last executing test programs: 2.40082446s ago: executing program 2 (id=549): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x22180, 0x38) getdents64(r2, 0x0, 0x0) lseek(r2, 0xab07, 0x1) getdents64(r2, 0x0, 0x0) 2.278363643s ago: executing program 4 (id=550): sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000}) 2.152583287s ago: executing program 1 (id=551): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000040)) 1.856293194s ago: executing program 3 (id=555): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x9, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0x0, 0xee01) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1.731132857s ago: executing program 0 (id=561): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) 1.723728877s ago: executing program 0 (id=562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 1.448658154s ago: executing program 0 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x1, 0x0) write(r0, &(0x7f0000000780)='1', 0x1) open(0x0, 0x40000, 0x68) 1.448510544s ago: executing program 0 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1.436524024s ago: executing program 4 (id=565): socket(0x10, 0x3, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, &(0x7f0000000300), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 1.426967145s ago: executing program 2 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/vim2m/unbind\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/vim2m/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='vim2m.0', 0x7) 1.361586026s ago: executing program 2 (id=567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3c0200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 1.23086737s ago: executing program 1 (id=568): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.084621503s ago: executing program 1 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) 1.084482413s ago: executing program 1 (id=570): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 1.084303403s ago: executing program 1 (id=571): syz_create_resource$binfmt(0x0) syz_create_resource$binfmt(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x192509b, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 941.282426ms ago: executing program 3 (id=572): syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000000010002", 0x7) clock_getres(0x6, 0x0) 908.332048ms ago: executing program 1 (id=573): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x11, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r1, 0x100, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 432.62364ms ago: executing program 4 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000190001090000000020000000021800000402"], 0x3c}}, 0x0) 428.637079ms ago: executing program 2 (id=575): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 382.231691ms ago: executing program 0 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) 360.504881ms ago: executing program 4 (id=577): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x7fffffff}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 192.658126ms ago: executing program 2 (id=578): r0 = inotify_init1(0x80000) close_range(r0, 0xffffffffffffffff, 0x2) signalfd4(r0, &(0x7f0000000b80)={[0xfffffffffffffffb]}, 0x8, 0x800) 192.013086ms ago: executing program 4 (id=579): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) 131.182777ms ago: executing program 0 (id=580): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 126.445077ms ago: executing program 2 (id=581): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x1) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 52.633119ms ago: executing program 4 (id=582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf2ff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 0s ago: executing program 3 (id=583): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 17.998396][ T30] audit: type=1400 audit(1785974442.291:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.999509][ T277] cgroup: Unknown subsys name 'net' [ 18.003636][ T30] audit: type=1400 audit(1785974442.291:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.009938][ T30] audit: type=1400 audit(1785974442.301:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.010065][ T277] cgroup: Unknown subsys name 'devices' [ 18.071046][ T277] cgroup: Unknown subsys name 'hugetlb' [ 18.076674][ T277] cgroup: Unknown subsys name 'rlimit' [ 18.182761][ T30] audit: type=1400 audit(1785974442.481:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.205957][ T30] audit: type=1400 audit(1785974442.481:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.230709][ T30] audit: type=1400 audit(1785974442.481:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.263198][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 18.272092][ T30] audit: type=1400 audit(1785974442.571:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.297525][ T30] audit: type=1400 audit(1785974442.571:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.329850][ T30] audit: type=1400 audit(1785974442.631:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.355372][ T30] audit: type=1400 audit(1785974442.631:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.355430][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.837734][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.845007][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.852446][ T285] device bridge_slave_0 entered promiscuous mode [ 18.860276][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.867299][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.874792][ T285] device bridge_slave_1 entered promiscuous mode [ 18.949758][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.956819][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.964248][ T289] device bridge_slave_0 entered promiscuous mode [ 18.973573][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.980615][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.987993][ T289] device bridge_slave_1 entered promiscuous mode [ 19.025895][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.032978][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.040445][ T286] device bridge_slave_0 entered promiscuous mode [ 19.047271][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.054327][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.061744][ T286] device bridge_slave_1 entered promiscuous mode [ 19.129602][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.136661][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.144029][ T290] device bridge_slave_0 entered promiscuous mode [ 19.152102][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.159154][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.166525][ T290] device bridge_slave_1 entered promiscuous mode [ 19.214076][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.221222][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.228595][ T287] device bridge_slave_0 entered promiscuous mode [ 19.238097][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.245154][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.252599][ T287] device bridge_slave_1 entered promiscuous mode [ 19.295111][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.302176][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.309472][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.316491][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.345236][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.352302][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.359566][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.366586][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.421918][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.429066][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.436346][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.443396][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.466129][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.473461][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.480820][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.488366][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.495854][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.503087][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.510276][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.534619][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.542090][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.561116][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.569341][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.576357][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.583759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.592096][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.599133][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.606443][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.614415][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.633252][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.640902][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.649007][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.656049][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.663655][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.672403][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.679489][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.686943][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.712202][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.721424][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.729567][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.736592][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.744276][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.752949][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.759991][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.767331][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.775496][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.782512][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.789964][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.798054][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.805085][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.812415][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.820377][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.829358][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.850497][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 19.858561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.866558][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 