.0001 failed with error -22 [ 22.252798][ T429] syz.1.46 (429) used greatest stack depth: 22008 bytes left [ 22.261100][ T288] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 22.261117][ T288] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 22.268981][ T389] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.269082][ T288] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 22.276640][ T389] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 22.305306][ T288] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 22.305328][ T288] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 22.313709][ T288] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 22.321167][ T288] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 22.377057][ T350] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 22.426672][ T6] usb 3-1: USB disconnect, device number 2 [ 22.474672][ T456] loop3: detected capacity change from 0 to 40427 [ 22.477095][ T389] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 22.489980][ T389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.498267][ T389] usb 1-1: Product: syz [ 22.502293][ T389] usb 1-1: Manufacturer: syz [ 22.506784][ T389] usb 1-1: SerialNumber: syz [ 22.517640][ T456] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 22.528575][ T456] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 22.542241][ T456] F2FS-fs (loop3): Found nat_bits in checkpoint [ 22.564460][ T456] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 22.571447][ T456] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 22.647139][ T350] usb 5-1: Using ep0 maxpacket: 32 [ 22.749489][ T398] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 22.777086][ T350] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 22.784996][ T350] usb 5-1: config 0 has no interface number 0 [ 22.791013][ T350] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.801806][ T350] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.811481][ T350] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 22.817042][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.820392][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.836036][ T350] usb 5-1: config 0 descriptor?? [ 22.987033][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.010933][ T478] loop2: detected capacity change from 0 to 2048 [ 23.108516][ T478] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 23.119076][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 23.119085][ T478] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 23.119092][ T30] audit: type=1400 audit(1730178210.192:172): avc: denied { mount } for pid=477 comm="syz.2.64" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 23.160618][ T30] audit: type=1400 audit(1730178210.232:173): avc: denied { read } for pid=477 comm="syz.2.64" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 23.167941][ T478] fs-verity: sha512 using implementation "sha512-avx2" [ 23.182507][ T30] audit: type=1400 audit(1730178210.242:174): avc: denied { open } for pid=477 comm="syz.2.64" path="/7/file0/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 23.189166][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.212063][ T30] audit: type=1400 audit(1730178210.242:175): avc: denied { ioctl } for pid=477 comm="syz.2.64" path="/7/file0/file0/file0" dev="loop2" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 23.247209][ T30] audit: type=1400 audit(1730178210.242:176): avc: denied { write } for pid=477 comm="syz.2.64" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 23.269532][ T481] fs-verity: sha256 using implementation "sha256-avx2" [ 23.269729][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.286414][ T26] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 23.286869][ T478] syz.2.64 (478) used greatest stack depth: 19920 bytes left [ 23.295608][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.302605][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 23.307310][ T30] audit: type=1400 audit(1730178210.372:177): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 23.314056][ T26] usb 2-1: config 0 descriptor?? [ 23.395059][ T30] audit: type=1400 audit(1730178210.462:178): avc: denied { read } for pid=482 comm="syz.2.65" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.417989][ T30] audit: type=1400 audit(1730178210.462:179): avc: denied { open } for pid=482 comm="syz.2.65" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.441637][ T398] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 23.441750][ T30] audit: type=1400 audit(1730178210.462:180): avc: denied { ioctl } for pid=482 comm="syz.2.65" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.472901][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.483912][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.494118][ T6] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 23.503156][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.512095][ T6] usb 4-1: config 0 descriptor?? [ 23.521666][ T30] audit: type=1400 audit(1730178210.592:181): avc: denied { prog_load } for pid=437 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.548487][ T350] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.0002/input/input4 [ 23.561870][ T350] uclogic 0003:28BD:0094.0002: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 23.616826][ T496] syz.2.70[496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.616909][ T496] syz.2.70[496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.687103][ T389] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 23.704318][ T389] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 23.755238][ T39] usb 5-1: USB disconnect, device number 2 [ 23.817787][ T26] apple 0003:05AC:0262.0003: bogus close delimiter [ 23.824335][ T26] apple 0003:05AC:0262.0003: item 0 1 2 10 parsing failed [ 23.831812][ T26] apple 0003:05AC:0262.0003: parse failed [ 23.837456][ T26] apple: probe of 0003:05AC:0262.0003 failed with error -22 [ 23.907156][ T389] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 23.913622][ T389] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 23.925596][ T389] usb 1-1: USB disconnect, device number 2 [ 23.936760][ T389] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 23.967048][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 23.972968][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 24.002261][ T6] usb 4-1: USB disconnect, device number 2 [ 24.072592][ T350] usb 2-1: USB disconnect, device number 2 [ 24.286278][ T537] loop4: detected capacity change from 0 to 128 [ 24.473202][ T557] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 24.580058][ T570] tipc: Started in network mode [ 24.591780][ T572] loop3: detected capacity change from 0 to 512 [ 24.602062][ T570] tipc: Node identity ac1414aa, cluster identity 4711 [ 24.611907][ T570] tipc: New replicast peer: 100.1.1.1 [ 24.617916][ T570] tipc: Enabled bearer , priority 10 [ 24.667164][ T572] EXT4-fs (loop3): Ignoring removed oldalloc option [ 24.708587][ T572] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.90: Parent and EA inode have the same ino 15 [ 24.738087][ T572] EXT4-fs (loop3): Remounting filesystem read-only [ 24.753252][ T572] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 24.771739][ T568] loop0: detected capacity change from 0 to 32768 [ 24.776331][ T572] EXT4-fs error (device loop3): ext4_evict_inode:294: comm syz.3.90: couldn't truncate inode 15 (err -30) [ 24.789667][ T572] EXT4-fs (loop3): 1 orphan inode deleted [ 24.795216][ T572] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 24.822242][ T568] loop0: p1 p3 < p5 p6 > [ 24.865601][ T601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 24.952757][ T313] udevd[313]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 24.952773][ T459] udevd[459]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 24.963902][ T488] udevd[488]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 24.972803][ T337] udevd[337]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 24.987068][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 25.011586][ T616] mmap: syz.1.110 (616) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 25.047090][ T296] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.055731][ T617] loop3: detected capacity change from 0 to 256 [ 25.267067][ T389] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.317256][ T350] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.367126][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.377902][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.387377][ T39] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 25.396216][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.405011][ T39] usb 5-1: config 0 descriptor?? [ 25.417041][ T296] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 25.425882][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.434633][ T296] usb 3-1: config 0 descriptor?? [ 25.507146][ T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.537080][ T389] usb 1-1: Using ep0 maxpacket: 8 [ 25.677079][ T389] usb 1-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 25.686323][ T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.694810][ T389] usb 1-1: config 0 descriptor?? [ 25.699726][ T350] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.709757][ T350] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.737099][ T503] tipc: Node number set to 2886997162 [ 25.747535][ T389] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 25.797407][ T350] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 25.806659][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.814454][ T350] usb 2-1: SerialNumber: syz [ 25.887602][ T39] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 25.894354][ T39] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 25.901246][ T39] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 25.907114][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 25.908200][ T39] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x2 [ 25.918923][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 25.925852][ T39] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 25.935132][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 25.942672][ T39] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 25.954787][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 25.987174][ T389] usb 1-1: Detected FT232BM [ 26.097102][ T39] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device [ 26.097644][ T350] usb 2-1: 0:2 : does not exist [ 26.104432][ T39] arvo 0003:1E7D:30D4.0004: couldn't install keyboard [ 26.109446][ T350] usb 2-1: unit 32 not found! [ 26.117657][ T39] arvo: probe of 0003:1E7D:30D4.0004 failed with error -5 [ 26.132335][ T350] usb 2-1: USB disconnect, device number 3 [ 26.157138][ T60] usb 4-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 26.166464][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.174362][ T60] usb 4-1: Product: syz [ 26.178337][ T60] usb 4-1: Manufacturer: syz [ 26.182692][ T60] usb 4-1: SerialNumber: syz [ 26.188919][ T60] usb 4-1: config 0 descriptor?? [ 26.197223][ T389] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 26.217177][ T389] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 26.224562][ T389] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 26.233970][ T60] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 26.244368][ T389] usb 1-1: USB disconnect, device number 3 [ 26.251008][ T60] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 26.261143][ T389] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 26.270976][ T389] ftdi_sio 1-1:0.0: device disconnected [ 26.330325][ T39] usb 5-1: USB disconnect, device number 3 [ 26.446479][ T350] usb 4-1: USB disconnect, device number 3 [ 26.452821][ T350] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 26.787113][ T296] usb 3-1: Cannot set autoneg [ 26.791783][ T296] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 26.800453][ T296] usb 3-1: USB disconnect, device number 3 [ 26.877033][ T389] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.913329][ T636] loop4: detected capacity change from 0 to 512 [ 26.966741][ T636] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.120: casefold flag without casefold feature [ 26.979254][ T350] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.986749][ T636] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.120: couldn't read orphan inode 15 (err -117) [ 26.999085][ T636] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 27.000377][ T639] xt_bpf: check failed: parse error [ 27.172534][ T666] loop4: detected capacity change from 0 to 512 [ 27.238227][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.249294][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.259058][ T389] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 27.268085][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.280780][ T666] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 27.287236][ T389] usb 2-1: config 0 descriptor?? [ 27.307965][ T672] loop3: detected capacity change from 0 to 40427 [ 27.329521][ T666] EXT4-fs (loop4): 1 orphan inode deleted [ 27.335284][ T666] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,lazytime,barrier=0x0000000000000003,errors=remount-ro,resgid=0x000000000000ee01,errors=remount-ro,resgid=0x000000000000ee01,resgid=0x000000000000ee002. Quota mode: writeback. [ 27.361046][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.364087][ T310] EXT4-fs error (device loop4): ext4_release_dquot:6210: comm kworker/u4:3: Failed to release dquot type 1 [ 27.373008][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.393594][ T350] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 27.397647][ T672] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 27.402702][ T350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.419245][ T350] usb 1-1: config 0 descriptor?? [ 27.424419][ T672] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 27.432638][ T310] EXT4-fs (loop4): Remounting filesystem read-only [ 27.440369][ T672] F2FS-fs (loop3): invalid crc value [ 27.447695][ T672] F2FS-fs (loop3): Found nat_bits in checkpoint [ 27.490203][ T672] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 27.497277][ T672] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 27.531241][ T672] attempt to access beyond end of device [ 27.531241][ T672] loop3: rw=2051, want=45064, limit=40427 [ 27.551648][ T672] attempt to access beyond end of device [ 27.551648][ T672] loop3: rw=2051, want=131072, limit=40427 [ 27.563380][ T672] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 27.563411][ T672] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 27.590101][ T685] hub 9-0:1.0: USB hub found [ 27.602856][ T685] hub 9-0:1.0: 1 port detected [ 27.708166][ T694] loop3: detected capacity change from 0 to 512 [ 27.738124][ T694] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.751226][ T694] EXT4-fs (loop3): filesystem is read-only [ 27.760844][ T694] EXT4-fs (loop3): filesystem is read-only [ 27.766786][ T694] EXT4-fs (loop3): orphan cleanup on readonly fs [ 27.773384][ T694] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.141: bad orphan inode 16 [ 27.783694][ T694] ext4_test_bit(bit=15, block=3) = 0 [ 27.789129][ T694] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 27.838375][ T389] logitech-djreceiver 0003:046D:C71B.0005: item fetching failed at offset 3/7 [ 27.857204][ T389] logitech-djreceiver 0003:046D:C71B.0005: logi_dj_probe: parse failed [ 27.865388][ T389] logitech-djreceiver: probe of 0003:046D:C71B.0005 failed with error -22 [ 27.887112][ T296] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 27.898111][ T350] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 27.904937][ T350] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 27.917053][ T350] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 27.923763][ T350] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 27.947028][ T350] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 27.953661][ T350] pyra 0003:1E7D:2CF6.0006: item fetching failed at offset 6/7 [ 27.977210][ T350] pyra 0003:1E7D:2CF6.0006: parse failed [ 27.982709][ T350] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -22 [ 27.995827][ T697] loop2: detected capacity change from 0 to 40427 [ 28.032131][ T697] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 28.042432][ T697] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 28.051054][ T660] usb 2-1: USB disconnect, device number 4 [ 28.059535][ T697] F2FS-fs (loop2): invalid crc value [ 28.066223][ T697] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.086738][ T697] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 28.093984][ T697] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.122781][ T350] usb 1-1: USB disconnect, device number 4 [ 28.135208][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 28.135226][ T30] audit: type=1400 audit(1730178215.202:303): avc: denied { read append open } for pid=695 comm="syz.2.144" path="/26/bus/memory.numa_stat" dev="loop2" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.165526][ T30] audit: type=1400 audit(1730178215.202:304): avc: denied { ioctl } for pid=695 comm="syz.2.144" path="/26/bus/memory.numa_stat" dev="loop2" ino=456 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.165556][ T296] usb 5-1: Using ep0 maxpacket: 8 [ 28.190694][ T310] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 28.204041][ T310] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 28.337074][ T296] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 28.345931][ T296] usb 5-1: config 1 has no interface number 1 [ 28.351804][ T296] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 28.537067][ T296] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.545985][ T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.547050][ T389] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.553786][ T296] usb 5-1: Product: syz [ 28.565097][ T296] usb 5-1: Manufacturer: syz [ 28.571657][ T296] usb 5-1: SerialNumber: syz [ 28.634403][ T30] audit: type=1400 audit(1730178215.702:305): avc: denied { validate_trans } for pid=715 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 28.704570][ T30] audit: type=1400 audit(1730178215.772:306): avc: denied { create } for pid=721 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.725858][ T30] audit: type=1400 audit(1730178215.792:307): avc: denied { write } for pid=721 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.755861][ T724] hub 9-0:1.0: USB hub found [ 28.760461][ T724] hub 9-0:1.0: 1 port detected [ 28.847013][ T350] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.907671][ T296] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 28.917290][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.928137][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.937625][ T389] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.950258][ T389] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 28.959086][ T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.968168][ T389] usb 3-1: config 0 descriptor?? [ 28.977201][ T296] usb 5-1: 2:1: cannot set freq 5590914 to ep 0x82 [ 29.011607][ T296] usb 5-1: USB disconnect, device number 4 [ 29.022145][ T488] udevd[488]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.087048][ T350] usb 2-1: Using ep0 maxpacket: 8 [ 29.207140][ T350] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 29.215237][ T350] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 29.223694][ T350] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 29.232735][ T350] usb 2-1: config 250 has no interface number 0 [ 29.238931][ T350] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 29.250280][ T350] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 29.260518][ T350] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 29.270584][ T350] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 29.280650][ T350] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 29.294016][ T350] usb 2-1: config 250 interface 228 has no altsetting 0 [ 29.378508][ T734] loop4: detected capacity change from 0 to 512 [ 29.385511][ T732] process 'syz.0.166' launched './file0' with NULL argv: empty string added [ 29.386265][ T30] audit: type=1400 audit(1730178216.452:308): avc: denied { read } for pid=735 comm="syz.3.158" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.417114][ T350] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 29.427326][ T734] EXT4-fs (loop4): filesystem is read-only [ 29.436747][ T350] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 29.445725][ T734] EXT4-fs (loop4): filesystem is read-only [ 29.450300][ T350] usb 2-1: Product: syz [ 29.455597][ T350] usb 2-1: SerialNumber: syz [ 29.460152][ T389] acrux 0003:1A34:0802.0007: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 29.471990][ T389] acrux 0003:1A34:0802.0007: no inputs found [ 29.478160][ T389] acrux 0003:1A34:0802.0007: Failed to enable force feedback support, error: -19 [ 29.481159][ T30] audit: type=1400 audit(1730178216.462:309): avc: denied { execute } for pid=730 comm="syz.0.166" name="file0" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.509174][ T734] EXT4-fs (loop4): orphan cleanup on readonly fs [ 29.515414][ T734] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.156: bad orphan inode 16 [ 29.525749][ T350] hub 2-1:250.228: bad descriptor, ignoring hub [ 29.532011][ T350] hub: probe of 2-1:250.228 failed with error -5 [ 29.538546][ T30] audit: type=1400 audit(1730178216.462:310): avc: denied { execute_no_trans } for pid=730 comm="syz.0.166" path="/25/file0" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.561642][ T734] ext4_test_bit(bit=15, block=3) = 0 [ 29.566844][ T734] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 29.585186][ T30] audit: type=1400 audit(1730178216.492:311): avc: denied { open } for pid=735 comm="syz.3.158" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.614907][ T30] audit: type=1400 audit(1730178216.492:312): avc: denied { ioctl } for pid=735 comm="syz.3.158" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.702055][ T389] usb 3-1: USB disconnect, device number 4 [ 29.713434][ T745] loop4: detected capacity change from 0 to 2048 [ 29.737847][ T350] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 29.787334][ T755] loop3: detected capacity change from 0 to 2048 [ 29.794400][ T739] loop0: detected capacity change from 0 to 40427 [ 29.808587][ T745] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.831093][ T739] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 29.839202][ T739] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 29.858368][ T739] F2FS-fs (loop0): invalid crc value [ 29.868116][ T739] F2FS-fs (loop0): Found nat_bits in checkpoint [ 29.888481][ T739] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 29.895434][ T739] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 29.902956][ T761] loop4: detected capacity change from 0 to 512 [ 29.942463][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 29.952520][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 29.985210][ T761] EXT4-fs (loop4): 1 truncate cleaned up [ 29.992783][ T761] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.019845][ T291] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 30.041375][ T291] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 30.067171][ T39] usb 2-1: USB disconnect, device number 5 [ 30.074567][ T39] usblp0: removed [ 30.077967][ T291] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 30.148439][ T10] tipc: Disabling bearer [ 30.153527][ T10] tipc: Left network mode [ 30.225218][ T787] sch_fq: defrate 4294967292 ignored. [ 30.226716][ T786] loop3: detected capacity change from 0 to 256 [ 30.612914][ T796] netem: incorrect ge model size [ 30.618123][ T796] netem: change failed [ 30.657408][ T802] incfs: mount failed -22 [ 30.693522][ T10] device bridge_slave_1 left promiscuous mode [ 30.699910][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.725393][ T816] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.736563][ T816] F2FS-fs (loop5): Unable to read 1th superblock [ 30.736616][ T10] device bridge_slave_0 left promiscuous mode [ 30.746207][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.757291][ T10] device veth1_macvtap left promiscuous mode [ 30.763125][ T10] device veth0_vlan left promiscuous mode [ 30.767457][ T816] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.779702][ T816] F2FS-fs (loop5): Unable to read 2th superblock [ 30.863461][ T814] loop1: detected capacity change from 0 to 40427 [ 30.875640][ T795] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.883443][ T795] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.890575][ T795] device bridge_slave_0 entered promiscuous mode [ 30.897255][ T795] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.899870][ T814] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 30.905913][ T795] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.911010][ T814] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 30.918440][ T795] device bridge_slave_1 entered promiscuous mode [ 30.937062][ T814] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.975569][ T814] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 30.982519][ T814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.018057][ T288] attempt to access beyond end of device [ 31.018057][ T288] loop1: rw=2049, want=45104, limit=40427 [ 31.020167][ T795] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.036068][ T795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.043205][ T795] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.050253][ T795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.157253][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.177060][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.039731][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.051259][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.082897][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.091984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.100525][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.107402][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.122906][ T846] loop3: detected capacity change from 0 to 256 [ 32.130484][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.138880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.147212][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.154074][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.167628][ T846] ======================================================= [ 32.167628][ T846] WARNING: The mand mount option has been deprecated and [ 32.167628][ T846] and is ignored by this kernel. Remove the mand [ 32.167628][ T846] option from the mount to silence this warning. [ 32.167628][ T846] ======================================================= [ 32.172322][ T850] syz.2.205[850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.203063][ T850] syz.2.205[850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.216871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.236314][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.250481][ T846] FAT-fs (loop3): Directory bread(block 64) failed [ 32.257704][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.265598][ T846] FAT-fs (loop3): Directory bread(block 65) failed [ 32.273725][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.281588][ T846] FAT-fs (loop3): Directory bread(block 66) failed [ 32.288760][ T846] FAT-fs (loop3): Directory bread(block 67) failed [ 32.305818][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.323073][ T846] FAT-fs (loop3): Directory bread(block 68) failed [ 32.330641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.342512][ T846] FAT-fs (loop3): Directory bread(block 69) failed [ 32.349871][ T846] FAT-fs (loop3): Directory bread(block 70) failed [ 32.357775][ T846] FAT-fs (loop3): Directory bread(block 71) failed [ 32.364562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.373441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.378689][ T860] loop1: detected capacity change from 0 to 1024 [ 32.381181][ T846] FAT-fs (loop3): Directory bread(block 72) failed [ 32.394328][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.401706][ T846] FAT-fs (loop3): Directory bread(block 73) failed [ 32.408605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.419542][ T795] device veth0_vlan entered promiscuous mode [ 32.438848][ T860] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 32.446523][ T860] EXT4-fs (loop1): write access will be enabled during recovery [ 32.454526][ T860] JBD2: no valid journal superblock found [ 32.457475][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.460254][ T860] EXT4-fs (loop1): error loading journal [ 32.482600][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.492735][ T795] device veth1_macvtap entered promiscuous mode [ 32.532987][ T611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.541911][ T611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.551235][ T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.560591][ T611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.562335][ T873] loop0: detected capacity change from 0 to 2048 [ 32.569563][ T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.616524][ T877] loop3: detected capacity change from 0 to 256 [ 32.636448][ T873] loop0: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 32.637437][ T873] loop0: p3 start 4259840 is beyond EOD, truncated [ 32.747391][ T877] exfat: Deprecated parameter 'namecase' [ 32.754291][ T877] exfat: Deprecated parameter 'utf8' [ 32.782408][ T877] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x43dffc04, utbl_chksum : 0xe619d30d) [ 32.850959][ T895] device batadv_slave_0 entered promiscuous mode [ 32.866686][ T892] device batadv_slave_0 left promiscuous mode [ 32.897052][ T503] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.199663][ T934] loop3: detected capacity change from 0 to 2048 [ 33.257066][ T503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.274710][ T503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.297516][ T934] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.321133][ T934] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038 (0x7fffffff) [ 33.334899][ T917] loop4: detected capacity change from 0 to 40427 [ 33.337466][ T503] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 33.359269][ T934] syz.3.241 (934) used greatest stack depth: 19848 bytes left [ 33.363121][ T503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.379103][ T917] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 33.387197][ T503] usb 3-1: config 0 descriptor?? [ 33.394049][ T917] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 33.419118][ T924] udevd[924]: inotify_add_watch(7, /dev/loop0p10, 10) failed: No such file or directory [ 33.419245][ T921] udevd[921]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 33.429822][ T930] udevd[930]: inotify_add_watch(7, /dev/loop0p13, 10) failed: No such file or directory [ 33.449372][ T925] udevd[925]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory [ 33.449508][ T313] udevd[313]: inotify_add_watch(7, /dev/loop0p14, 10) failed: No such file or directory [ 33.463655][ T922] udevd[922]: inotify_add_watch(7, /dev/loop0p8, 10) failed: No such file or directory [ 33.469881][ T488] udevd[488]: inotify_add_watch(7, /dev/loop0p15, 10) failed: No such file or directory [ 33.479787][ T929] udevd[929]: inotify_add_watch(7, /dev/loop0p12, 10) failed: No such file or directory [ 33.489144][ T337] udevd[337]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory [ 33.498777][ T923] udevd[923]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory [ 33.517543][ T917] F2FS-fs (loop4): invalid crc value [ 33.520783][ T953] loop0: detected capacity change from 0 to 512 [ 33.529574][ T917] F2FS-fs (loop4): Found nat_bits in checkpoint [ 33.579052][ T953] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 33.677060][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.697481][ T953] ext4 filesystem being mounted at /39/bus supports timestamps until 2038 (0x7fffffff) [ 33.718536][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 33.718552][ T30] audit: type=1400 audit(1730178220.792:381): avc: denied { create } for pid=960 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.787566][ T917] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 33.810299][ T917] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 33.834322][ T30] audit: type=1400 audit(1730178220.792:382): avc: denied { write } for pid=960 comm="syz.1.249" path="socket:[18571]" dev="sockfs" ino=18571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.843845][ T917] attempt to access beyond end of device [ 33.843845][ T917] loop4: rw=10241, want=45104, limit=40427 [ 33.896681][ T30] audit: type=1400 audit(1730178220.792:383): avc: denied { nlmsg_write } for pid=960 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.921808][ T795] attempt to access beyond end of device [ 33.921808][ T795] loop4: rw=2049, want=45120, limit=40427 [ 33.927401][ T30] audit: type=1400 audit(1730178220.962:384): avc: denied { mount } for pid=968 comm="syz.0.252" name="/" dev="ramfs" ino=18591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.957322][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 33.967665][ T503] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 33.971185][ T30] audit: type=1400 audit(1730178220.962:385): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.041165][ T30] audit: type=1400 audit(1730178221.002:386): avc: denied { write } for pid=970 comm="syz.0.254" name="event2" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.100827][ T30] audit: type=1400 audit(1730178221.162:387): avc: denied { connect } for pid=975 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.127177][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 34.162989][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 34.204399][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 34.216095][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.246643][ T26] usb 4-1: config 0 descriptor?? [ 34.277101][ T951] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 34.297625][ T26] hub 4-1:0.0: USB hub found [ 34.351805][ T503] usb 3-1: USB disconnect, device number 5 [ 34.527002][ T389] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.557128][ T26] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 34.627392][ T998] syz.1.265[998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.627442][ T998] syz.1.265[998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.867074][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 