last executing test programs: 2.945400029s ago: executing program 4 (id=357): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x88, &(0x7f0000000640)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@norecovery}, {@nodiscard}, {@grpid}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") chdir(&(0x7f0000000500)='./file0\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 2.730562616s ago: executing program 4 (id=361): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x7af, 0x1, 0x1}, [@mark={0xc, 0x15, {0x350759, 0xffff}}]}, 0xc4}}, 0x400c000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 2.663148412s ago: executing program 4 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x5000) 2.580692009s ago: executing program 4 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 2.574924679s ago: executing program 3 (id=366): r0 = io_uring_setup(0x25b4, &(0x7f00000002c0)={0x0, 0x1670, 0x400, 0x2, 0x170}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.529821413s ago: executing program 4 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.393332764s ago: executing program 4 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="c2", 0x1}, {0x0}], 0x2}}], 0x1, 0x4040000) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) 2.353684237s ago: executing program 32 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="c2", 0x1}, {0x0}], 0x2}}], 0x1, 0x4040000) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) 2.07723802s ago: executing program 3 (id=376): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1.94874175s ago: executing program 3 (id=378): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1.924589032s ago: executing program 3 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) getrusage(0xffffffffffffffff, &(0x7f00000004c0)) 1.874296047s ago: executing program 3 (id=380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) socket$tipc(0x1e, 0x7, 0x0) 1.857468468s ago: executing program 3 (id=381): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x40, 0x5, 0x1, "9a"}}) 1.392669426s ago: executing program 5 (id=400): syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() timer_create(0x2, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.000450538s ago: executing program 1 (id=420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 994.547019ms ago: executing program 2 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 965.758251ms ago: executing program 1 (id=422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r1}, 0xc) 935.760474ms ago: executing program 2 (id=423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000380)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x26, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x12, 0x0, @opaque="b5ace4c70521b9b40451"}}}}}, 0x0) 935.124963ms ago: executing program 1 (id=433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 906.603566ms ago: executing program 2 (id=424): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 726.53042ms ago: executing program 0 (id=434): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2d74, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 717.240601ms ago: executing program 0 (id=435): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[@cpuid={0x14, 0x18, {0xb, 0xde}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 656.381986ms ago: executing program 0 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 656.163947ms ago: executing program 0 (id=437): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7fff0000}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 655.989656ms ago: executing program 0 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 539.159136ms ago: executing program 0 (id=439): prlimit64(0x0, 0x0, &(0x7f0000000300)={0x42, 0x80}, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 535.911526ms ago: executing program 5 (id=440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) 512.792208ms ago: executing program 5 (id=441): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 487.16553ms ago: executing program 5 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 464.078292ms ago: executing program 5 (id=443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e21}, 0x6e, 0x0}}], 0x3d, 0x20000000) 446.301294ms ago: executing program 5 (id=444): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x40, 0xe, 0x7, {0x7, 0x21, "edb4b4f9a1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 91.439182ms ago: executing program 1 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 83.728423ms ago: executing program 2 (id=446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "b9ac44c7cebf9296", "d5678c42a6ad3aee4042ff75614b62a9bffca82c1672da689cc991cae7dfbbf6", "20e504f4", "cec7d1bca4b455ee"}, 0x38) 59.128995ms ago: executing program 2 (id=447): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 56.703125ms ago: executing program 1 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 42.030437ms ago: executing program 2 (id=449): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a"], 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000003140)={0xffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) 0s ago: executing program 1 (id=450): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 20.521041][ T28] audit: type=1400 audit(1756411399.614:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.522111][ T275] cgroup: Unknown subsys name 'net' [ 20.543691][ T28] audit: type=1400 audit(1756411399.614:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.571015][ T28] audit: type=1400 audit(1756411399.634:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.590873][ T275] cgroup: Unknown subsys name 'devices' [ 20.681721][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.687346][ T275] cgroup: Unknown subsys name 'rlimit' [ 20.819659][ T28] audit: type=1400 audit(1756411399.904:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.842845][ T28] audit: type=1400 audit(1756411399.904:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.861569][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.867909][ T28] audit: type=1400 audit(1756411399.904:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.900126][ T28] audit: type=1400 audit(1756411399.964:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.908959][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.925900][ T28] audit: type=1400 audit(1756411399.964:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.960188][ T28] audit: type=1400 audit(1756411399.994:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.986018][ T28] audit: type=1400 audit(1756411399.994:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.702191][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.709262][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.716993][ T285] device bridge_slave_0 entered promiscuous mode [ 21.731952][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.738997][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.746413][ T285] device bridge_slave_1 entered promiscuous mode [ 21.790749][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.797791][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.805376][ T283] device bridge_slave_0 entered promiscuous mode [ 21.813529][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.820618][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.827908][ T283] device bridge_slave_1 entered promiscuous mode [ 21.846601][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.853747][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.861174][ T284] device bridge_slave_0 entered promiscuous mode [ 21.884380][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.891488][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.898822][ T284] device bridge_slave_1 entered promiscuous mode [ 21.939924][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.947032][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.954444][ T286] device bridge_slave_0 entered promiscuous mode [ 21.973685][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.980782][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.988191][ T286] device bridge_slave_1 entered promiscuous mode [ 22.075139][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.082233][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.089530][ T287] device bridge_slave_0 entered promiscuous mode [ 22.096529][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.103627][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.110988][ T287] device bridge_slave_1 entered promiscuous mode [ 