19.874701][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.882826][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.890344][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.897663][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 19.905613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.913582][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 19.922194][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.930422][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.937430][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.944900][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.952414][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.959940][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.971801][ T287] device veth0_vlan entered promiscuous mode [ 19.979616][ T289] device veth0_vlan entered promiscuous mode [ 19.992081][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.000142][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.007971][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.016535][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.024989][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.033027][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.041100][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.049478][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.057549][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.064573][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.072034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.080093][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.088001][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.095468][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.112238][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.120541][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.128756][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.139597][ T287] device veth1_macvtap entered promiscuous mode [ 20.147116][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.155413][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.167483][ T285] device veth0_vlan entered promiscuous mode [ 20.174404][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.182778][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.191268][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.199623][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.207541][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.215607][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.223723][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.231283][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.239695][ T289] device veth1_macvtap entered promiscuous mode [ 20.251099][ T286] device veth0_vlan entered promiscuous mode [ 20.259016][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.266750][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.274795][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.282955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.291505][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.299523][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.306903][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.315855][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.324103][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.341885][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.350246][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.358444][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.366959][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.375404][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.383712][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.397883][ T285] device veth1_macvtap entered promiscuous mode [ 20.408073][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.416308][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.416731][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 20.425544][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.441290][ T286] device veth1_macvtap entered promiscuous mode [ 20.447849][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.457089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.465257][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.487377][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.498658][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.511438][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.521480][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.557112][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.567024][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.575792][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.585265][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.594258][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.602981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.670536][ T290] device veth0_vlan entered promiscuous mode [ 20.698351][ T290] device veth1_macvtap entered promiscuous mode [ 20.714555][ T322] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 20.725047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.733622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.746053][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.278595][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.288554][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.297731][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.307896][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.328263][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.628815][ T314] loop2: detected capacity change from 0 to 40427 [ 21.632925][ T323] loop1: detected capacity change from 0 to 128 [ 21.635916][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.715536][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.752797][ T323] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 21.774096][ T323] tmpfs: Unknown parameter 'fowner<(8ӾVrK>Zi5b-' [ 21.785604][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.841612][ T336] loop4: detected capacity change from 0 to 1024 [ 21.852665][ T334] loop0: detected capacity change from 0 to 512 [ 21.880308][ T334] EXT4-fs (loop0): Ignoring removed orlov option [ 21.889255][ T336] EXT4-fs (loop4): Ignoring removed orlov option [ 21.896812][ T334] EXT4-fs (loop0): Ignoring removed bh option [ 21.906904][ T334] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 21.926105][ T314] loop2: detected capacity change from 0 to 256 [ 21.929762][ T334] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 21.944782][ T336] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 21.962383][ T334] EXT4-fs (loop0): 1 truncate cleaned up [ 21.969389][ T314] exfat: Deprecated parameter 'namecase' [ 21.978027][ T334] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,nogrpid,bh,,errors=continue. Quota mode: none. [ 21.981147][ T314] exfat: Deprecated parameter 'namecase' [ 21.999251][ T307] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 22.035474][ T314] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 22.036897][ T343] process 'syz.1.9' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 22.234734][ T348] syz.2.10 (348) used greatest stack depth: 20584 bytes left [ 22.369270][ T307] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 22.383112][ T307] usb 4-1: config 0 has no interface number 0 [ 22.569276][ T307] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 22.606424][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.635731][ T307] usb 4-1: Product: syz [ 22.651216][ T307] usb 4-1: Manufacturer: syz [ 22.667987][ T307] usb 4-1: SerialNumber: syz [ 22.707135][ T307] usb 4-1: config 0 descriptor?? [ 23.067491][ T353] loop4: detected capacity change from 0 to 40427 [ 23.083932][ T353] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 23.095036][ T353] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 23.142662][ T353] F2FS-fs (loop4): Found nat_bits in checkpoint [ 23.185108][ T353] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 23.197138][ T353] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 23.280795][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 23.280808][ T30] audit: type=1400 audit(1785974447.581:312): avc: denied { mounton } for pid=352 comm="syz.4.12" path="/1/file0/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.325329][ T368] loop2: detected capacity change from 0 to 16 [ 23.340074][ T30] audit: type=1400 audit(1785974447.581:313): avc: denied { create } for pid=365 comm="syz.1.14" dev="anon_inodefs" ino=15787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 23.354732][ T309] udevd[309]: incorrect erofs checksum on /dev/loop2 [ 23.361889][ T368] ======================================================= [ 23.361889][ T368] WARNING: The mand mount option has been deprecated and [ 23.361889][ T368] and is ignored by this kernel. Remove the mand [ 23.361889][ T368] option from the mount to silence this warning. [ 23.361889][ T368] ======================================================= [ 23.405848][ T328] loop3: detected capacity change from 0 to 16 [ 23.414244][ T30] audit: type=1400 audit(1785974447.591:314): avc: denied { ioctl } for pid=365 comm="syz.1.14" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15787 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 23.440273][ T30] audit: type=1400 audit(1785974447.591:315): avc: denied { create } for pid=365 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 23.459780][ T30] audit: type=1400 audit(1785974447.611:316): avc: denied { connect } for pid=365 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 23.486006][ T30] audit: type=1400 audit(1785974447.621:317): avc: denied { write } for pid=352 comm="syz.4.12" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.517649][ T30] audit: type=1400 audit(1785974447.621:318): avc: denied { add_name } for pid=352 comm="syz.4.12" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.540822][ T368] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x1f2474f5, 0x02d6543f expected [ 23.552314][ T328] erofs: (device loop3): mounted with root inode @ nid 36. [ 23.564576][ T309] udevd[309]: incorrect erofs checksum on /dev/loop2 [ 23.570435][ T328] erofs: (device loop3): z_erofs_readpage: failed to read, err [-95] [ 23.584812][ T368] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 23.601732][ T30] audit: type=1400 audit(1785974447.821:319): avc: denied { create } for pid=369 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 