34.886928][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 34.891001][ T389] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 34.904321][ T389] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 34.915402][ T660] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.923310][ T389] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 34.934405][ T389] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 34.935163][ T26] usb 4-1: USB disconnect, device number 4 [ 34.943314][ T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.957077][ T983] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 34.967461][ T1004] device lo entered promiscuous mode [ 34.972806][ T1003] device lo left promiscuous mode [ 34.998737][ T1006] loop2: detected capacity change from 0 to 512 [ 35.079248][ T1006] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 35.090166][ T1006] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038 (0x7fffffff) [ 35.181100][ T389] usb 1-1: USB disconnect, device number 5 [ 35.287083][ T660] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 35.298408][ T660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.309428][ T660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.319236][ T660] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 35.332294][ T660] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 35.341369][ T660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.350182][ T660] usb 2-1: config 0 descriptor?? [ 35.364226][ T1019] loop3: detected capacity change from 0 to 1024 [ 35.437015][ T503] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.446228][ T30] audit: type=1400 audit(1730178222.512:388): avc: denied { create } for pid=1024 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.466283][ T30] audit: type=1400 audit(1730178222.522:389): avc: denied { connect } for pid=1024 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.486183][ T30] audit: type=1400 audit(1730178222.522:390): avc: denied { write } for pid=1024 comm="syz.4.276" path="socket:[18215]" dev="sockfs" ino=18215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.521215][ T1019] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 35.549071][ T1019] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 35.827726][ T660] thrustmaster 0003:044F:B653.0009: item fetching failed at offset 5/7 [ 35.836099][ T660] thrustmaster 0003:044F:B653.0009: parse failed [ 35.842289][ T660] thrustmaster: probe of 0003:044F:B653.0009 failed with error -22 [ 35.857118][ T503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.868004][ T503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.877670][ T503] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 35.886488][ T503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.895135][ T503] usb 3-1: config 0 descriptor?? [ 36.028216][ T660] usb 2-1: USB disconnect, device number 6 [ 36.057017][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.387418][ T503] hid (null): bogus close delimiter [ 36.437085][ T26] usb 1-1: config 0 has no interfaces? [ 36.537432][ T1064] input: syz1 as /devices/virtual/input/input7 [ 36.607132][ T26] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 36.616014][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.623964][ T26] usb 1-1: Product: syz [ 36.628004][ T26] usb 1-1: Manufacturer: syz [ 36.632352][ T26] usb 1-1: SerialNumber: syz [ 36.637343][ T26] r8152-cfgselector 1-1: config 0 descriptor?? [ 36.727003][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.877091][ T503] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 36.885782][ T503] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 36.886495][ T1046] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 36.893357][ T503] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 36.907163][ T26] r8152-cfgselector 1-1: Unknown version 0x0000 [ 36.914094][ T26] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 36.921892][ T503] usb 3-1: USB disconnect, device number 6 [ 36.987041][ T296] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.994382][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 37.127099][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.138203][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.177035][ T350] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 37.287118][ T39] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 37.296128][ T39] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 37.304230][ T39] usb 4-1: Product: syz [ 37.308311][ T39] usb 4-1: Manufacturer: syz [ 37.313038][ T39] usb 4-1: config 0 descriptor?? [ 37.358944][ T1095] syz.2.306[1095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.358998][ T1095] syz.2.306[1095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.387778][ T1097] incfs: Error accessing: ./file0. [ 37.404079][ T1097] incfs: mount failed -20 [ 37.407278][ T296] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 37.429099][ T296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.435578][ T1101] syz.2.309[1101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.440103][ T1101] syz.2.309[1101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.452128][ T296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.473489][ T296] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 37.487743][ T296] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 37.496603][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.507741][ T296] usb 2-1: config 0 descriptor?? [ 37.537080][ T350] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.548150][ T350] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.638371][ T350] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 37.657011][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.674994][ T350] usb 5-1: SerialNumber: syz [ 37.706871][ T1112] syz.0.312 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.787683][ T39] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0xd [ 37.795311][ T39] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 37.958156][ T350] usb 5-1: 0:2 : does not exist [ 37.964318][ T350] usb 5-1: USB disconnect, device number 5 [ 37.977898][ T296] kye 0003:0458:501A.000C: unbalanced delimiter at end of report description [ 37.986697][ T296] kye 0003:0458:501A.000C: parse failed [ 37.992005][ T296] kye: probe of 0003:0458:501A.000C failed with error -22 [ 38.017079][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.017110][ T660] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.179666][ T350] usb 2-1: USB disconnect, device number 7 [ 38.267038][ T660] usb 3-1: Using ep0 maxpacket: 8 [ 38.287057][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 38.397066][ T660] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.407033][ T26] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 38.407979][ T660] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.416143][ T26] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 38.426111][ T660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 38.433839][ T26] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 38.440383][ T660] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 38.448215][ T26] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 38.457352][ T660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.465202][ T26] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 38.473875][ T660] usb 3-1: config 0 descriptor?? [ 38.481926][ T26] usb 1-1: config 0 has no interface number 0 [ 38.492580][ T26] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 38.503693][ T26] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 38.513438][ T26] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 38.523226][ T26] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.536199][ T26] usb 1-1: config 0 interface 125 has no altsetting 0 [ 38.542774][ T26] usb 1-1: config 0 interface 125 has no altsetting 2 [ 38.657077][ T39] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device [ 38.665044][ T39] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse [ 38.672232][ T39] kovaplus: probe of 0003:1E7D:2D50.000B failed with error -71 [ 38.680553][ T39] usb 4-1: USB disconnect, device number 5 [ 38.715328][ T1131] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3956. macoff=92 [ 38.734550][ T1133] tipc: Enabling of bearer rejected, media not registered [ 38.757085][ T26] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 38.766141][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.774167][ T26] usb 1-1: Product: syz [ 38.778177][ T26] usb 1-1: Manufacturer: syz [ 38.782574][ T26] usb 1-1: SerialNumber: syz [ 38.797048][ T26] usb 1-1: config 0 descriptor?? [ 