22.179021][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.186183][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.193513][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.200543][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.235131][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.242246][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.249602][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.256740][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.277829][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.284891][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.292314][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.299511][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.342270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.351148][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.358546][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.365958][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.373978][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.381271][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.389452][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.397040][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.424094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.431891][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.440091][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.447113][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.454650][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.462971][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.470015][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.477427][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.502429][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.511036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.519195][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.526251][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.534152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.542612][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.549651][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.557239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.565458][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.572498][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.579845][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.588151][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.595186][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.602589][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.610732][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.617740][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.625278][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.641726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.650130][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.658135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.666189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.694024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.711916][ T285] device veth0_vlan entered promiscuous mode [ 22.719704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.727845][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.736077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.744516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.752547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.761193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.769531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.777750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.785848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.794014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.802092][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.809540][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.820364][ T283] device veth0_vlan entered promiscuous mode [ 22.827750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.836057][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.844566][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.853128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.863465][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.871117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.883359][ T286] device veth0_vlan entered promiscuous mode [ 22.896793][ T285] device veth1_macvtap entered promiscuous mode [ 22.914546][ T284] device veth0_vlan entered promiscuous mode [ 22.921051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.929084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.937405][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.945809][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.954160][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.962016][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.970711][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.978953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.987597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.996048][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.003975][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.012300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.019864][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.027638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.035369][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.050671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.058220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.065893][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.074231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.082585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.090997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.101218][ T283] device veth1_macvtap entered promiscuous mode [ 23.112373][ T286] device veth1_macvtap entered promiscuous mode [ 23.120478][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.128218][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.136615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.145887][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.152926][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.160468][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.168918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.177133][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.184172][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.191638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.199844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.208279][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.218091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.228344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.251494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.251965][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 23.260627][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.276492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.285044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.293765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.302155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.310970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.319207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.328992][ T284] device veth1_macvtap entered promiscuous mode [ 23.343658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.352266][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.361663][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.370763][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.407779][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.416840][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.425388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.434498][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.459350][ T287] device veth0_vlan entered promiscuous mode [ 23.477755][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.496386][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.506794][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.515122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.524521][ T351] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.543014][ T344] loop2: detected capacity change from 0 to 8192 [ 23.549794][ T287] device veth1_macvtap entered promiscuous mode [ 23.551943][ T353] loop0: detected capacity change from 0 to 512 [ 23.560825][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.576428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.585754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.600424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.609484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.618754][ T353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 23.628069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.660514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.699219][ T283] EXT4-fs (loop0): unmounting filesystem. [ 23.851193][ T388] loop3: detected capacity change from 0 to 2048 [ 23.900635][ T388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 23.950061][ T19] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 23.968457][ T287] EXT4-fs (loop3): unmounting filesystem. [ 23.971080][ T367] loop2: detected capacity change from 0 to 40427 [ 23.982361][ T367] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 23.989119][ T367] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 24.024457][ T367] F2FS-fs (loop2): Found nat_bits in checkpoint [ 24.025581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 24.058256][ T412] loop0: detected capacity change from 0 to 512 [ 24.101666][ T412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 24.111018][ T367] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 24.115549][ T412] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.120998][ T367] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 24.150470][ T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 24.159762][ T412] syz.0.29[412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.162604][ T412] syz.0.29[412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.170012][ T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 24.196082][ T19] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 24.207005][ T19] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 24.229638][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.241955][ T367] syz.2.12: attempt to access beyond end of device [ 24.241955][ T367] loop2: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 24.264287][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.272460][ T19] usb 2-1: Product: syz [ 24.276827][ T19] usb 2-1: Manufacturer: syz [ 24.281733][ T19] usb 2-1: SerialNumber: syz [ 24.287795][ T285] syz-executor: attempt to access beyond end of device [ 24.287795][ T285] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 24.293198][ T361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 24.312452][ T19] cdc_mbim 2-1:1.0: skipping garbage [ 24.316827][ T283] EXT4-fs (loop0): unmounting filesystem. [ 24.348503][ T426] hid-generic 0000:0003:0003.0001: item fetching failed at offset 0/2 [ 24.357851][ T426] hid-generic: probe of 0000:0003:0003.0001 failed with error -22 [ 24.450937][ T59] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.473726][ T438] sock: sock_set_timeout: `syz.2.36' (pid 438) tries to set negative timeout [ 24.498090][ T441] SELinux: policydb table sizes (0,538976256) do not match mine (8,7) [ 24.506937][ T441] SELinux: failed to load policy [ 24.543484][ T361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 24.551350][ T361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 24.583607][ T449] ======================================================= [ 24.583607][ T449] WARNING: The mand mount option has been deprecated and [ 24.583607][ T449] and is ignored by this kernel. Remove the mand [ 24.583607][ T449] option from the mount to silence this warning. [ 24.583607][ T449] ======================================================= [ 24.623108][ T449] tmpfs: Unknown parameter 'gr' [ 24.662391][ T59] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 24.676744][ T59] usb 4-1: config 0 has no interface number 0 [ 24.683118][ T59] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.698666][ T59] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.709642][ T59] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 24.719134][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.733064][ T59] usb 4-1: config 0 descriptor?? [ 24.806200][ T466] loop2: detected capacity change from 0 to 512 [ 24.822602][ T466] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 24.831846][ T466] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 24.847578][ T466] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.52: corrupted inode contents [ 24.863121][ T466] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #2: comm syz.2.52: mark_inode_dirty error [ 24.874985][ T466] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.52: corrupted inode contents [ 24.887358][ T466] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.52: mark_inode_dirty error [ 24.904572][ T466] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #18: comm syz.2.52: directory missing '.' [ 24.924299][ T285] EXT4-fs (loop2): unmounting filesystem. [ 25.154056][ T59] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0002/input/input4 [ 25.165666][ T361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 25.173285][ T361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 25.180650][ T19] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 25.220023][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.238682][ T59] holtek_kbd 0003:04D9:A055.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 25.359144][ T24] usb 4-1: USB disconnect, device number 2 [ 25.381809][ T19] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 25.388522][ T19] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 25.396259][ T19] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 4a:44:cf:67:47:0b [ 25.409411][ T19] usb 2-1: USB disconnect, device number 2 [ 25.415552][ T19] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 25.425253][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.438294][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.448261][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.461575][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.470763][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.479470][ T39] usb 3-1: config 0 descriptor?? [ 25.590031][ T59] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.667843][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 25.667857][ T28] audit: type=1400 audit(1756411404.754:156): avc: denied { create } for pid=484 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 25.693548][ T28] audit: type=1400 audit(1756411404.754:157): avc: denied { ioctl } for pid=484 comm="syz.4.58" path="socket:[16363]" dev="sockfs" ino=16363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 25.722546][ T28] audit: type=1400 audit(1756411404.754:158): avc: denied { write } for pid=484 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.742268][ T28] audit: type=1400 audit(1756411404.764:159): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.774546][ T28] audit: type=1400 audit(1756411404.864:160): avc: denied { read } for pid=488 comm="syz.4.60" dev="nsfs" ino=4026532568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.795598][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 25.796699][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.801166][ T28] audit: type=1400 audit(1756411404.864:161): avc: denied { open } for pid=488 comm="syz.4.60" path="net:[4026532568]" dev="nsfs" ino=4026532568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.814613][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.841169][ T28] audit: type=1400 audit(1756411404.864:162): avc: denied { create } for pid=488 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.853496][ T491] loop4: detected capacity change from 0 to 1024 [ 25.871309][ T59] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 25.872323][ T28] audit: type=1400 audit(1756411404.864:163): avc: denied { setopt } for pid=488 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.885159][ T491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.911837][ T59] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 25.912954][ T39] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 25.930651][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.943840][ T39] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 25.960402][ T59] usb 1-1: config 0 descriptor?? [ 25.969852][ T39] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 25.978367][ T39] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 25.986265][ T500] loop1: detected capacity change from 0 to 1024 [ 25.986768][ T39] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 26.000610][ T39] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 26.008171][ T39] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 26.008392][ T500] EXT4-fs: Ignoring removed mblk_io_submit option [ 26.016199][ T39] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 26.024688][ T500] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 26.030602][ T491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.040786][ T500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.061675][ T28] audit: type=1400 audit(1756411405.134:164): avc: denied { mount } for pid=490 comm="syz.4.61" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.087808][ T28] audit: type=1400 audit(1756411405.174:165): avc: denied { read write } for pid=490 comm="syz.4.61" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.112019][ T39] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 26.142811][ T286] EXT4-fs (loop4): unmounting filesystem. [ 26.150235][ T284] EXT4-fs (loop1): unmounting filesystem. [ 26.161653][ T506] loop3: detected capacity change from 0 to 512 [ 26.189209][ T506] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 26.208593][ T506] EXT4-fs (loop3): orphan cleanup on readonly fs [ 26.217169][ T506] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.66: Failed to acquire dquot type 1 [ 26.230405][ T506] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.66: bg 0: block 40: padding at end of block bitmap is not set [ 26.250084][ T506] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 26.260325][ T506] EXT4-fs (loop3): 1 truncate cleaned up [ 26.265762][ T514] usb 3-1: USB disconnect, device number 2 [ 26.268216][ T506] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.295080][ T287] EXT4-fs (loop3): unmounting filesystem. [ 26.309742][ T518] loop3: detected capacity change from 0 to 512 [ 26.318023][ T518] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 26.326820][ T518] EXT4-fs (loop3): invalid journal inode [ 26.332828][ T518] EXT4-fs (loop3): can't get journal size [ 26.339719][ T518] EXT4-fs (loop3): 1 truncate cleaned up [ 26.345686][ T518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 26.364934][ T518] EXT4-fs (loop3): shut down requested (1) [ 26.384028][ T287] EXT4-fs (loop3): unmounting filesystem. [ 26.390378][ T59] HID 045e:07da: Invalid code 65791 type 1 [ 26.398317][ T59] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input5 [ 26.417180][ T59] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 26.480895][ T524] loop3: detected capacity change from 0 to 8192 [ 26.490627][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.498190][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.551510][ T530] syz.3.74[530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.551555][ T530] syz.3.74[530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.581933][ T532] syz.3.75 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 26.636877][ T516] usb 1-1: USB disconnect, device number 2 [ 26.701440][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.709181][ T540] capability: warning: `syz.3.79' uses deprecated v2 capabilities in a way that may be insecure [ 26.711730][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.732786][ T6] usb 2-1: config 0 has no interfaces? [ 26.738419][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.750386][ T6] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 26.759652][ T19] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 26.769167][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.777276][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 26.790055][ T6] usb 2-1: Product: syz [ 26.794740][ T6] usb 2-1: Manufacturer: syz [ 26.799659][ T6] usb 2-1: SerialNumber: syz [ 26.804708][ T19] usb 5-1: SerialNumber: syz [ 26.811737][ T6] usb 2-1: config 0 descriptor?? [ 27.012808][ T19] usb 5-1: 0:2 : does not exist [ 27.022736][ T6] usb 2-1: USB disconnect, device number 3 [ 27.031289][ T19] usb 5-1: USB disconnect, device number 2 [ 27.105156][ T576] loop2: detected capacity change from 0 to 512 [ 27.130116][ T426] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.131360][ T576] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 27.145802][ T576] System zones: 0-2, 18-18, 34-35 [ 27.151810][ T576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.161151][ T576] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.199017][ T285] EXT4-fs (loop2): unmounting filesystem. [ 27.230532][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.279024][ T592] sch_fq: defrate 4294967295 ignored. [ 27.310046][ T426] usb 4-1: Using ep0 maxpacket: 32 [ 27.317325][ T426] usb 4-1: config 0 interface 0 has no