23.607749][ T368] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 23.632991][ T328] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 23.650475][ T328] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 23.660349][ T30] audit: type=1400 audit(1785974447.821:320): avc: denied { setopt } for pid=369 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 23.669759][ T328] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 23.680460][ T30] audit: type=1400 audit(1785974447.821:321): avc: denied { read } for pid=369 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 23.706291][ T328] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 23.728845][ T372] erofs: (device loop3): z_erofs_readpage: failed to read, err [-95] [ 23.797066][ T328] Zero length message leads to an empty skb [ 23.803470][ T328] erofs: (device loop3): z_erofs_readpage: failed to read, err [-95] [ 23.819164][ T307] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 23.833652][ T307] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 23.853004][ T307] asix: probe of 4-1:0.251 failed with error -71 [ 23.864658][ T307] usb 4-1: USB disconnect, device number 2 [ 24.382157][ T386] loop3: detected capacity change from 0 to 512 [ 24.407974][ T386] EXT4-fs (loop3): Ignoring removed bh option [ 24.423002][ T386] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz.3.19: corrupted in-inode xattr [ 24.436544][ T386] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.19: couldn't read orphan inode 15 (err -117) [ 24.449118][ T386] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 24.505766][ T392] loop4: detected capacity change from 0 to 512 [ 24.515804][ T392] EXT4-fs (loop4): Ignoring removed bh option [ 24.522948][ T386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=386 comm=syz.3.19 [ 24.546507][ T392] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.21: corrupted in-inode xattr [ 24.559916][ T386] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.19: Unrecognised inode hash code 4 [ 24.571277][ T392] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.21: couldn't read orphan inode 15 (err -117) [ 24.590876][ T386] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.19: Corrupt directory, running e2fsck is recommended [ 24.606574][ T392] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 24.643897][ T386] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.19: Unrecognised inode hash code 4 [ 24.671822][ T320] hid-generic 0000:0000:0000.0001: unknown main item tag 0x6 [ 24.679648][ T386] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.19: Corrupt directory, running e2fsck is recommended [ 24.693138][ T320] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 24.740663][ T392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=392 comm=syz.4.21 [ 24.757173][ T392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21'. [ 24.769853][ T400] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 24.780529][ T400] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.803414][ T398] fido_id[398]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 24.848688][ T400] fs-verity: sha512 using implementation "sha512-avx2" [ 24.871132][ T413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 24.882551][ T413] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 24.895926][ T413] EXT4-fs (loop0): 1 truncate cleaned up [ 24.902408][ T413] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 25.001573][ T400] fs-verity (loop1, inode 13): Error -28 writing Merkle tree block 92128 [ 25.010073][ T400] fs-verity (loop1, inode 13): Error -28 building Merkle tree [ 25.370004][ T425] EXT4-fs (loop4): Test dummy encryption mode enabled [ 25.380697][ T425] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 25.403167][ T425] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 25.421799][ T425] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 25.425499][ T436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 25.814296][ T456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 25.861786][ T464] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.518117][ T509] FAT-fs (loop1): Directory bread(block 1285) failed [ 26.525021][ T509] FAT-fs (loop1): Directory bread(block 1286) failed [ 26.531981][ T509] FAT-fs (loop1): Directory bread(block 1287) failed [ 26.538747][ T509] FAT-fs (loop1): Directory bread(block 1288) failed [ 26.546757][ T509] FAT-fs (loop1): Directory bread(block 1285) failed [ 26.553613][ T509] FAT-fs (loop1): Directory bread(block 1286) failed [ 26.560367][ T509] FAT-fs (loop1): Directory bread(block 1287) failed [ 26.567100][ T509] FAT-fs (loop1): Directory bread(block 1288) failed [ 26.585680][ T509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. [ 27.769085][ T320] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.879595][ T305] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.009083][ T320] usb 5-1: Using ep0 maxpacket: 32 [ 28.029135][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.127722][ T550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 28.129145][ T320] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 28.136517][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 28.150327][ T320] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 28.158954][ T320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 28.167956][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 28.177907][ T320] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 28.187636][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 28.197451][ T320] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 28.207223][ T320] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 28.224768][ T320] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 28.233863][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.245941][ T320] usb 5-1: config 0 descriptor?? [ 28.259128][ T305] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 28.267529][ T305] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 28.269148][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 28.278845][ T305] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 28.294560][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 28.294573][ T30] audit: type=1400 audit(1785974452.581:369): avc: denied { add_name } for pid=555 comm="syz.0.86" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 28.320700][ T305] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 28.320966][ T30] audit: type=1400 audit(1785974452.581:370): avc: denied { create } for pid=555 comm="syz.0.86" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 28.333850][ T305] usb 2-1: config 0 interface 0 has no altsetting 0 [ 28.360142][ T30] audit: type=1400 audit(1785974452.591:371): avc: denied { write } for pid=555 comm="syz.0.86" name="idVendor" dev="configfs" ino=16150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 28.382970][ T30] audit: type=1400 audit(1785974452.591:372): avc: denied { open } for pid=555 comm="syz.0.86" path="/24/config/usb_gadget/g1/idVendor" dev="configfs" ino=16150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 28.407747][ T30] audit: type=1400 audit(1785974452.591:373): avc: denied { create } for pid=555 comm="syz.0.86" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 28.419146][ T20] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 28.437332][ T20] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 28.447116][ T20] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 28.458096][ T20] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 28.463989][ T30] audit: type=1400 audit(1785974452.761:374): avc: denied { write } for pid=557 comm="syz.0.87" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.471113][ T20] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 28.502520][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.512932][ T320] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 28.529192][ T305] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 28.538916][ T305] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 28.569104][ T305] usb 2-1: Product: syz [ 28.573299][ T305] usb 2-1: Manufacturer: syz [ 28.577893][ T305] usb 2-1: SerialNumber: syz [ 28.585441][ T305] usb 2-1: config 0 descriptor?? [ 28.698270][ T30] audit: type=1400 audit(1785974452.991:375): avc: denied { read write } for pid=501 comm="syz.4.63" name="lp0" dev="devtmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 28.698874][ T305] usb 5-1: USB disconnect, device number 2 [ 28.727912][ T30] audit: type=1400 audit(1785974452.991:376): avc: denied { open } for pid=501 comm="syz.4.63" path="/dev/usb/lp0" dev="devtmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 28.728943][ T305] usblp0: removed [ 28.841763][ T320] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.089143][ T320] usb 1-1: Using ep0 maxpacket: 16 [ 29.209174][ T320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.222164][ T320] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 29.231865][ T320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.282411][ T320] usb 1-1: config 0 descriptor?? [ 29.495111][ T30] audit: type=1400 audit(1785974453.791:377): avc: denied { remount } for pid=589 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.499666][ T590] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 29.527782][ T30] audit: type=1400 audit(1785974453.791:378): avc: denied { write } for pid=589 comm="syz.4.100" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 29.770594][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.778399][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.785891][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.793394][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.800847][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.808338][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.815783][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.823277][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.830707][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.838194][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.845627][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.853137][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.860572][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.868052][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.875489][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.882979][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.890404][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.897893][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.905315][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.912805][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.920220][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.927750][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.935192][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.942713][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.950156][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.957650][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.966106][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.973772][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.982445][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.990280][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 