38.863661][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 38.863677][ T30] audit: type=1326 audit(1730178225.932:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690880e719 code=0x7ffc0000 [ 38.893975][ T30] audit: type=1326 audit(1730178225.942:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690880e719 code=0x7ffc0000 [ 38.917356][ T30] audit: type=1326 audit(1730178225.942:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f690880e719 code=0x7ffc0000 [ 38.941160][ T30] audit: type=1326 audit(1730178225.942:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690880e719 code=0x7ffc0000 [ 38.966245][ T30] audit: type=1326 audit(1730178225.942:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690880e719 code=0x7ffc0000 [ 39.006386][ T30] audit: type=1400 audit(1730178226.072:441): avc: denied { write } for pid=1147 comm="syz.1.330" name="tcp" dev="proc" ino=4026532488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.035296][ T1150] loop4: detected capacity change from 0 to 128 [ 39.047974][ T660] kye 0003:0458:0138.000D: global environment stack underflow [ 39.065847][ T660] kye 0003:0458:0138.000D: item 0 1 1 11 parsing failed [ 39.081806][ T660] kye 0003:0458:0138.000D: parse failed [ 39.107352][ T660] kye: probe of 0003:0458:0138.000D failed with error -22 [ 39.129366][ T30] audit: type=1326 audit(1730178226.202:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1149 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecc200719 code=0x7ffc0000 [ 39.162631][ T30] audit: type=1326 audit(1730178226.202:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1149 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7efecc200719 code=0x7ffc0000 [ 39.189964][ T30] audit: type=1326 audit(1730178226.202:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1149 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecc200719 code=0x7ffc0000 [ 39.214147][ T30] audit: type=1326 audit(1730178226.202:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1149 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7efecc200719 code=0x7ffc0000 [ 39.266606][ T1162] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 39.278279][ T350] usb 3-1: USB disconnect, device number 7 [ 39.507021][ T660] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 39.597068][ T343] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.783357][ T1173] UDC core: couldn't find an available UDC or it's busy: -16 [ 39.794245][ T1173] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.848917][ T39] usb 1-1: USB disconnect, device number 7 [ 40.885886][ T1184] SELinux: Context Ü is not valid (left unmapped). [ 40.897094][ T660] usb 5-1: unable to read config index 0 descriptor/all [ 40.903977][ T660] usb 5-1: can't read configurations, error -71 [ 40.917069][ T343] usb 4-1: device descriptor read/all, error -71 [ 40.928394][ T1188] loop2: detected capacity change from 0 to 512 [ 40.977345][ T1188] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.988491][ T1188] EXT4-fs (loop2): 1 truncate cleaned up [ 40.993959][ T1188] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 41.068093][ T1192] loop2: detected capacity change from 0 to 2048 [ 41.158332][ T1192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.170493][ T1192] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.185300][ T1192] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 41.197558][ T1192] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.197558][ T1192] [ 41.207580][ T1192] EXT4-fs (loop2): Total free blocks count 0 [ 41.213420][ T1192] EXT4-fs (loop2): Free/Dirty block details [ 41.219318][ T1192] EXT4-fs (loop2): free_blocks=2415919104 [ 41.224853][ T1192] EXT4-fs (loop2): dirty_blocks=16 [ 41.229935][ T1192] EXT4-fs (loop2): Block reservation details [ 41.235722][ T1192] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 41.475305][ T1222] Disabled LAPIC found during irq injection [ 41.628781][ T1225] loop3: detected capacity change from 0 to 40427 [ 41.637628][ T60] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.651639][ T1225] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 41.658697][ T1225] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.676602][ T1225] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.708783][ T1225] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.715656][ T1225] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.734321][ T287] attempt to access beyond end of device [ 41.734321][ T287] loop3: rw=2049, want=45112, limit=40427 [ 41.886995][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 41.956232][ T1266] loop3: detected capacity change from 0 to 128 [ 42.009539][ T1266] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.020185][ T60] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 42.020363][ T1266] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 42.028276][ T60] usb 1-1: config 0 has no interface number 0 [ 42.155357][ T1286] loop2: detected capacity change from 0 to 512 [ 42.217096][ T60] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 42.226207][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.234048][ T60] usb 1-1: Product: syz [ 42.238155][ T60] usb 1-1: Manufacturer: syz [ 42.242033][ T1286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.242526][ T60] usb 1-1: SerialNumber: syz [ 42.243194][ T60] usb 1-1: config 0 descriptor?? [ 42.261248][ T1286] EXT4-fs (loop2): 1 truncate cleaned up [ 42.267012][ T1286] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.297473][ T60] smsc95xx v2.0.0 [ 42.407041][ T593] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 42.647030][ T593] usb 4-1: Using ep0 maxpacket: 16 [ 42.727053][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 42.737064][ T60] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 42.747637][ T60] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 42.767169][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.778109][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.787828][ T593] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 42.796989][ T593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.805330][ T593] usb 4-1: config 0 descriptor?? [ 43.097080][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.107826][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.117342][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 43.126262][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.134794][ T26] usb 3-1: config 0 descriptor?? [ 43.147042][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 43.287547][ T593] samsung 0003:0419:0001.000E: item fetching failed at offset 3/5 [ 43.295311][ T593] samsung 0003:0419:0001.000E: parse failed [ 43.301086][ T593] samsung: probe of 0003:0419:0001.000E failed with error -22 [ 43.387029][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 43.437103][ T60] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 43.447919][ T60] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 43.458235][ T60] usb 1-1: USB disconnect, device number 8 [ 43.488386][ T350] usb 4-1: USB disconnect, device number 8 [ 43.507099][ T39] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 43.514984][ T39] usb 5-1: config 0 has no interface number 0 [ 43.520868][ T39] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 43.530391][ T39] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 43.619203][ T26] logitech-hidpp-device 0003:046D:C086.000F: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 43.657111][ T39] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 43.666069][ T39] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 43.674006][ T39] usb 5-1: Product: syz [ 43.677966][ T39] usb 5-1: SerialNumber: syz [ 43.683309][ T39] usb 5-1: config 0 descriptor?? [ 43.818220][ T593] usb 3-1: USB disconnect, device number 8 [ 43.968135][ T39] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 43.977547][ T39] usb 5-1: USB disconnect, device number 8 [ 44.057795][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 44.057809][ T30] audit: type=1400 audit(1730178231.132:490): avc: denied { unlink } for pid=1314 comm="syz.3.399" name="#9" dev="tmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.057962][ T1315] overlayfs: invalid origin (0000007900656d5f63616368655f66726565000000000000000000000000000000000000000000000000000000000000) [ 44.257140][ T350] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.280248][ T1323] loop3: detected capacity change from 0 to 40427 [ 44.331356][ T1323] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 44.339662][ T1323] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 44.349191][ T1323] F2FS-fs (loop3): invalid crc value [ 44.360616][ T1323] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.391581][ T30] audit: type=1400 audit(1730178231.462:491): avc: denied { ioctl } for pid=1336 comm="syz.2.408" path="socket:[19796]" dev="sockfs" ino=19796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.417527][ T1323] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 44.424402][ T1323] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.435916][ T1337] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 44.469355][ T1323] attempt to access beyond end of device [ 44.469355][ T1323] loop3: rw=2049, want=45224, limit=40427 [ 44.472374][ T1340] loop2: detected capacity change from 0 to 1024 [ 44.492997][ T30] audit: type=1404 audit(1730178231.562:492): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 44.509187][ T1323] attempt to access beyond end of device [ 44.509187][ T1323] loop3: rw=2049, want=40968, limit=40427 [ 44.523335][ T30] audit: type=1404 audit(1730178231.562:493): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 44.538382][ T30] audit: type=1400 audit(1730178231.562:494): avc: denied { ioctl } for pid=1322 comm="syz.3.403" path="/91/bus/cpuset.effective_cpus" dev="loop3" ino=455 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.563773][ T30] audit: type=1400 audit(1730178231.562:495): avc: denied { read write } for pid=795 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.566001][ T1340] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 44.588554][ T30] audit: type=1400 audit(1730178231.562:496): avc: denied { open } for pid=795 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.635883][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 44.644808][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 44.652098][ T30] audit: type=1400 audit(1730178231.562:497): avc: denied { ioctl } for pid=795 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.697095][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.708032][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.718523][ T30] audit: type=1400 audit(1730178231.572:498): avc: denied { map_create } for pid=1343 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.741893][ T30] audit: type=1400 audit(1730178231.572:499): avc: denied { bpf } for pid=1343 comm="syz.4.411" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.771959][ T1350] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 44.781860][ T1350] SELinux: security_context_str_to_sid(staff_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 44.817093][ T350] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 44.826008][ T350] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 44.846832][ T350] usb 1-1: Product: syz [ 44.857555][ T350] usb 1-1: config 0 descriptor?? [ 44.891965][ T1361] capability: warning: `syz.4.417' uses 32-bit capabilities (legacy support in use) [ 44.902519][ T1365] loop2: detected capacity change from 0 to 128 [ 44.948316][ T1365] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 44.996146][ T1365] attempt to access beyond end of device [ 44.996146][ T1365] loop2: rw=3, want=6952, limit=128 [ 45.007372][ T1365] attempt to access beyond end of device [ 45.007372][ T1365] loop2: rw=2051, want=7894, limit=128 [ 45.061156][ T1385] input: syz1 as /devices/virtual/input/input8 [ 45.183536][ T1407] loop3: detected capacity change from 0 to 512 [ 45.233135][ T1407] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 45.245861][ T1407] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.247216][ T1420] loop2: detected capacity change from 0 to 1024 [ 45.260999][ T1407] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.439: Failed to acquire dquot type 1 [ 45.263595][ T1420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.276517][ T1407] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.439: bg 0: block 40: padding at end of block bitmap is not set [ 45.297615][ T1407] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 45.303605][ T1420] syz.2.444 (pid 1420) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 45.306556][ T1407] EXT4-fs (loop3): 1 truncate cleaned up [ 45.322719][ T1407] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.348153][ T350] konepure 0003:1E7D:2DB4.0010: item fetching failed at offset 10/11 [ 45.359688][ T350] konepure 0003:1E7D:2DB4.0010: parse failed [ 45.360276][ T1424] syz.4.446[1424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.365809][ T350] konepure: probe of 0003:1E7D:2DB4.0010 failed with error -22 [ 45.366259][ T1424] syz.4.446[1424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.418219][ T1426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1426 comm=syz.4.448 [ 45.458829][ T1436] netem: change failed [ 45.490263][ T1437] loop4: detected capacity change from 0 to 512 [ 45.558005][ T503] usb 1-1: USB disconnect, device number 9 [ 45.582872][ T1437] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 45.599196][ T1437] ext4 filesystem being mounted at /76/bus supports timestamps until 2038 (0x7fffffff) [ 45.721853][ T1445] loop3: detected capacity change from 0 to 40427 [ 45.747037][ T660] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.778357][ T1458] loop4: detected capacity change from 0 to 512 [ 45.797588][ T1445] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 45.805241][ T1445] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.815571][ T1445] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.828743][ T1458] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.839721][ T1458] ext4 filesystem being mounted at /82/bus supports timestamps until 2038 (0x7fffffff) [ 45.850225][ T1445] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.857498][ T1445] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.872787][ T1458] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 45.905606][ T1466] loop4: detected capacity change from 0 to 128 [ 45.948162][ T1466] FAT-fs (loop4): bogus number of reserved sectors [ 45.964881][ T1466] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 45.975255][ T1466] FAT-fs (loop4): Can't find a valid FAT filesystem [ 45.997012][ T660] usb 3-1: Using ep0 maxpacket: 16 [ 46.117155][ T660] usb 3-1: config 0 has no interfaces? [ 46.139929][ T1488] loop3: detected capacity change from 0 to 512 [ 46.178128][ T1488] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 46.182694][ T1493] loop0: detected capacity change from 0 to 512 [ 46.203219][ T1488] EXT4-fs (loop3): 1 truncate cleaned up [ 46.208859][ T1488] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 46.231360][ T1488] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.471: Logical block already allocated [ 46.243284][ T1488] EXT4-fs (loop3): Remounting filesystem read-only [ 46.263802][ T1488] EXT4-fs error (device loop3): ext4_remount:5845: comm syz.3.471: Abort forced by user [ 46.274331][ T1488] EXT4-fs (loop3): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback. [ 46.284573][ T660] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 46.302138][ T1493] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 46.302620][ T1499] loop4: detected capacity change from 0 to 512 [ 46.315398][ T660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.322425][ T1493] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff) [ 46.330148][ T660] usb 3-1: Product: syz [ 46.342990][ T660] usb 3-1: Manufacturer: syz [ 46.349556][ T660] usb 3-1: SerialNumber: syz [ 46.361860][ T660] r8152-cfgselector 3-1: config 0 descriptor?? [ 46.363832][ T1499] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.379793][ T1499] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038 (0x7fffffff) [ 46.396829][ T1503] bridge0: port 3(syz_tun) entered blocking state [ 46.405074][ T1503] bridge0: port 3(syz_tun) entered disabled state [ 46.416342][ T1505] loop0: detected capacity change from 0 to 1024 [ 46.424069][ T1503] device syz_tun entered promiscuous mode [ 46.429872][ T1503] bridge0: port 3(syz_tun) entered blocking state [ 46.436132][ T1503] bridge0: port 3(syz_tun) entered forwarding state [ 46.444244][ T1505] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.474965][ T1505] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,bsddf,nojournal_checksum,norecovery,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 46.617034][ T660] r8152-cfgselector 3-1: Unknown version 0x0000 [ 46.628216][ T1527] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 46.647071][ T660] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 46.726238][ T593] ================================================================== [ 46.734150][ T593] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120 [ 46.741869][ T593] Read of size 8 at addr ffff88811577a388 by task kworker/1:5/593 [ 46.749575][ T593] [ 