altsetting 0 [ 27.324871][ T426] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 27.334462][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.343237][ T426] usb 4-1: config 0 descriptor?? [ 27.490176][ T59] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.554422][ T426] usbhid 4-1:0.0: can't add hid device: -71 [ 27.560508][ T426] usbhid: probe of 4-1:0.0 failed with error -71 [ 27.567697][ T426] usb 4-1: USB disconnect, device number 3 [ 27.580113][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.671165][ T59] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 27.684405][ T59] usb 1-1: config 1 interface 0 has no altsetting 0 [ 27.692483][ T59] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.701735][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 27.709814][ T59] usb 1-1: SerialNumber: syz [ 27.760027][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 27.770133][ T39] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 27.778496][ T39] usb 3-1: config 0 has no interface number 0 [ 27.784684][ T39] usb 3-1: config 0 interface 184 has no altsetting 0 [ 27.810586][ T39] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 27.819737][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.827835][ T39] usb 3-1: Product: syz [ 27.832098][ T39] usb 3-1: Manufacturer: syz [ 27.836704][ T39] usb 3-1: SerialNumber: syz [ 27.845814][ T39] usb 3-1: config 0 descriptor?? [ 27.861806][ T39] smsc75xx v1.0.0 [ 28.120007][ T426] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.310038][ T426] usb 4-1: Using ep0 maxpacket: 32 [ 28.316384][ T426] usb 4-1: config 0 interface 0 has no altsetting 0 [ 28.325263][ T59] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 28.337346][ T426] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 28.347912][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.371590][ T426] usb 4-1: config 0 descriptor?? [ 28.448894][ T613] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 28.546339][ T617] loop1: detected capacity change from 0 to 8192 [ 28.738522][ T59] usb 1-1: USB disconnect, device number 3 [ 28.750777][ T59] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 28.783389][ T426] hid (null): invalid report_count 61715 [ 28.790399][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 28.792529][ T426] uclogic 0003:5543:0522.0005: invalid report_count 61715 [ 28.798464][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.805509][ T426] uclogic 0003:5543:0522.0005: item 0 2 1 9 parsing failed [ 28.830616][ T426] uclogic 0003:5543:0522.0005: parse failed [ 28.838831][ T426] uclogic: probe of 0003:5543:0522.0005 failed with error -22 [ 28.857831][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 28.881040][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 28.892583][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 28.914689][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 28.927866][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 28.939307][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 28.948907][ T39] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 28.959172][ T39] usb 3-1: USB disconnect, device number 3 [ 29.002280][ T19] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 29.025293][ T426] usb 4-1: USB disconnect, device number 4 [ 29.031390][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.044090][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 29.052360][ T19] usb 5-1: SerialNumber: syz [ 29.258499][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.265793][ T664] Zero length message leads to an empty skb [ 29.283620][ T666] netlink: 76 bytes leftover after parsing attributes in process `syz.0.110'. [ 29.304579][ T668] loop0: detected capacity change from 0 to 128 [ 29.314755][ T668] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 29.323757][ T668] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.345733][ T283] EXT4-fs (loop0): unmounting filesystem. [ 29.396976][ T678] loop2: detected capacity change from 0 to 128 [ 29.406112][ T678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 29.415089][ T678] System zones: 1-3, 19-19, 35-36 [ 29.420103][ T59] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.421158][ T678] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.436636][ T678] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.489303][ T285] EXT4-fs (loop2): unmounting filesystem. [ 29.611083][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.623728][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.635078][ T59] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 29.644716][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.644776][ T689] netlink: 'syz.3.120': attribute type 6 has an invalid length. [ 29.655589][ T59] usb 2-1: config 0 descriptor?? [ 29.670737][ T19] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 29.770011][ T516] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.960029][ T516] usb 3-1: Using ep0 maxpacket: 16 [ 29.966343][ T516] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.977113][ T516] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.992201][ T516] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.006934][ T516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.021404][ T516] usb 3-1: Product: syz [ 30.040011][ T516] usb 3-1: Manufacturer: syz [ 30.044634][ T516] usb 3-1: SerialNumber: syz [ 30.085267][ T59] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 30.090675][ T19] usb 5-1: USB disconnect, device number 3 [ 30.098545][ T19] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 30.100308][ T59] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 30.253902][ T516] usb 3-1: 0:2 : does not exist [ 30.261145][ T516] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 30.275794][ T516] usb 3-1: USB disconnect, device number 4 [ 30.284581][ T59] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 30.461583][ T731] loop0: detected capacity change from 0 to 40427 [ 30.469119][ T731] F2FS-fs (loop0): invalid crc value [ 30.475952][ T731] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.484818][ T59] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 30.499041][ T59] cp2112: probe of 0003:10C4:EA90.0006 failed with error -32 [ 30.502116][ T731] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 30.525863][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.542918][ T59] usb 2-1: USB disconnect, device number 4 [ 30.661701][ T283] syz-executor: attempt to access beyond end of device [ 30.661701][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.761460][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 30.761474][ T28] audit: type=1400 audit(1756411409.854:260): avc: denied { mount } for pid=758 comm="syz.4.132" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.807735][ T764] loop4: detected capacity change from 0 to 512 [ 30.814861][ T764] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.821618][ T764] EXT4-fs: Ignoring removed bh option [ 30.827976][ T764] EXT4-fs (loop4): Test dummy encryption mode enabled [ 30.845571][ T764] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.859324][ T757] netlink: 96 bytes leftover after parsing attributes in process `syz.3.133'. [ 30.869453][ T764] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 30.906019][ T764] EXT4-fs (loop4): 1 truncate cleaned up [ 30.918513][ T764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 30.970494][ T28] audit: type=1400 audit(1756411410.064:261): avc: denied { remove_name } for pid=763 comm="syz.4.135" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.974155][ T785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 30.996691][ T28] audit: type=1400 audit(1756411410.064:262): avc: denied { rename } for pid=763 comm="syz.4.135" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.030101][ T785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 31.084108][ T791] loop1: detected capacity change from 0 to 1024 [ 31.091041][ T286] EXT4-fs (loop4): unmounting filesystem. [ 31.097310][ T791] EXT4-fs: Ignoring removed i_version option [ 31.115024][ T791] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.169085][ T791] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.196440][ T791] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 31.215691][ T791] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.229833][ T791] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 31.242766][ T791] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.242766][ T791] [ 31.252682][ T791] EXT4-fs (loop1): Total free blocks count 0 [ 31.258674][ T791] EXT4-fs (loop1): Free/Dirty block details [ 31.264886][ T791] EXT4-fs (loop1): free_blocks=20480 [ 31.270244][ T791] EXT4-fs (loop1): dirty_blocks=64 [ 31.275410][ T791] EXT4-fs (loop1): Block reservation details [ 31.281449][ T791] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 31.287383][ T28] audit: type=1400 audit(1756411410.374:263): avc: denied { load_policy } for pid=811 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 31.287954][ T817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 31.308442][ T812] SELinux: ebitmap start bit (7603732) is not a multiple of the map unit size (64) [ 31.316763][ T813] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 31.327262][ T812] SELinux: failed to load policy [ 31.375296][ T817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.158'. [ 31.430782][ T28] audit: type=1400 audit(1756411410.524:264): avc: denied { write } for pid=822 comm="syz.0.162" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.488778][ T28] audit: type=1400 audit(1756411410.574:265): avc: denied { write } for pid=830 comm="syz.2.165" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.531343][ T835] capability: warning: `syz.3.167' uses 32-bit capabilities (legacy support in use) [ 31.545804][ T28] audit: type=1400 audit(1756411410.624:266): avc: denied { setattr } for pid=834 comm="syz.3.167" name="/" dev="incremental-fs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.686594][ T852] loop2: detected capacity change from 0 to 512 [ 