29.997721][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 30.005338][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 30.012963][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 30.020599][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 30.027962][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 30.035383][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 30.042758][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 30.050147][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 30.057516][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 30.064897][ T320] hid-generic 0003:058F:9410.0002: unknown main item tag 0x0 [ 30.073110][ T320] hid-generic 0003:058F:9410.0002: hidraw0: USB HID v0.06 Device [HID 058f:9410] on usb-dummy_hcd.0-1/input0 [ 30.086518][ T320] usb 1-1: USB disconnect, device number 2 [ 30.096668][ T597] fido_id[597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 30.129080][ T305] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.489117][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.500076][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.512263][ T305] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 30.521370][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.547963][ T320] usb 2-1: USB disconnect, device number 2 [ 30.576032][ T305] usb 5-1: config 0 descriptor?? [ 30.583223][ T604] netlink: 83 bytes leftover after parsing attributes in process `syz.1.106'. [ 30.750591][ T307] usb 3-1: USB disconnect, device number 2 [ 31.105999][ T305] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 31.147623][ T305] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 31.591149][ T305] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 31.598615][ T305] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 31.628736][ T305] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 31.698198][ T305] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 31.718789][ T631] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.726060][ T631] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.849952][ T635] netlink: 64 bytes leftover after parsing attributes in process `syz.2.117'. [ 31.923781][ T648] set_capacity_and_notify: 4 callbacks suppressed [ 31.923790][ T648] loop2: detected capacity change from 0 to 128 [ 32.025384][ T650] netlink: 184 bytes leftover after parsing attributes in process `syz.1.122'. [ 32.079210][ T305] playstation 0003:054C:0DF2.0003: Invalid gyro calibration data for axis (3), disabling calibration. [ 32.090633][ T305] playstation 0003:054C:0DF2.0003: Invalid gyro calibration data for axis (4), disabling calibration. [ 32.101925][ T305] playstation 0003:054C:0DF2.0003: Invalid gyro calibration data for axis (5), disabling calibration. [ 32.151677][ T305] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 32.168388][ T648] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.212856][ T648] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 32.227360][ T305] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 32.229860][ T648] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.239487][ T305] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 32.284183][ T305] input: HID 054c:0df2 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0003/input/input4 [ 32.299674][ T305] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0003/input/input5 [ 32.314125][ T305] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0003/input/input6 [ 32.331176][ T305] playstation 0003:054C:0DF2.0003: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 32.368563][ T305] usb 5-1: USB disconnect, device number 3 [ 32.429332][ T660] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 32.544715][ T673] loop0: detected capacity change from 0 to 256 [ 32.845652][ T694] loop1: detected capacity change from 0 to 128 [ 32.879689][ T696] loop2: detected capacity change from 0 to 128 [ 32.892220][ T700] mmap: syz.0.141 (700) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 32.912081][ T696] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.936661][ T696] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 32.952553][ T696] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.033760][ T709] overlayfs: failed to resolve './file0': -2 [ 33.400707][ T623] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.668803][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 33.668817][ T30] audit: type=1400 audit(1785974457.961:392): avc: denied { create } for pid=736 comm="syz.4.154" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.696005][ T623] usb 2-1: Using ep0 maxpacket: 16 [ 33.713310][ T30] audit: type=1400 audit(1785974457.991:393): avc: denied { read write } for pid=736 comm="syz.4.154" name="loop0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.741076][ T30] audit: type=1400 audit(1785974457.991:394): avc: denied { open } for pid=736 comm="syz.4.154" path="/21/loop0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.770845][ T30] audit: type=1400 audit(1785974458.001:395): avc: denied { unlink } for pid=290 comm="syz-executor" name="loop0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.859799][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.876431][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.892239][ T623] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.906807][ T623] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 33.931310][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.941597][ T751] device syzkaller0 entered promiscuous mode [ 33.954910][ T623] usb 2-1: config 0 descriptor?? [ 33.988978][ T30] audit: type=1400 audit(1785974458.281:396): avc: denied { create } for pid=754 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 34.009676][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 34.034581][ T30] audit: type=1400 audit(1785974458.321:397): avc: denied { mounton } for pid=758 comm="syz.2.164" path="/33/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.208188][ T30] audit: type=1400 audit(1785974458.491:398): avc: denied { mount } for pid=760 comm="syz.0.165" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 34.389161][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 34.398947][ T6] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 34.409662][ T6] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 34.418802][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.480714][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.488111][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.495989][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.503306][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.511360][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.518673][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.525899][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.533107][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.540312][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.609815][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.617059][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.624293][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.631549][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.638774][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.645999][ T623] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.654547][ T623] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input7 [ 34.730470][ T623] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 34.744757][ T623] usb 2-1: USB disconnect, device number 3 [ 34.760593][ T782] fido_id[782]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 35.179093][ T337] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.193818][ T30] audit: type=1400 audit(1785974459.491:399): avc: denied { mounton } for pid=790 comm="syz.1.176" path="/34/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 35.549289][ T337] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.559539][ T337] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 35.729136][ T337] usb 1-1: New USB device found, idVendor=058f, idProduct=6387, bcdDevice= 1.00 [ 35.746253][ T337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.758775][ T337] usb 1-1: Product: syz [ 35.762974][ T337] usb 1-1: Manufacturer: syz [ 35.768770][ T337] usb 1-1: SerialNumber: syz [ 35.774542][ T307] usb 5-1: USB disconnect, device number 4 [ 35.819982][ T337] usb-storage 1-1:1.0: USB Mass Storage device detected [ 35.827390][ T30] audit: type=1400 audit(1785974460.121:400): avc: denied { write } for pid=802 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.858540][ T808] fuse: Bad value for 'fd' [ 36.021881][ T623] usb 1-1: USB disconnect, device number 3 [ 36.033852][ T30] audit: type=1400 audit(1785974460.331:401): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.547799][ T819] loop0: detected capacity change from 0 to 512 [ 36.573464][ T819] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.186: Unimplemented hash flags: 0x0001 [ 36.584925][ T819] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.186: Corrupt directory, running e2fsck is recommended [ 36.598121][ T819] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 36.606702][ T819] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz.0.186: corrupted in-inode xattr [ 36.619236][ T819] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.186: couldn't read orphan inode 15 (err -117) [ 36.631154][ T819] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.min_batch_time=0x0000000000000006,barrier=0x0000000000000008,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 36.663461][ T819] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.186: Unimplemented hash flags: 0x0001 [ 36.679610][ T819] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.186: Corrupt directory, running e2fsck is recommended [ 36.697481][ T819] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.186: Unimplemented hash flags: 0x0001 [ 36.708988][ T819] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.186: Corrupt directory, running e2fsck is recommended [ 36.726499][ T819] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.186: Unimplemented hash flags: 0x0001 [ 36.737995][ T819] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.186: Corrupt directory, running e2fsck is recommended [ 36.758879][ T819] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.186: Unimplemented hash flags: 0x0001 [ 36.770462][ T819] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.186: Corrupt directory, running e2fsck is recommended [ 36.783765][ T819] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.186: Unimplemented hash flags: 0x0001 [ 36.795426][ T819] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.186: Corrupt directory, running e2fsck is recommended [ 36.869071][ T830] loop0: detected capacity change from 0 to 256 [ 36.877412][ T830] exfat: Deprecated parameter 'utf8' [ 36.882753][ T830] exfat: Deprecated parameter 'namecase' [ 36.888459][ T830] exfat: Deprecated parameter 'namecase' [ 36.894200][ T830] exfat: Deprecated parameter 'utf8' [ 36.916307][ T830] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 37.037752][ T842] loop0: detected capacity change from 0 to 512 [ 37.063792][ T847] loop1: detected capacity change from 0 to 512 [ 37.082087][ T842] EXT4-fs (loop0): 1 orphan inode deleted [ 37.087872][ T842] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.098942][ T842] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.102278][ T847] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.144056][ T847] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 37.158986][ T847] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.198: bg 0: block 248: padding at end of block bitmap is not set [ 37.180349][ T847] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.198: Failed to acquire dquot type 1 [ 37.192504][ T847] EXT4-fs (loop1): 1 truncate cleaned up [ 37.198152][ T847] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.228711][ T853] loop2: detected capacity change from 0 to 128 [ 37.237070][ T847] device syzkaller0 entered promiscuous mode [ 37.508168][ T859] loop1: detected capacity change from 0 to 512 [ 37.545199][ T859] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.202: invalid block [ 37.557900][ T859] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.202: invalid indirect mapped block 4294967295 (level 1) [ 37.572304][ T859] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.202: invalid indirect mapped block 4294967295 (level 1) [ 37.586794][ T859] EXT4-fs (loop1): 2 truncates cleaned up [ 37.592667][ T859] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,init_itable=0x0000000000001007,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 37.653571][ T873] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 37.696291][ T881] loop1: detected capacity change from 0 to 16 [ 37.717754][ T883] loop4: detected capacity change from 0 to 4096 [ 37.727667][ T885] device syzkaller0 entered promiscuous mode [ 37.734083][ T881] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 37.746867][ T883] EXT4-fs (loop4): Test dummy encryption mode enabled [ 37.755086][ T883] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 37.773161][ T883] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 37.783255][ T883] System zones: 0-5 [ 37.787859][ T883] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 38.125077][ T901] xt_CONNSECMARK: invalid mode: 0 [ 38.719062][ T740] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.729071][ T305] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.783835][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 38.783848][ T30] audit: type=1400 audit(1785974463.081:428): avc: denied { mount } for pid=963 comm="syz.4.248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.787240][ T966] loop1: detected capacity change from 0 to 512 [ 38.800090][ T30] audit: type=1400 audit(1785974463.091:429): avc: denied { search } for pid=963 comm="syz.4.248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 38.839910][ T30] audit: type=1400 audit(1785974463.091:430): avc: denied { append } for pid=963 comm="syz.4.248" name="uprobe_events" dev="tracefs" ino=13131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.874079][ T966] EXT4-fs (loop1): 1 orphan inode deleted [ 38.886150][ T966] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.899148][ T966] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.925764][ T30] audit: type=1400 audit(1785974463.091:431): avc: denied { open } for pid=963 comm="syz.4.248" path="/33/tracing/uprobe_events" dev="tracefs" ino=13131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.963383][ T30] audit: type=1400 audit(1785974463.091:432): avc: denied { write } for pid=963 comm="syz.4.248" name="enable" dev="tracefs" ino=18640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.985843][ T30] audit: type=1400 audit(1785974463.171:433): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 39.493878][ T740] usb 3-1: Using ep0 maxpacket: 16 [ 39.609278][ T305] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.619649][ T305] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 39.624636][ T740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 39.646451][ T740] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 39.663078][ T740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 39.673003][ T740] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 39.683475][ T740] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 224 [ 39.849607][ T740] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 39.868987][ T740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.883698][ T305] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 39.893146][ T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.894587][ T740] usb 3-1: Product: syz [ 39.902303][ T305] usb 1-1: Product: syz [ 39.909691][ T740] usb 3-1: Manufacturer: syz [ 39.914478][ T740] usb 3-1: SerialNumber: syz [ 39.919087][ T305] usb 1-1: Manufacturer: syz [ 39.919100][ T305] usb 1-1: SerialNumber: syz [ 39.949368][ T740] usb 3-1: config 0 descriptor?? [ 39.969169][ T911] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.999217][ T30] audit: type=1400 audit(1785974464.291:434): avc: denied { name_bind } for pid=983 comm="syz.1.253" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 40.170845][ T30] audit: type=1400 audit(1785974464.471:435): avc: denied { search } for pid=993 comm="syz.4.256" name="/" dev="configfs" ino=13723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.221899][ T740] usb 3-1: USB disconnect, device number 3 [ 40.339637][ T305] usb 1-1: 1:1 : unsupported format bits 0x2020000 [ 40.369290][ T305] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 40.378282][ T305] usb 1-1: 2:1 : unsupported format bits 0x2020000 [ 40.444819][ T305] usb 1-1: USB disconnect, device number 4 [ 40.509520][ T1005] loop4: detected capacity change from 0 to 256 [ 40.553297][ T30] audit: type=1400 audit(1785974464.851:436): avc: denied { write } for pid=1006 comm="syz.4.262" name="functions" dev="configfs" ino=16146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.585728][ T30] audit: type=1400 audit(1785974464.871:437): avc: denied { add_name } for pid=1006 comm="syz.4.262" name="tcm.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.989160][ T63] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 41.349176][ T63] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 41.365114][ T63] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 41.384978][ T63] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 41.404009][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.749077][ T305] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 41.939105][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.006376][ T1059] capability: warning: `syz.3.285' uses 32-bit capabilities (legacy support in use) [ 42.109111][ T305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.119312][ T305] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.128942][ T305] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 42.138663][ T305] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.151758][ T305] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 42.160918][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.299124][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.309542][ T26] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.479194][ T26] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 42.488408][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.496473][ T26] usb 1-1: Product: syz [ 42.500720][ T26] usb 1-1: Manufacturer: syz [ 42.505356][ T26] usb 1-1: SerialNumber: syz [ 42.792393][ T1078] usb 2-1: USB disconnect, device number 4 [ 43.383734][ T26] usb 1-1: 1:1 : unsupported format bits 0x20000 [ 43.421263][ T26] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 43.433005][ T26] usb 1-1: 2:1 : unsupported format bits 0x20000 [ 43.443927][ T1094] tipc: Enabling of bearer rejected, failed to enable media [ 43.466296][ T26] usb 1-1: USB disconnect, device number 5 [ 43.560762][ T1099] overlayfs: failed to clone upperpath [ 44.385330][ T1136] loop1: detected capacity change from 0 to 512 [ 44.397570][ T1136] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 44.409557][ T1136] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.314: iget: bad i_size value: -6196953087261802486 [ 44.423085][ T1136] EXT4-fs (loop1): Remounting filesystem read-only [ 44.425009][ T1126] loop0: detected capacity change from 0 to 40427 [ 44.429939][ T1136] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.314: couldn't read orphan inode 15 (err -117) [ 44.448592][ T1136] EXT4-fs (loop1): Remounting filesystem read-only [ 44.455120][ T1136] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 44.489324][ T26] usb 5-1: USB disconnect, device number 5 [ 44.499744][ T1140] loop4: detected capacity change from 0 to 1024 [ 44.508262][ T1126] F2FS-fs (loop0): invalid crc value [ 44.517791][ T1126] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.518005][ T1142] loop1: detected capacity change from 0 to 512 [ 44.536324][ T1140] EXT4-fs (loop4): Ignoring removed bh option [ 44.553240][ T1126] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.553514][ T1140] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 44.596735][ T1126] attempt to access beyond end of device [ 