46.751678][ T593] CPU: 1 PID: 593 Comm: kworker/1:5 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 46.761753][ T593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.772338][ T593] Workqueue: events binder_deferred_func [ 46.777934][ T593] Call Trace: [ 46.781147][ T593] [ 46.783919][ T593] dump_stack_lvl+0x151/0x1c0 [ 46.788448][ T593] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.793902][ T593] ? panic+0x760/0x760 [ 46.797813][ T593] ? kasan_quarantine_put+0x34/0x1a0 [ 46.802951][ T593] print_address_description+0x87/0x3b0 [ 46.808315][ T593] kasan_report+0x179/0x1c0 [ 46.812648][ T593] ? _raw_spin_lock+0xa4/0x1b0 [ 46.817344][ T593] ? __list_del_entry_valid+0x2f/0x120 [ 46.822630][ T593] ? __list_del_entry_valid+0x2f/0x120 [ 46.827936][ T593] __asan_report_load8_noabort+0x14/0x20 [ 46.833397][ T593] __list_del_entry_valid+0x2f/0x120 [ 46.838514][ T593] binder_release_work+0xcd/0x680 [ 46.843390][ T593] binder_deferred_func+0x1847/0x1bc0 [ 46.848681][ T593] ? read_word_at_a_time+0x12/0x20 [ 46.853718][ T593] process_one_work+0x6bb/0xc10 [ 46.858505][ T593] worker_thread+0xad5/0x12a0 [ 46.863097][ T593] ? _raw_spin_lock+0x1b0/0x1b0 [ 46.867791][ T593] kthread+0x421/0x510 [ 46.871704][ T593] ? worker_clr_flags+0x180/0x180 [ 46.876544][ T593] ? kthread_blkcg+0xd0/0xd0 [ 46.880976][ T593] ret_from_fork+0x1f/0x30 [ 46.885227][ T593] [ 46.888089][ T593] [ 46.890346][ T593] Allocated by task 1533: [ 46.894597][ T593] ____kasan_kmalloc+0xdb/0x110 [ 46.899294][ T593] __kasan_kmalloc+0x9/0x10 [ 46.903625][ T593] kmem_cache_alloc_trace+0x115/0x210 [ 46.908957][ T593] binder_thread_write+0x9f5/0x6ec0 [ 46.913984][ T593] binder_ioctl_write_read+0x205/0x7300 [ 46.919363][ T593] binder_ioctl+0x371/0x2640 [ 46.923792][ T593] __se_sys_ioctl+0x114/0x190 [ 46.928417][ T593] __x64_sys_ioctl+0x7b/0x90 [ 46.932959][ T593] x64_sys_call+0x98/0x9a0 [ 46.937219][ T593] do_syscall_64+0x3b/0xb0 [ 46.941463][ T593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.947197][ T593] [ 46.949362][ T593] Freed by task 593: [ 46.953184][ T593] kasan_set_track+0x4b/0x70 [ 46.958736][ T593] kasan_set_free_info+0x23/0x40 [ 46.963481][ T593] ____kasan_slab_free+0x126/0x160 [ 46.968652][ T593] __kasan_slab_free+0x11/0x20 [ 46.973352][ T593] slab_free_freelist_hook+0xbd/0x190 [ 46.978644][ T593] kfree+0xc8/0x220 [ 46.982282][ T593] binder_free_ref+0x128/0x260 [ 46.986884][ T593] binder_deferred_func+0x171c/0x1bc0 [ 46.992177][ T593] process_one_work+0x6bb/0xc10 [ 46.996865][ T593] worker_thread+0xad5/0x12a0 [ 47.001378][ T593] kthread+0x421/0x510 [ 47.005290][ T593] ret_from_fork+0x1f/0x30 [ 47.009539][ T593] [ 47.011704][ T593] The buggy address belongs to the object at ffff88811577a380 [ 47.011704][ T593] which belongs to the cache kmalloc-64 of size 64 [ 47.025514][ T593] The buggy address is located 8 bytes inside of [ 47.025514][ T593] 64-byte region [ffff88811577a380, ffff88811577a3c0) [ 47.038353][ T593] The buggy address belongs to the page: [ 47.043834][ T593] page:ffffea000455de80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11577a [ 47.054322][ T593] flags: 0x4000000000000200(slab|zone=1) [ 47.059796][ T593] raw: 4000000000000200 ffffea0004477280 0000001100000011 ffff888100042780 [ 47.068308][ T593] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 47.076722][ T593] page dumped because: kasan: bad access detected [ 47.082968][ T593] page_owner tracks the page as allocated [ 47.088520][ T593] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 101, ts 4109037931, free_ts 0 [ 47.103453][ T593] post_alloc_hook+0x1a3/0x1b0 [ 47.108236][ T593] prep_new_page+0x1b/0x110 [ 47.112716][ T593] get_page_from_freelist+0x3550/0x35d0 [ 47.118045][ T593] __alloc_pages+0x27e/0x8f0 [ 47.122471][ T593] new_slab+0x9a/0x4e0 [ 47.126375][ T593] ___slab_alloc+0x39e/0x830 [ 47.131065][ T593] __slab_alloc+0x4a/0x90 [ 47.135264][ T593] kmem_cache_alloc_trace+0x142/0x210 [ 47.140440][ T593] kernfs_fop_open+0x7fa/0xab0 [ 47.145038][ T593] do_dentry_open+0x81c/0xfd0 [ 47.149550][ T593] vfs_open+0x73/0x80 [ 47.153457][ T593] path_openat+0x26f0/0x2f40 [ 47.157885][ T593] do_filp_open+0x21c/0x460 [ 47.163526][ T593] do_sys_openat2+0x13f/0x820 [ 47.168042][ T593] __x64_sys_openat+0x243/0x290 [ 47.172729][ T593] x64_sys_call+0x6bf/0x9a0 [ 47.177067][ T593] page_owner free stack trace missing [ 47.182367][ T593] [ 47.184534][ T593] Memory state around the buggy address: [ 47.190035][ T593] ffff88811577a280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 47.197991][ T593] ffff88811577a300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 47.205981][ T593] >ffff88811577a380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 47.214138][ T593] ^ [ 47.218411][ T593] ffff88811577a400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 47.226380][ T593] ffff88811577a480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 47.234374][ T593] ================================================================== [ 47.242279][ T593] Disabling lock debugging due to kernel taint [ 47.249142][ T593] general protection fault, probably for non-canonical address 0xf7e7fc42e000004a: 0000 [#1] PREEMPT SMP KASAN [ 47.260762][ T593] KASAN: maybe wild-memory-access in range [0xbf40021700000250-0xbf40021700000257] [ 47.270068][ T593] CPU: 1 PID: 593 Comm: kworker/1:5 Tainted: G B 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 47.281449][ T593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.291416][ T593] Workqueue: events binder_deferred_func [ 47.296971][ T593] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 47.302880][ T593] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75 [ 47.322406][ T593] RSP: 0018:ffffc90000ba7c00 EFLAGS: 00010a02 [ 47.328303][ T593] RAX: 17e80042e000004a RBX: ffff88812b1c2900 RCX: ffffffff826a1859 [ 47.336117][ T593] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff88811577a380 [ 47.344058][ T593] RBP: ffffc90000ba7c20 R08: ffffffff8141997b R09: 0000000000000003 [ 47.352432][ T593] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000 [ 47.360463][ T593] R13: ffff88811577a380 R14: ffff88811577a380 R15: bf40021700000251 [ 47.368458][ T593] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 47.377395][ T593] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.383960][ T593] CR2: 000000110c30bcfe CR3: 0000000124678000 CR4: 00000000003526a0 [ 47.391772][ T593] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.399582][ T593] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.407479][ T593] Call Trace: [ 47.410605][ T593] [ 47.413377][ T593] ? __die_body+0x62/0xb0 [ 47.417632][ T593] ? die_addr+0x9f/0xd0 [ 47.421744][ T593] ? exc_general_protection+0x311/0x4b0 [ 47.427223][ T593] ? check_panic_on_warn+0x65/0xb0 [ 47.432156][ T593] ? asm_exc_general_protection+0x27/0x30 [ 47.437799][ T593] ? check_panic_on_warn+0x5b/0xb0 [ 47.442919][ T593] ? __list_del_entry_valid+0x49/0x120 [ 47.448361][ T593] ? __list_del_entry_valid+0x75/0x120 [ 47.453652][ T593] binder_release_work+0xcd/0x680 [ 47.458513][ T593] binder_deferred_func+0x1847/0x1bc0 [ 47.463811][ T593] ? read_word_at_a_time+0x12/0x20 [ 47.468843][ T593] process_one_work+0x6bb/0xc10 [ 47.473528][ T593] worker_thread+0xad5/0x12a0 [ 47.478179][ T593] ? _raw_spin_lock+0x1b0/0x1b0 [ 47.482953][ T593] kthread+0x421/0x510 [ 47.486853][ T593] ? worker_clr_flags+0x180/0x180 [ 47.491717][ T593] ? kthread_blkcg+0xd0/0xd0 [ 47.496146][ T593] ret_from_fork+0x1f/0x30 [ 47.500492][ T593] [ 47.503357][ T593] Modules linked in: [ 47.507723][ T593] ---[ end trace 3607bd9979ab3435 ]--- [ 47.513352][ T593] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 47.519348][ T593] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75 [ 47.538865][ T593] RSP: 0018:ffffc90000ba7c00 EFLAGS: 00010a02 [ 47.545006][ T593] RAX: 17e80042e000004a RBX: ffff88812b1c2900 RCX: ffffffff826a1859 [ 47.552943][ T593] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff88811577a380 [ 47.560698][ T593] RBP: ffffc90000ba7c20 R08: ffffffff8141997b R09: 0000000000000003 [ 47.568505][ T593] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000 [ 47.576289][ T593] R13: ffff88811577a380 R14: ffff88811577a380 R15: bf40021700000251 [ 47.584123][ T593] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 47.592877][ T593] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.599506][ T593] CR2: 000000110c30bcfe CR3: 0000000006a0f000 CR4: 00000000003526a0 [ 47.607295][ T593] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.615096][ T593] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.622939][ T593] Kernel panic - not syncing: Fatal exception [ 47.629100][ T593] Kernel Offset: disabled [ 47.633229][ T593] Rebooting in 86400 seconds..