31.696835][ T854] loop3: detected capacity change from 0 to 512 [ 31.719371][ T852] EXT4-fs: Ignoring removed orlov option [ 31.734166][ T852] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 31.749071][ T854] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 31.758434][ T854] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.767336][ T852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 31.777432][ T852] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.174: corrupted in-inode xattr [ 31.779632][ T829] loop1: detected capacity change from 0 to 40427 [ 31.790334][ T852] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.174: couldn't read orphan inode 15 (err -117) [ 31.808207][ T852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 31.821608][ T28] audit: type=1400 audit(1756411410.914:267): avc: denied { write } for pid=853 comm="syz.3.175" path="/54/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.844839][ T829] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 31.855529][ T287] EXT4-fs (loop3): unmounting filesystem. [ 31.858642][ T829] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 31.861595][ T28] audit: type=1400 audit(1756411410.924:268): avc: denied { ioctl } for pid=853 comm="syz.3.175" path="/54/bus/cpu.stat" dev="loop3" ino=19 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.874291][ T829] F2FS-fs (loop1): invalid crc value [ 31.901340][ T829] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.935399][ T829] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.951243][ T829] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.969605][ T285] EXT4-fs (loop2): unmounting filesystem. [ 31.989056][ T28] audit: type=1400 audit(1756411411.074:269): avc: denied { create } for pid=828 comm="syz.1.164" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 32.035415][ T829] syz.1.164: attempt to access beyond end of device [ 32.035415][ T829] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 32.074091][ T880] loop0: detected capacity change from 0 to 1024 [ 32.112325][ T880] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.136964][ T880] EXT4-fs warning (device loop0): ext4_rmdir:3243: inode #11: comm syz.0.183: empty directory 'file1' has too many links (111) [ 32.163863][ T283] EXT4-fs (loop0): unmounting filesystem. [ 32.260924][ T900] syz.1.184[900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.260992][ T900] syz.1.184[900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.308438][ T904] loop4: detected capacity change from 0 to 512 [ 32.356699][ T910] loop2: detected capacity change from 0 to 1024 [ 32.369392][ T910] EXT4-fs: Ignoring removed nobh option [ 32.394338][ T910] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.451748][ T910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.472498][ T926] syz.1.202 (926) used greatest stack depth: 21824 bytes left [ 32.522869][ T285] EXT4-fs (loop2): unmounting filesystem. [ 32.586429][ T938] loop2: detected capacity change from 0 to 128 [ 32.623359][ T914] loop4: detected capacity change from 0 to 40427 [ 32.650346][ T914] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 32.659749][ T914] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 32.691947][ T914] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.779015][ T914] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 32.837620][ T914] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 32.854505][ T914] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.954273][ T914] syz.4.198: attempt to access beyond end of device [ 32.954273][ T914] loop4: rw=2049, sector=53248, nr_sectors = 520 limit=40427 [ 33.100039][ T606] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 33.172308][ T1009] loop2: detected capacity change from 0 to 512 [ 33.179397][ T1009] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 33.188637][ T1009] EXT4-fs (loop2): invalid journal inode [ 33.194692][ T1009] EXT4-fs (loop2): can't get journal size [ 33.201969][ T1009] EXT4-fs (loop2): 1 truncate cleaned up [ 33.207895][ T1009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.221182][ T1009] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 604788741 (only 1 groups) [ 33.242258][ T1014] device syz_tun entered promiscuous mode [ 33.249512][ T1013] device syz_tun left promiscuous mode [ 33.284410][ T1022] loop1: detected capacity change from 0 to 128 [ 33.292230][ T606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.303607][ T606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 33.314627][ T606] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 33.325610][ T606] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 33.326387][ T1022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.345423][ T1022] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.356774][ T606] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.391014][ T606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.404392][ T606] usb 4-1: Product: syz [ 33.408597][ T606] usb 4-1: Manufacturer: syz [ 33.415289][ T284] EXT4-fs (loop1): unmounting filesystem. [ 33.434038][ T606] usb 4-1: SerialNumber: syz [ 33.447557][ T974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.465582][ T606] cdc_mbim 4-1:1.0: skipping garbage [ 33.551012][ T1039] loop0: detected capacity change from 0 to 512 [ 33.564131][ T1039] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.577622][ T1039] EXT4-fs: Ignoring removed bh option [ 33.583794][ T1039] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.591754][ T1039] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.603246][ T1039] EXT4-fs (loop0): 1 truncate cleaned up [ 33.608920][ T1039] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.625201][ T1029] loop1: detected capacity change from 0 to 40427 [ 33.645388][ T1029] F2FS-fs (loop1): invalid crc value [ 33.652507][ T1029] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.660914][ T283] EXT4-fs (loop0): unmounting filesystem. [ 33.675933][ T974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.706193][ T974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.723018][ T1029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.748673][ T285] EXT4-fs (loop2): unmounting filesystem. [ 33.812992][ T284] syz-executor: attempt to access beyond end of device [ 33.812992][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.007697][ T1065] loop4: detected capacity change from 0 to 40427 [ 34.017143][ T1065] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 34.025091][ T1065] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 34.034129][ T1065] F2FS-fs (loop4): invalid crc value [ 34.040764][ T1065] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.060176][ T426] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.068625][ T1065] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 34.075748][ T1065] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 34.110045][ T1065] syz.4.259: attempt to access beyond end of device [ 34.110045][ T1065] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.190035][ T59] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.260104][ T426] usb 3-1: Using ep0 maxpacket: 16 [ 34.273577][ T426] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 34.284773][ T426] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 34.294302][ T426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.302563][ T426] usb 3-1: Product: syz [ 34.306844][ T426] usb 3-1: Manufacturer: syz [ 34.311559][ T426] usb 3-1: SerialNumber: syz [ 34.318937][ T426] usb 3-1: config 0 descriptor?? [ 34.325637][ T426] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 34.329412][ T974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.334720][ T426] usb 3-1: Detected FT232R [ 34.340833][ T974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.352439][ T606] cdc_mbim 4-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 34.360161][ T606] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 34.390003][ T59] usb 1-1: Using ep0 maxpacket: 32 [ 34.396587][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.407629][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.417553][ T59] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.427333][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.437979][ T59] usb 1-1: config 0 descriptor?? [ 34.451396][ T59] hub 1-1:0.0: USB hub found [ 34.525734][ T426] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 34.567904][ T606] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 34.574772][ T606] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 34.582662][ T606] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 62:b4:8f:7f:01:fb [ 34.604708][ T606] usb 4-1: USB disconnect, device number 5 [ 34.611606][ T606] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 34.657630][ T59] hub 1-1:0.0: 9 ports detected [ 34.674183][ T59] hub 1-1:0.0: insufficient power available to use all downstream ports [ 34.741052][ T426] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 34.758850][ T1136] loop4: detected capacity change from 0 to 2048 [ 34.770842][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.797945][ T1136] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.823852][ T1136] fs-verity: sha512 using implementation "sha512-avx2" [ 34.836466][ T1136] syz.4.282 (1136) used greatest stack depth: 21312 bytes left [ 34.845086][ T286] EXT4-fs (loop4): unmounting filesystem. [ 34.864905][ T59] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 34.873010][ T59] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 34.884453][ T59] usbhid 1-1:0.0: can't add hid device: -71 [ 34.894804][ T59] usbhid: probe of 1-1:0.0 failed with error -71 [ 34.930591][ T59] usb 1-1: USB disconnect, device number 4 [ 34.957339][ T606] usb 3-1: USB disconnect, device number 5 [ 34.970122][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 34.977375][ T19] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 34.977886][ T606] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 34.996789][ T19] usb 2-1: config 0 has no interface number 0 [ 34.999146][ T606] ftdi_sio 3-1:0.0: device disconnected [ 35.010122][ T19] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 35.030305][ T19] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 35.039519][ T19] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 35.048066][ T19] usb 2-1: Product: syz [ 35.052536][ T19] usb 2-1: SerialNumber: syz [ 35.057823][ T19] usb 2-1: config 0 descriptor?? [ 35.116652][ T1169] loop3: detected capacity change from 0 to 256 [ 35.130696][ T1169] syz.3.290: attempt to access beyond end of device [ 35.130696][ T1169] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 35.276832][ T19] usb 2-1: USB disconnect, device number 5 [ 35.394140][ T1182] loop4: detected capacity change from 0 to 40427 [ 35.404388][ T1182] F2FS-fs (loop4): invalid crc value [ 35.416751][ T1182] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.456339][ T1182] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 35.577018][ T286] syz-executor: attempt to access beyond end of device [ 35.577018][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 35.661936][ T1212] loop3: detected capacity change from 0 to 1024 [ 35.682197][ T1212] EXT4-fs: Ignoring removed i_version option [ 35.690058][ T1212] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.720211][ T1210] loop2: detected capacity change from 0 to 40427 [ 35.738755][ T1212] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 35.742068][ T1210] F2FS-fs (loop2): invalid crc value [ 35.761104][ T1212] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 35.771313][ T426] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.786049][ T1210] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.791233][ T1212] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 35.805124][ T1212] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.805124][ T1212] [ 35.817479][ T1212] EXT4-fs (loop3): Total free blocks count 0 [ 35.818184][ T1225] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 35.823520][ T1212] EXT4-fs (loop3): Free/Dirty block details [ 35.823538][ T1212] EXT4-fs (loop3): free_blocks=20480 [ 35.823549][ T1212] EXT4-fs (loop3): dirty_blocks=64 [ 35.823559][ T1212] EXT4-fs (loop3): Block reservation details [ 35.823569][ T1212] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 35.846096][ T1212] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 35.847838][ T1210] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.905037][ T1230] loop1: detected capacity change from 0 to 16 [ 35.925985][ T1230] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.942855][ T285] syz-executor: attempt to access beyond end of device [ 35.942855][ T285] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 35.975268][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 35.975283][ T28] audit: type=1400 audit(35.957:309): avc: denied { read write } for pid=1235 comm="syz.1.316" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 36.005323][ T19] kernel write not supported for file /uhid (pid: 19 comm: kworker/0:1) [ 36.013402][ T426] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 36.023089][ T28] audit: type=1400 audit(35.987:310): avc: denied { open } for pid=1235 comm="syz.1.316" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 36.059069][ T426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.079997][ T426] usb 1-1: Product: syz [ 36.084279][ T426] usb 1-1: Manufacturer: syz [ 36.088969][ T426] usb 1-1: SerialNumber: syz [ 36.103607][ T426] r8152-cfgselector 1-1: config 0 descriptor?? [ 36.240590][ T1245] loop1: detected capacity change from 0 to 40427 [ 36.251080][ T1245] F2FS-fs (loop1): invalid crc value [ 36.257840][ T1245] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.285482][ T1245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 36.365731][ T284] syz-executor: attempt to access beyond end of device [ 36.365731][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.390189][ T59] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.522972][ T426] r8152-cfgselector 1-1: Unknown version 0x0000 [ 36.529401][ T426] r8152-cfgselector 1-1: bad CDC descriptors [ 36.550025][ T426] r8152-cfgselector 1-1: Unknown version 0x0000 [ 36.557230][ T426] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 36.571271][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.582330][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.592129][ T59] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 36.601289][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.620298][ T59] usb 4-1: config 0 descriptor?? [ 36.640005][ T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.799197][ T1257] loop1: detected capacity change from 0 to 131072 [ 36.809099][ T1257] F2FS-fs (loop1): invalid crc value [ 36.830115][ T19] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 36.841010][ T19] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 36.847611][ T1257] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.851856][ T19] usb 3-1: config 1 interface 0 has no altsetting 0 [ 36.875288][ T19] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 36.883473][ T1257] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 36.884487][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.900737][ T19] usb 3-1: Product: syz [ 36.905004][ T19] usb 3-1: Manufacturer: syz [ 36.909606][ T19] usb 3-1: SerialNumber: syz [ 36.918810][ T1253] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.926688][ T1253] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.933172][ T1257] F2FS-fs (loop1): Corrupted max_depth of 3: 16842753 [ 37.033333][ T59] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 37.048497][ T1269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 37.050537][ T59] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 37.100029][ T426] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 37.233067][ T59] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 37.281099][ T426] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.290923][ T426] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 37.300009][ T426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.308913][ T426] usb 5-1: config 0 descriptor?? [ 37.360025][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.400015][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.433853][ T59] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 37.441876][ T59] cp2112: probe of 0003:10C4:EA90.0007 failed with error -32 [ 37.451104][ T59] usb 4-1: USB disconnect, device number 6 [ 37.469727][ T1276] fido_id[1276]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 37.551049][ T6] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 37.562299][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.573271][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.583034][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 37.590026][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 37.597127][ T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 37.602850][ T39] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 37.611034][ T6] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 37.618970][ T39] usb 2-1: config 0 has no interface number 0 [ 37.627507][ T6] usb 1-1: Manufacturer: syz [ 37.633383][ T39] usb 2-1: config 0 interface 184 has no altsetting 0 [ 37.639324][ T6] usb 1-1: config 0 descriptor?? [ 37.651600][ T39] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 37.660881][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.668984][ T39] usb 2-1: Product: syz [ 37.673220][ T39] usb 2-1: Manufacturer: syz [ 37.677916][ T39] usb 2-1: SerialNumber: syz [ 37.683282][ T39] usb 2-1: config 0 descriptor?? [ 37.689093][ T39] smsc75xx v1.0.0 [ 37.718572][ T426] nintendo 0003:057E:200E.0008: unbalanced collection at end of report description [ 37.728173][ T426] nintendo 0003:057E:200E.0008: HID parse failed [ 37.734765][ T426] nintendo 0003:057E:200E.0008: probe - fail = -22 [ 37.741352][ T426] nintendo: probe of 0003:057E:200E.0008 failed with error -22 [ 37.925627][ T426] usb 5-1: USB disconnect, device number 4 [ 37.976185][ T28] audit: type=1400 audit(37.957:311): avc: denied { ioctl } for pid=1280 comm="syz.3.331" path="socket:[18798]" dev="sockfs" ino=18798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.982832][ T19] rtl8150 3-1:1.0: couldn't reset the device [ 38.006404][ T19] rtl8150: probe of 3-1:1.0 failed with error -5 [ 38.021654][ T28] audit: type=1400 audit(38.007:312): avc: denied { nlmsg_read } for pid=1282 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.025161][ T19] usb 3-1: USB disconnect, device number 6 [ 38.041709][ T1283] netlink: 272 bytes leftover after parsing attributes in process `syz.3.332'. [ 38.053260][ T6] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 38.064455][ T6] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 38.074123][ T6] appleir 0003:05AC:8243.0009: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 38.126396][ T28] audit: type=1400 audit(38.107:313): avc: denied { create } for pid=1285 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.145233][ T28] audit: type=1400 audit(38.117:314): avc: denied { setopt } for pid=1285 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.176414][ T28] audit: type=1400 audit(38.157:315): avc: denied { unlink } for pid=1287 comm="syz.3.334" name="#3" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.381483][ T426] usb 1-1: USB disconnect, device number 6 [ 38.702711][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 38.715207][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 38.725898][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 38.737353][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 38.747402][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 38.764413][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 39.388598][ T39] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 39.398161][ T39] usb 2-1: USB disconnect, device number 6 [ 40.299960][ C0] sched: RT throttling activated [ 40.374073][ T1313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 40.515101][ T1330] syz.1.353 uses obsolete (PF_INET,SOCK_PACKET) [ 40.555553][ T1333] loop4: detected capacity change from 0 to 256 [ 40.586642][ T103] udevd[103]: worker [357] terminated by signal 33 (Unknown signal 33) [ 40.588316][ T1335] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 40.595055][ T28] audit: type=1400 audit(40.567:316): avc: denied { relabelfrom } for pid=1334 comm="syz.2.355" name="NETLINK" dev="sockfs" ino=18945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 40.635784][ T103] udevd[103]: worker [357] failed while handling '/devices/virtual/block/loop4' [ 40.664812][ T28] audit: type=1400 audit(40.637:317): avc: denied { relabelto } for pid=1334 comm="syz.2.355" name="NETLINK" dev="sockfs" ino=18945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:syslogd_var_run_t:s0" [ 40.703896][ T1339] loop4: detected capacity change from 0 to 512 [ 40.733369][ T1339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.780923][ T1339] EXT4-fs (loop4): 1 truncate cleaned up [ 40.786664][ T1339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.821828][ T28] audit: type=1400 audit(40.807:318): avc: denied { setattr } for pid=1338 comm="syz.4.357" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.858081][ T286] EXT4-fs (loop4): unmounting filesystem. [ 40.906470][ T1352] loop0: detected capacity change from 0 to 2048 [ 40.932840][ T1337] loop1: detected capacity change from 0 to 40427 [ 40.943083][ T1337] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 40.949731][ T1337] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 40.981844][ T1337] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.999836][ T1352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.043491][ T1337] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 41.050728][ T1337] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.051606][ T283] EXT4-fs (loop0): unmounting filesystem. [ 41.094209][ T28] audit: type=1400 audit(41.077:319): avc: denied { map } for pid=1368 comm="syz.0.367" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.125257][ T1337] syz.1.356: attempt to access beyond end of device [ 41.125257][ T1337] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 41.134079][ T28] audit: type=1400 audit(41.117:320): avc: denied { mounton } for pid=1371 comm="syz.0.369" path="/67/bus" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.161715][ T284] syz-executor: attempt to access beyond end of device [ 41.161715][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.286348][ T28] audit: type=1400 audit(41.267:321): avc: denied { mounton } for pid=1375 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 41.329935][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.338205][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.345861][ T1375] device bridge_slave_0 entered promiscuous mode [ 41.355182][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.362385][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.372997][ T1375] device bridge_slave_1 entered promiscuous mode [ 41.379506][ T28] audit: type=1400 audit(41.357:322): avc: denied { append } for pid=1381 comm="syz.1.374" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 41.442852][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.450023][ T1375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.457630][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.464670][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.495632][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.508939][ T28] audit: type=1400 audit(41.487:323): avc: denied { read } for pid=1390 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.512253][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.537280][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.554866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.565971][ T28] audit: type=1400 audit(41.537:324): avc: denied { write } for pid=1390 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.573752][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.602485][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.615300][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.623795][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.634485][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.643345][ T1375] device veth0_vlan entered promiscuous mode [ 41.670721][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.680359][ T1375] device veth1_macvtap entered promiscuous mode [ 41.680765][ T28] audit: type=1400 audit(41.667:325): avc: denied { validate_trans } for pid=1401 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 41.715503][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.734777][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.750693][ T28] audit: type=1400 audit(41.727:326): avc: denied { mounton } for pid=1375 comm="syz-executor" path="/root/syzkaller.yqxWfO/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.777364][ T28] audit: type=1400 audit(41.737:327): avc: denied { mount } for pid=1375 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.803857][ T28] audit: type=1400 audit(41.737:328): avc: denied { mounton } for pid=1375 comm="syz-executor" path="/root/syzkaller.yqxWfO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.850908][ T341] device bridge_slave_1 left promiscuous mode [ 41.857068][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.864920][ T341] device bridge_slave_0 left promiscuous mode [ 41.871218][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.879332][ T341] device veth1_macvtap left promiscuous mode [ 41.885760][ T341] device veth0_vlan left promiscuous mode [ 41.931062][ T1414] process 'syz.5.383' launched './file1' with NULL argv: empty string added [ 41.987166][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.009515][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.016427][ T59] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 42.022985][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.044552][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.053320][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.116531][ T1437] netem: change failed [ 42.215747][ T59] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 42.229194][ T59] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 42.240098][ T59] usb 4-1: config 1 interface 0 has no altsetting 0 [ 42.262683][ T59] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 42.262808][ T1458] input: syz1 as /devices/virtual/input/input6 [ 42.278212][ T1458] input: failed to attach handler leds to device input6, error: -6 [ 42.278817][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.304443][ T59] usb 4-1: Product: syz [ 42.315865][ T59] usb 4-1: Manufacturer: syz [ 42.320762][ T59] usb 4-1: SerialNumber: syz [ 42.336213][ T1404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.350350][ T1404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.461227][ T1479] loop0: detected capacity change from 0 to 128 [ 42.471754][ T335] udevd[335]: incorrect ext4 checksum on /dev/loop0 [ 42.483404][ T39] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 42.491587][ T39] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 42.499119][ T39] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 42.516723][ T39] hid-generic 0000:0004:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 42.601292][ T1492] fido_id[1492]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.608315][ T1501] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 43.056064][ T1538] xt_bpf: check failed: parse error [ 43.169635][ T1545] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.176781][ T1545] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.184353][ T1545] device bridge_slave_0 entered promiscuous mode [ 43.193278][ T1545] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.200403][ T1545] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.207859][ T1545] device bridge_slave_1 entered promiscuous mode [ 43.266078][ T1545] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.273190][ T1545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.280532][ T1545] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.287610][ T1545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.308794][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.316563][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.324230][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.336152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.344450][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.351501][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.360989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.369224][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.376480][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.393147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.401921][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.410948][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.421769][ T59] rtl8150 4-1:1.0: couldn't reset the device [ 43.426437][ T1545] device veth0_vlan entered promiscuous mode [ 43.430224][ T59] rtl8150: probe of 4-1:1.0 failed with error -5 [ 43.434925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.443567][ T59] usb 4-1: USB disconnect, device number 7 [ 43.456891][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.465152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.473068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.503141][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.517652][ T1545] device veth1_macvtap entered promiscuous mode [ 43.539550][ T1564] syz.1.448[1564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.539623][ T1564] syz.1.448[1564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.539711][ T285] ------------[ cut here ]------------ [ 43.567941][ T285] WARNING: CPU: 1 PID: 285 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 43.576007][ T285] Modules linked in: [ 43.579921][ T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0 [ 43.587550][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.597666][ T285] RIP: 0010:drop_nlink+0xc5/0x110 [ 43.602742][ T285] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 eb 8b ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 43.622398][ T285] RSP: 0018:ffffc9000db0fc38 EFLAGS: 00010293 [ 43.628491][ T285] RAX: ffffffff81c37b75 RBX: ffff88811e9af1a8 RCX: ffff88810bc4e540 [ 43.636509][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.644506][ T285] RBP: ffffc9000db0fc60 R08: 0000000000000004 R09: 0000000000000003 [ 43.652537][ T285] R10: fffff52001b61f78 R11: 1ffff92001b61f78 R12: dffffc0000000000 [ 43.660545][ T285] R13: 1ffff11023d35e3e R14: ffff88811e9af1f0 R15: 0000000000000000 [ 43.668503][ T285] FS: 000055558d711500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 43.677467][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.684098][ T285] CR2: 000055558d7344e8 CR3: 000000012ed58000 CR4: 00000000003506a0 [ 43.692099][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.700084][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.708052][ T285] Call Trace: [ 43.711378][ T285] [ 43.714345][ T285] shmem_rmdir+0x5b/0x90 [ 43.718707][ T285] vfs_rmdir+0x393/0x500 [ 43.723050][ T285] incfs_kill_sb+0x105/0x220 [ 43.727881][ T285] deactivate_locked_super+0xb5/0x120 [ 43.733313][ T285] deactivate_super+0xaf/0xe0 [ 43.738099][ T285] cleanup_mnt+0x45f/0x4e0 [ 43.742504][ T285] __cleanup_mnt+0x19/0x20 [ 43.746998][ T285] task_work_run+0x1db/0x240 [ 43.751597][ T285] ? __cfi_task_work_run+0x10/0x10 [ 43.756969][ T285] ? __x64_sys_umount+0x125/0x160 [ 43.762121][ T285] ? __kasan_check_read+0x11/0x20 [ 43.767186][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 43.772469][ T285] exit_to_user_mode_prepare+0x5a/0xa0 [ 43.778056][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 43.783704][ T285] do_syscall_64+0x58/0xa0 [ 43.788154][ T285] ? clear_bhb_loop+0x30/0x80 [ 43.792842][ T285] ? clear_bhb_loop+0x30/0x80 [ 43.797625][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.803519][ T285] RIP: 0033:0x7f532a38ff17 [ 43.807969][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 43.827686][ T285] RSP: 002b:00007ffc493d73a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.836119][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f532a38ff17 [ 43.844173][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc493d7460 [ 43.852428][ T285] RBP: 00007ffc493d7460 R08: 0000000000000000 R09: 0000000000000000 [ 43.860632][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc493d84f0 [ 43.868743][ T285] R13: 00007f532a411c05 R14: 000000000000aa0e R15: 00007ffc493d8530 [ 43.876864][ T285] [ 43.879959][ T285] ---[ end trace 0000000000000000 ]--- [ 43.885519][ T285] ================================================================== [ 43.893595][ T285] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 43.896331][ T1569] loop3: detected capacity change from 0 to 1024 [ 43.899845][ T285] Write of size 4 at addr 0000000000000170 by task syz-executor/285 [ 43.906752][ T1569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.914218][ T285] [ 43.914229][ T285] CPU: 0 PID: 285 Comm: syz-executor Tainted: G W syzkaller #0 [ 43.914249][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.914259][ T285] Call Trace: [ 43.914264][ T285] [ 43.914271][ T285] __dump_stack+0x21/0x24 [ 43.914297][ T285] dump_stack_lvl+0xee/0x150 [ 43.957421][ T285] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.962444][ T285] ? ihold+0x20/0x60 [ 43.966410][ T285] ? ihold+0x20/0x60 [ 43.970288][ T285] print_report+0x3d/0x60 [ 43.974603][ T285] kasan_report+0x122/0x150 [ 43.979090][ T285] ? ihold+0x20/0x60 [ 43.982967][ T285] kasan_check_range+0x280/0x290 [ 43.987885][ T285] __kasan_check_write+0x14/0x20 [ 43.992807][ T285] ihold+0x20/0x60 [ 43.996511][ T285] vfs_rmdir+0x25f/0x500 [ 44.000738][ T285] incfs_kill_sb+0x105/0x220 [ 44.005315][ T285] deactivate_locked_super+0xb5/0x120 [ 44.010671][ T285] deactivate_super+0xaf/0xe0 [ 44.015345][ T285] cleanup_mnt+0x45f/0x4e0 [ 44.019749][ T285] __cleanup_mnt+0x19/0x20 [ 44.024151][ T285] task_work_run+0x1db/0x240 [ 44.028722][ T285] ? __cfi_task_work_run+0x10/0x10 [ 44.033816][ T285] ? __x64_sys_umount+0x125/0x160 [ 44.038829][ T285] ? __kasan_check_read+0x11/0x20 [ 44.043843][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 44.049025][ T285] exit_to_user_mode_prepare+0x5a/0xa0 [ 44.054471][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 44.059920][ T285] do_syscall_64+0x58/0xa0 [ 44.064351][ T285] ? clear_bhb_loop+0x30/0x80 [ 44.069009][ T285] ? clear_bhb_loop+0x30/0x80 [ 44.073670][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.079561][ T285] RIP: 0033:0x7f532a38ff17 [ 44.084218][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 44.103913][ T285] RSP: 002b:00007ffc493d73a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 44.112312][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f532a38ff17 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 44.120278][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc493d7460 [ 44.128408][ T285] RBP: 00007ffc493d7460 R08: 0000000000000000 R09: 0000000000000000 [ 44.136360][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc493d84f0 [ 44.144321][ T285] R13: 00007f532a411c05 R14: 000000000000aa0e R15: 00007ffc493d8530 [ 44.152277][ T285] [ 44.155293][ T285] ================================================================== [ 44.169934][ T1569] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.181411][ T285] Disabling lock debugging due to kernel taint [ 44.181440][ T285] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 44.181451][ T285] #PF: supervisor write access in kernel mode [ 44.181459][ T285] #PF: error_code(0x0002) - not-present page [ 44.207441][ T285] PGD 132445067 P4D 132445067 PUD 0 [ 44.212748][ T285] Oops: 0002 [#1] PREEMPT SMP KASAN [ 44.213729][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.217962][ T285] CPU: 0 PID: 285 Comm: syz-executor Tainted: G B W syzkaller #0 [ 44.239223][ T1569] EXT4-fs: failed to create workqueue [ 44.239714][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.245136][ T39] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 44.255120][ T285] RIP: 0010:ihold+0x26/0x60 [ 44.255151][ T285] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 51 83 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 41 [ 44.255173][ T285] RSP: 0018:ffffc9000db0fc78 EFLAGS: 00010246 [ 44.255188][ T285] RAX: ffff88810bc4e500 RBX: 0000000000000000 RCX: ffff88810bc4e540 [ 44.255200][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.255210][ T285] RBP: ffffc9000db0fc88 R08: dffffc0000000000 R09: fffffbfff0f2d4fd [ 44.255222][ T285] R10: fffffbfff0f2d4fd R11: 1ffffffff0f2d4fc R12: ffff88811e9af1b4 [ 44.264895][ T1569] EXT4-fs (loop3): mount failed [ 44.268742][ T285] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 44.297140][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.302535][ T285] FS: 000055558d711500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 44.302560][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.302570][ T285] CR2: 0000000000000170 CR3: 000000012ed58000 CR4: 00000000003506b0 [ 44.302584][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.302594][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.386502][ T285] Call Trace: [ 44.389777][ T285] [ 44.392694][ T285] vfs_rmdir+0x25f/0x500 [ 44.396929][ T285] incfs_kill_sb+0x105/0x220 [ 44.401605][ T285] deactivate_locked_super+0xb5/0x120 [ 44.407134][ T285] deactivate_super+0xaf/0xe0 [ 44.411814][ T285] cleanup_mnt+0x45f/0x4e0 [ 44.416232][ T285] __cleanup_mnt+0x19/0x20 [ 44.420662][ T285] task_work_run+0x1db/0x240 [ 44.425238][ T285] ? __cfi_task_work_run+0x10/0x10 [ 44.430419][ T285] ? __x64_sys_umount+0x125/0x160 [ 44.435431][ T285] ? __kasan_check_read+0x11/0x20 [ 44.440458][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 44.445639][ T285] exit_to_user_mode_prepare+0x5a/0xa0 [ 44.451095][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 44.456565][ T285] do_syscall_64+0x58/0xa0 [ 44.461054][ T285] ? clear_bhb_loop+0x30/0x80 [ 44.465717][ T285] ? clear_bhb_loop+0x30/0x80 [ 44.470380][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.476252][ T285] RIP: 0033:0x7f532a38ff17 [ 44.480647][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 44.500239][ T285] RSP: 002b:00007ffc493d73a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 44.508739][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f532a38ff17 [ 44.516706][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc493d7460 [ 44.524671][ T285] RBP: 00007ffc493d7460 R08: 0000000000000000 R09: 0000000000000000 [ 44.532626][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc493d84f0 [ 44.540588][ T285] R13: 00007f532a411c05 R14: 000000000000aa0e R15: 00007ffc493d8530 [ 44.548648][ T285] [ 44.551652][ T285] Modules linked in: [ 44.555542][ T285] CR2: 0000000000000170 [ 44.559762][ T285] ---[ end trace 0000000000000000 ]--- [ 44.565305][ T285] RIP: 0010:ihold+0x26/0x60 [ 44.569797][ T285] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 51 83 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 41 [ 44.589400][ T285] RSP: 0018:ffffc9000db0fc78 EFLAGS: 00010246 [ 44.595457][ T285] RAX: ffff88810bc4e500 RBX: 0000000000000000 RCX: ffff88810bc4e540 [ 44.603523][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.611482][ T285] RBP: ffffc9000db0fc88 R08: dffffc0000000000 R09: fffffbfff0f2d4fd [ 44.619452][ T285] R10: fffffbfff0f2d4fd R11: 1ffffffff0f2d4fc R12: ffff88811e9af1b4 [ 44.627505][ T285] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 44.635459][ T285] FS: 000055558d711500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 44.644460][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.651024][ T285] CR2: 0000000000000170 CR3: 000000012ed58000 CR4: 00000000003506b0 [ 44.659246][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.667203][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.675159][ T285] Kernel panic - not syncing: Fatal exception [ 44.681488][ T285] Kernel Offset: disabled [ 44.685796][ T285] Rebooting in 86400 seconds..