44.596735][ T1126] loop0: rw=34817, want=79880, limit=40427 [ 44.635356][ T1126] attempt to access beyond end of device [ 44.635356][ T1126] loop0: rw=0, want=77832, limit=40427 [ 44.649952][ T1142] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 44.668250][ T1142] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.687381][ T287] attempt to access beyond end of device [ 44.687381][ T287] loop0: rw=2049, want=45104, limit=40427 [ 44.701416][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 44.701427][ T30] audit: type=1400 audit(1785974469.001:447): avc: denied { remove_name } for pid=1141 comm="syz.1.315" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.770440][ T30] audit: type=1400 audit(1785974469.001:448): avc: denied { rmdir } for pid=1141 comm="syz.1.315" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.807438][ T30] audit: type=1400 audit(1785974469.101:449): avc: denied { bind } for pid=1158 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.808170][ T1142] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.315: directory missing '..' [ 44.913458][ T30] audit: type=1400 audit(1785974469.211:450): avc: denied { name_bind } for pid=1156 comm="syz.4.320" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 45.046563][ T1168] loop4: detected capacity change from 0 to 8192 [ 45.151559][ T30] audit: type=1400 audit(1785974469.451:451): avc: denied { write } for pid=1175 comm="syz.1.328" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.627566][ T30] audit: type=1400 audit(1785974469.921:452): avc: denied { read } for pid=1191 comm="syz.4.329" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 45.628802][ T1199] loop1: detected capacity change from 0 to 256 [ 45.688520][ T30] audit: type=1400 audit(1785974469.951:453): avc: denied { open } for pid=1191 comm="syz.4.329" path="/51/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 45.744469][ T1202] UDC core: couldn't find an available UDC or it's busy: -19 [ 45.791225][ T30] audit: type=1400 audit(1785974470.091:454): avc: denied { read write } for pid=1204 comm="syz.4.338" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 45.821209][ T30] audit: type=1400 audit(1785974470.091:455): avc: denied { open } for pid=1204 comm="syz.4.338" path="/53/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 45.855448][ T30] audit: type=1400 audit(1785974470.091:456): avc: denied { ioctl } for pid=1204 comm="syz.4.338" path="/53/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 45.879473][ T1211] loop4: detected capacity change from 0 to 512 [ 45.997321][ T1211] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 46.026772][ T1219] loop1: detected capacity change from 0 to 256 [ 46.087741][ T1211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 46.096630][ T1211] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.124156][ T1211] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.341: attempt to clear invalid blocks 1024 len 1 [ 46.143972][ T1211] EXT4-fs (loop4): Remounting filesystem read-only [ 46.151634][ T1211] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.341: bg 0: block 361: padding at end of block bitmap is not set [ 46.273899][ T1211] EXT4-fs (loop4): Remounting filesystem read-only [ 46.328614][ T1211] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 46.373617][ T1211] EXT4-fs (loop4): Remounting filesystem read-only [ 46.389800][ T1211] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.341: invalid indirect mapped block 1811939328 (level 0) [ 46.410032][ T1211] EXT4-fs (loop4): Remounting filesystem read-only [ 46.426739][ T1211] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.341: invalid indirect mapped block 2185560079 (level 1) [ 46.452699][ T1226] loop2: detected capacity change from 0 to 40427 [ 46.474463][ T1211] EXT4-fs (loop4): Remounting filesystem read-only [ 46.481176][ T1211] EXT4-fs (loop4): 1 truncate cleaned up [ 46.486898][ T1211] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,usrjquota=. Quota mode: none. [ 46.510750][ T1226] F2FS-fs (loop2): fault_injection options not supported [ 46.517922][ T1226] F2FS-fs (loop2): fault_type options not supported [ 46.529320][ T1226] F2FS-fs (loop2): invalid crc value [ 46.535744][ T1226] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.572774][ T1226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.590159][ T1226] attempt to access beyond end of device [ 46.590159][ T1226] loop2: rw=0, want=45072, limit=40427 [ 46.834324][ T1260] ip_tables: iptables: counters copy to user failed while replacing table [ 46.905770][ T1253] loop4: detected capacity change from 0 to 40427 [ 46.952968][ T1253] F2FS-fs (loop4): invalid crc value [ 46.969946][ T1253] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.031477][ T1278] hub 8-0:1.0: USB hub found [ 47.036480][ T1278] hub 8-0:1.0: 1 port detected [ 47.227660][ T1253] F2FS-fs (loop4): Start checkpoint disabled! [ 47.283802][ T1253] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 47.379977][ T1263] F2FS-fs (loop2): fault_injection options not supported [ 47.387494][ T1263] F2FS-fs (loop2): fault_type options not supported [ 47.398839][ T406] attempt to access beyond end of device [ 47.398839][ T406] loop4: rw=2049, want=45104, limit=40427 [ 47.410922][ T1263] F2FS-fs (loop2): invalid crc value [ 47.419153][ T1263] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.454229][ T1263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.485255][ T289] attempt to access beyond end of device [ 47.485255][ T289] loop2: rw=2049, want=45104, limit=40427 [ 47.579087][ T42] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 47.620463][ T1292] exfat: Unknown parameter 'zero_size_dir' [ 47.961918][ T1304] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.032173][ T1306] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.377: inode has both inline data and extents flags [ 48.049118][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.054880][ T1306] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.377: couldn't read orphan inode 15 (err -117) [ 48.075674][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.086859][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.086891][ T1306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.096982][ T42] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.139966][ T42] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 48.159414][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.205503][ T1322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1322 comm=syz.4.384 [ 48.340801][ T1329] EXT4-fs (loop0): can't read group descriptor 0 [ 48.784651][ T1333] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.804049][ T1333] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.884083][ T1333] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 49.011389][ T42] lg-g15 0003:046D:C222.0005: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 49.270757][ T1345] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 49.991446][ T42] lg-g15 0003:046D:C222.0005: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 49.995941][ T1351] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 50.006181][ T42] usb 2-1: USB disconnect, device number 5 [ 50.081743][ T1356] fido_id[1356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 50.099105][ T1358] serio: Serial port ttyS3 [ 50.119262][ T1351] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 50.275338][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 50.275351][ T30] audit: type=1400 audit(1785974474.571:464): avc: denied { read } for pid=1375 comm="syz.2.401" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.321402][ T1376] binder_alloc: 1375: pid 1375 spamming oneway? 2 buffers allocated for a total size of 5120 [ 50.334177][ T1376] binder_alloc: 1375: pid 1375 spamming oneway? 3 buffers allocated for a total size of 5128 [ 50.340144][ T30] audit: type=1400 audit(1785974474.611:465): avc: denied { open } for pid=1375 comm="syz.2.401" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.379842][ T1369] set_capacity_and_notify: 7 callbacks suppressed [ 50.379879][ T1369] loop1: detected capacity change from 0 to 40427 [ 50.410303][ T1369] F2FS-fs (loop1): invalid crc value [ 50.416625][ T30] audit: type=1400 audit(1785974474.611:466): avc: denied { ioctl } for pid=1375 comm="syz.2.401" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.432360][ T1384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'. [ 50.455137][ T1369] F2FS-fs (loop1): Found nat_bits in checkpoint [ 50.512777][ T30] audit: type=1400 audit(1785974474.611:467): avc: denied { set_context_mgr } for pid=1375 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 50.536420][ T1369] F2FS-fs (loop1): Start checkpoint disabled! [ 50.542629][ T30] audit: type=1400 audit(1785974474.611:468): avc: denied { map } for pid=1375 comm="syz.2.401" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.588898][ T30] audit: type=1400 audit(1785974474.621:469): avc: denied { call } for pid=1375 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 50.601191][ T1369] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 50.631964][ T30] audit: type=1400 audit(1785974474.931:470): avc: denied { create } for pid=1367 comm="syz.1.399" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.665083][ T30] audit: type=1400 audit(1785974474.931:471): avc: denied { write open } for pid=1367 comm="syz.1.399" path="/68/file0/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.700624][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 50.708291][ T30] audit: type=1400 audit(1785974474.951:472): avc: denied { ioctl } for pid=1367 comm="syz.1.399" path="/68/file0/file0" dev="loop1" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.710070][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 50.742308][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 50.742855][ T406] attempt to access beyond end of device [ 50.742855][ T406] loop1: rw=2049, want=45104, limit=40427 [ 50.751271][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 50.771360][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 50.780304][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 50.789215][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 50.798078][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 50.806983][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 51.003645][ T30] audit: type=1400 audit(1785974475.301:473): avc: denied { create } for pid=1404 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.087676][ T1451] loop1: detected capacity change from 0 to 40427 [ 53.099081][ T63] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 53.105926][ T1451] F2FS-fs (loop1): invalid crc value [ 53.112852][ T1451] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.133860][ T1451] F2FS-fs (loop1): Start checkpoint disabled! [ 53.140690][ T1451] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 53.541595][ T1473] loop2: detected capacity change from 0 to 16 [ 53.553982][ T333] attempt to access beyond end of device [ 53.553982][ T333] loop1: rw=2049, want=40976, limit=40427 [ 53.576069][ T1473] erofs: (device loop2): mounted with root inode @ nid 36. [ 53.979120][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 55.163102][ T63] usb 5-1: not running at top speed; connect to a high speed hub [ 55.424320][ T42] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 55.424589][ T63] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 55.424647][ T623] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 55.449069][ T63] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 55.457609][ T63] usb 5-1: config 14 has no interface number 0 [ 55.464364][ T63] usb 5-1: config 14 has no interface number 1 [ 55.471549][ T63] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 55.482842][ T63] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 55.493706][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 55.493719][ T30] audit: type=1400 audit(1785974479.781:476): avc: denied { remove_name } for pid=1521 comm="syz.4.455" name="obex.usb1" dev="configfs" ino=19372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.523695][ T63] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.540449][ T63] usb 5-1: config 14 interface 57 has no altsetting 0 [ 55.547361][ T30] audit: type=1400 audit(1785974479.781:477): avc: denied { rmdir } for pid=1521 comm="syz.4.455" name="obex.usb1" dev="configfs" ino=19372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.570691][ T63] usb 5-1: config 14 interface 228 has no altsetting 0 [ 55.609111][ T63] usb 5-1: string descriptor 0 read error: -71 [ 55.615583][ T63] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 55.625289][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.659230][ T63] usb 5-1: can't set config #14, error -71 [ 55.667496][ T63] usb 5-1: USB disconnect, device number 6 [ 55.749413][ T1524] loop4: detected capacity change from 0 to 40427 [ 55.839198][ T623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.839222][ T42] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 55.876271][ T623] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 55.887394][ T623] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 55.897183][ T623] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.899628][ T1524] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.963430][ T1524] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.990731][ T1524] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 55.998594][ T1524] CPU: 1 PID: 1524 Comm: syz.4.456 Not tainted syzkaller #0 [ 56.005874][ T1524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.015941][ T1524] Call Trace: [ 56.019215][ T1524] [ 56.022140][ T1524] __dump_stack+0x21/0x30 [ 56.026478][ T1524] dump_stack_lvl+0x110/0x170 [ 56.031148][ T1524] ? show_regs_print_info+0x20/0x20 [ 56.036447][ T1524] ? page_cache_prev_miss+0x290/0x290 [ 56.041820][ T1524] dump_stack+0x15/0x20 [ 56.045973][ T1524] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 56.051351][ T1524] f2fs_get_read_data_page+0x43f/0x6e0 [ 56.056804][ T1524] ? f2fs_get_block+0x140/0x140 [ 56.061655][ T1524] f2fs_find_data_page+0x189/0x3c0 [ 56.066759][ T1524] ? f2fs_readdir+0x3bb/0x9e0 [ 56.071432][ T1524] f2fs_readdir+0x4b4/0x9e0 [ 56.075934][ T1524] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 56.081131][ T1524] ? down_read_killable+0xc1/0x110 [ 56.086239][ T1524] ? security_file_permission+0x83/0xa0 [ 56.091778][ T1524] iterate_dir+0x25c/0x600 [ 56.096196][ T1524] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 56.101396][ T1524] __se_sys_getdents64+0xf2/0x250 [ 56.106416][ T1524] ? __x64_sys_getdents64+0x90/0x90 [ 56.111609][ T1524] ? filldir+0x660/0x660 [ 56.115850][ T1524] ? __kasan_check_write+0x14/0x20 [ 56.121039][ T1524] ? switch_fpu_return+0x15d/0x2c0 [ 56.126146][ T1524] __x64_sys_getdents64+0x7b/0x90 [ 56.131163][ T1524] x64_sys_call+0x592/0x9a0 [ 56.135658][ T1524] do_syscall_64+0x4c/0xa0 [ 56.140068][ T1524] ? clear_bhb_loop+0x50/0xa0 [ 56.144739][ T1524] ? clear_bhb_loop+0x50/0xa0 [ 56.149407][ T1524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.155291][ T1524] RIP: 0033:0x7f31cddef0d9 [ 56.159695][ T1524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.179293][ T1524] RSP: 002b:00007f31cc848028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 56.187729][ T1524] RAX: ffffffffffffffda RBX: 00007f31ce076fa0 RCX: 00007f31cddef0d9 [ 56.195697][ T1524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 56.203659][ T1524] RBP: 00007f31cde86024 R08: 0000000000000000 R09: 0000000000000000 [ 56.211623][ T1524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.219592][ T1524] R13: 00007f31ce077038 R14: 00007f31ce076fa0 R15: 00007ffc5b584108 [ 56.227565][ T1524] [ 56.349133][ T42] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 56.361109][ T623] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 56.370134][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.370156][ T42] usb 1-1: Product: syz [ 56.370394][ T42] usb 1-1: Manufacturer: syz [ 56.378306][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.398174][ T42] usb 1-1: SerialNumber: syz [ 56.416748][ T42] usb 1-1: config 0 descriptor?? [ 56.439114][ T1506] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 56.518981][ T30] audit: type=1400 audit(1785974480.811:478): avc: denied { create } for pid=1541 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.554650][ T30] audit: type=1400 audit(1785974480.841:479): avc: denied { ioctl } for pid=1541 comm="syz.2.464" path="socket:[20344]" dev="sockfs" ino=20344 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.579764][ T30] audit: type=1400 audit(1785974480.861:480): avc: denied { bind } for pid=1545 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.599280][ T30] audit: type=1400 audit(1785974480.861:481): avc: denied { listen } for pid=1545 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.619524][ T30] audit: type=1400 audit(1785974480.861:482): avc: denied { connect } for pid=1545 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.639278][ T30] audit: type=1400 audit(1785974480.861:483): avc: denied { setopt } for pid=1545 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.658866][ T30] audit: type=1400 audit(1785974480.861:484): avc: denied { write } for pid=1545 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.687545][ T26] usb 1-1: USB disconnect, device number 6 [ 56.829067][ T42] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.847275][ T1548] loop2: detected capacity change from 0 to 131072 [ 56.901958][ T1548] F2FS-fs (loop2): invalid crc value [ 56.908751][ T1548] F2FS-fs (loop2): Found nat_bits in checkpoint [ 56.934002][ T1548] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 56.940901][ T1548] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 56.957001][ T30] audit: type=1400 audit(1785974481.251:485): avc: denied { read } for pid=1547 comm="syz.2.466" path="/100/file1/control" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.201876][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 57.215901][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 57.225965][ T42] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 57.235194][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.283903][ T42] usb 2-1: USB disconnect, device number 6 [ 58.325099][ T1578] loop2: detected capacity change from 0 to 256 [ 58.344423][ T1582] device-mapper: ioctl: invalid device name [ 58.371682][ T1578] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 58.645487][ T1609] loop2: detected capacity change from 0 to 16 [ 58.770754][ T1609] erofs: (device loop2): mounted with root inode @ nid 36. [ 59.024882][ T1639] using random self ethernet address [ 59.030292][ T1639] using random host ethernet address [ 59.564277][ T305] usb 5-1: USB disconnect, device number 7 [ 59.767574][ T1657] loop4: detected capacity change from 0 to 512 [ 59.906292][ T1657] EXT4-fs (loop4): 1 orphan inode deleted [ 59.912319][ T1657] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.969375][ T1657] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.986248][ T1673] __nla_validate_parse: 96 callbacks suppressed [ 59.986273][ T1673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 60.001425][ T1673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.510'. [ 60.010311][ T1673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.510'. [ 60.538642][ T1697] loop2: detected capacity change from 0 to 128 [ 60.552183][ T1699] loop0: detected capacity change from 0 to 1024 [ 60.616991][ T1697] EXT4-fs (loop2): Ignoring removed nobh option [ 61.087604][ T1699] EXT4-fs (loop0): Ignoring removed bh option [ 61.143178][ T1697] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 61.160812][ T1697] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.162849][ T1708] loop4: detected capacity change from 0 to 128 [ 61.182480][ T1699] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 61.208737][ T1708] EXT4-fs (loop4): Test dummy encryption mode enabled [ 61.228261][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 61.228297][ T30] audit: type=1400 audit(1785974485.521:489): avc: denied { append } for pid=1698 comm="syz.0.521" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.246996][ T1708] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 61.273414][ T1708] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.465378][ T30] audit: type=1400 audit(1785974485.761:490): avc: denied { create } for pid=1712 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.652953][ T30] audit: type=1400 audit(1785974485.901:491): avc: denied { append } for pid=1706 comm="syz.4.522" path="/82/mnt/cpuacct.usage_sys" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.679137][ T63] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 62.909251][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 63.087636][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.108642][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.118813][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.184839][ T63] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 63.195508][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.457740][ T63] usb 2-1: config 0 descriptor?? [ 63.938176][ T1753] device-mapper: table: 253:0: thin-pool: unknown target type [ 63.947524][ T1753] device-mapper: ioctl: error adding target to table [ 64.233047][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.240535][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.247845][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.255281][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.262541][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.270482][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.277690][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.284945][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.293035][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.305321][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.329076][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.336355][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.338722][ T1756] loop2: detected capacity change from 0 to 40427 [ 64.343805][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.357810][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.360748][ T1756] F2FS-fs (loop2): fault_injection options not supported [ 64.365376][ T63] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 64.373987][ T1756] F2FS-fs (loop2): fault_type options not supported [ 64.382354][ T63] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input9 [ 64.398149][ T1756] F2FS-fs (loop2): invalid crc value [ 64.404809][ T1756] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.430930][ T1783] xt_hashlimit: max too large, truncated to 1048576 [ 64.450422][ T1756] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.469091][ T63] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 64.487459][ T1756] attempt to access beyond end of device [ 64.487459][ T1756] loop2: rw=2049, want=45112, limit=40427 [ 64.511190][ T289] attempt to access beyond end of device [ 64.511190][ T289] loop2: rw=2049, want=45128, limit=40427 [ 64.513481][ T63] usb 2-1: USB disconnect, device number 7 [ 64.616217][ T1788] loop2: detected capacity change from 0 to 128 [ 64.680586][ T1788] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 64.690139][ T1788] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.700796][ T1788] ext2 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.923811][ T1797] binder: 1793:1797 ioctl 80049367 200000000040 returned -22 [ 65.036012][ T30] audit: type=1400 audit(1785974489.331:492): avc: denied { create } for pid=1805 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 65.705442][ T30] audit: type=1400 audit(1785974490.001:493): avc: denied { append } for pid=1840 comm="syz.1.568" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.710248][ T1841] input: syz0 as /devices/virtual/input/input10 [ 65.728826][ T30] audit: type=1400 audit(1785974490.001:494): avc: denied { ioctl } for pid=1840 comm="syz.1.568" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.834636][ T30] audit: type=1400 audit(1785974490.131:495): avc: denied { mount } for pid=1846 comm="syz.1.571" name="/" dev="ramfs" ino=21225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 65.857627][ T30] audit: type=1400 audit(1785974490.151:496): avc: denied { remount } for pid=1846 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 65.877976][ T30] audit: type=1400 audit(1785974490.171:497): avc: denied { mounton } for pid=1846 comm="syz.1.571" path="/93/file0" dev="ramfs" ino=21225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 65.981790][ T30] audit: type=1400 audit(1785974490.201:498): avc: denied { sys_admin } for pid=1846 comm="syz.1.571" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 66.508247][ T1857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.574'. [ 66.535571][ T1859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 67.010536][ T1873] ================================================================== [ 67.018638][ T1873] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200 [ 67.026796][ T1873] Read of size 8 at addr ffff88811abd2fc0 by task syz.0.580/1873 [ 67.034513][ T1873] [ 67.036831][ T1873] CPU: 0 PID: 1873 Comm: syz.0.580 Not tainted syzkaller #0 [ 67.044110][ T1873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.054160][ T1873] Call Trace: [ 67.057433][ T1873] [ 67.060353][ T1873] __dump_stack+0x21/0x30 [ 67.064681][ T1873] dump_stack_lvl+0x110/0x170 [ 67.069355][ T1873] ? show_regs_print_info+0x20/0x20 [ 67.074550][ T1873] ? load_image+0x3f0/0x3f0 [ 67.079056][ T1873] print_address_description+0x7f/0x2c0 [ 67.084602][ T1873] ? tc_setup_flow_action+0x88e/0x3200 [ 67.090061][ T1873] kasan_report+0x10f/0x150 [ 67.094564][ T1873] ? tc_setup_flow_action+0x88e/0x3200 [ 67.100027][ T1873] __asan_report_load8_noabort+0x14/0x20 [ 67.105662][ T1873] tc_setup_flow_action+0x88e/0x3200 [ 67.110952][ T1873] mall_replace_hw_filter+0x2db/0x8d0 [ 67.116332][ T1873] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 67.122403][ T1873] ? mall_set_parms+0x520/0x520 [ 67.127252][ T1873] ? tcf_exts_destroy+0xb0/0xb0 [ 67.132099][ T1873] ? pcpu_alloc+0x1118/0x16f0 [ 67.136778][ T1873] ? mall_set_parms+0x1e4/0x520 [ 67.141625][ T1873] mall_change+0x544/0x760 [ 67.146033][ T1873] ? __kasan_check_write+0x14/0x20 [ 67.151145][ T1873] ? mall_get+0xa0/0xa0 [ 67.155295][ T1873] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 67.161187][ T1873] ? mall_get+0xa0/0xa0 [ 67.165335][ T1873] tc_new_tfilter+0x13df/0x1990 [ 67.170185][ T1873] ? tcf_gate_entry_destructor+0x20/0x20 [ 67.175816][ T1873] ? security_capable+0x87/0xb0 [ 67.180664][ T1873] ? ns_capable+0x8c/0xf0 [ 67.184994][ T1873] ? netlink_net_capable+0x125/0x160 [ 67.190279][ T1873] ? tcf_gate_entry_destructor+0x20/0x20 [ 67.195910][ T1873] rtnetlink_rcv_msg+0x83c/0xcb0 [ 67.200846][ T1873] ? rtnetlink_bind+0x80/0x80 [ 67.205515][ T1873] ? avc_has_perm_noaudit+0x390/0x490 [ 67.210883][ T1873] ? memcpy+0x56/0x70 [ 67.214860][ T1873] ? avc_has_perm_noaudit+0x30a/0x490 [ 67.220230][ T1873] ? arch_stack_walk+0xee/0x140 [ 67.225083][ T1873] ? avc_denied+0x1b0/0x1b0 [ 67.229581][ T1873] ? stack_trace_save+0xa6/0xf0 [ 67.234441][ T1873] ? avc_has_perm+0x163/0x250 [ 67.239114][ T1873] ? avc_has_perm_noaudit+0x490/0x490 [ 67.244486][ T1873] ? x64_sys_call+0x4b/0x9a0 [ 67.249077][ T1873] ? selinux_nlmsg_lookup+0x39d/0x440 [ 67.254448][ T1873] netlink_rcv_skb+0x1e9/0x430 [ 67.259213][ T1873] ? rtnetlink_bind+0x80/0x80 [ 67.263888][ T1873] ? netlink_ack+0xb10/0xb10 [ 67.268474][ T1873] ? _copy_from_iter+0x4a4/0x10a0 [ 67.273499][ T1873] ? __netlink_lookup+0x387/0x3b0 [ 67.278524][ T1873] rtnetlink_rcv+0x1c/0x20 [ 67.282932][ T1873] netlink_unicast+0x86c/0xa30 [ 67.287682][ T1873] netlink_sendmsg+0x879/0xb80 [ 67.292429][ T1873] ? netlink_getsockopt+0x530/0x530 [ 67.297609][ T1873] ? security_socket_sendmsg+0x82/0xa0 [ 67.303048][ T1873] ? netlink_getsockopt+0x530/0x530 [ 67.308232][ T1873] ____sys_sendmsg+0x5be/0x8f0 [ 67.312982][ T1873] ? __sys_sendmsg_sock+0x40/0x40 [ 67.317987][ T1873] ? import_iovec+0x7c/0xb0 [ 67.322472][ T1873] ___sys_sendmsg+0x236/0x2e0 [ 67.327134][ T1873] ? __sys_sendmsg+0x280/0x280 [ 67.331881][ T1873] ? sock_show_fdinfo+0xa0/0xa0 [ 67.336713][ T1873] ? __fdget+0x1a1/0x230 [ 67.340933][ T1873] __x64_sys_sendmsg+0x201/0x2d0 [ 67.345859][ T1873] ? ___sys_sendmsg+0x2e0/0x2e0 [ 67.350692][ T1873] ? __kasan_check_write+0x14/0x20 [ 67.355788][ T1873] ? switch_fpu_return+0x15d/0x2c0 [ 67.360889][ T1873] x64_sys_call+0x4b/0x9a0 [ 67.365301][ T1873] do_syscall_64+0x4c/0xa0 [ 67.369704][ T1873] ? clear_bhb_loop+0x50/0xa0 [ 67.374364][ T1873] ? clear_bhb_loop+0x50/0xa0 [ 67.379026][ T1873] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.384921][ T1873] RIP: 0033:0x7f0f2a4150d9 [ 67.389324][ T1873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.408914][ T1873] RSP: 002b:00007f0f28e6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.417326][ T1873] RAX: ffffffffffffffda RBX: 00007f0f2a69cfa0 RCX: 00007f0f2a4150d9 [ 67.425282][ T1873] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 67.433236][ T1873] RBP: 00007f0f2a4ac024 R08: 0000000000000000 R09: 0000000000000000 [ 67.441188][ T1873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.449139][ T1873] R13: 00007f0f2a69d038 R14: 00007f0f2a69cfa0 R15: 00007ffc14aa3828 [ 67.457096][ T1873] [ 67.460101][ T1873] [ 67.462402][ T1873] Allocated by task 1873: [ 67.466703][ T1873] __kasan_kmalloc+0xd4/0x100 [ 67.471363][ T1873] __kmalloc+0x13d/0x2c0 [ 67.475587][ T1873] tcf_idr_create+0x5f/0x790 [ 67.480156][ T1873] tcf_idr_create_from_flags+0x61/0x70 [ 67.485596][ T1873] tcf_gact_init+0x342/0x570 [ 67.490167][ T1873] tcf_action_init_1+0x3fd/0x6b0 [ 67.495086][ T1873] tcf_action_init+0x233/0x7a0 [ 67.499829][ T1873] tcf_exts_validate+0x24a/0x580 [ 67.504745][ T1873] mall_set_parms+0x48/0x520 [ 67.509311][ T1873] mall_change+0x478/0x760 [ 67.513702][ T1873] tc_new_tfilter+0x13df/0x1990 [ 67.518529][ T1873] rtnetlink_rcv_msg+0x83c/0xcb0 [ 67.523444][ T1873] netlink_rcv_skb+0x1e9/0x430 [ 67.528187][ T1873] rtnetlink_rcv+0x1c/0x20 [ 67.532582][ T1873] netlink_unicast+0x86c/0xa30 [ 67.537323][ T1873] netlink_sendmsg+0x879/0xb80 [ 67.542065][ T1873] ____sys_sendmsg+0x5be/0x8f0 [ 67.546813][ T1873] ___sys_sendmsg+0x236/0x2e0 [ 67.551468][ T1873] __x64_sys_sendmsg+0x201/0x2d0 [ 67.556384][ T1873] x64_sys_call+0x4b/0x9a0 [ 67.560786][ T1873] do_syscall_64+0x4c/0xa0 [ 67.565232][ T1873] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.571105][ T1873] [ 67.573408][ T1873] The buggy address belongs to the object at ffff88811abd2f00 [ 67.573408][ T1873] which belongs to the cache kmalloc-192 of size 192 [ 67.587436][ T1873] The buggy address is located 0 bytes to the right of [ 67.587436][ T1873] 192-byte region [ffff88811abd2f00, ffff88811abd2fc0) [ 67.601036][ T1873] The buggy address belongs to the page: [ 67.606656][ T1873] page:ffffea00046af480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11abd2 [ 67.616876][ T1873] flags: 0x4000000000000200(slab|zone=1) [ 67.622494][ T1873] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100042c00 [ 67.631057][ T1873] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 67.639613][ T1873] page dumped because: kasan: bad access detected [ 67.646001][ T1873] page_owner tracks the page as allocated [ 67.651703][ T1873] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 140, ts 4863021348, free_ts 0 [ 67.666701][ T1873] post_alloc_hook+0x192/0x1b0 [ 67.671448][ T1873] prep_new_page+0x1c/0x110 [ 67.675930][ T1873] get_page_from_freelist+0x2c3a/0x2cd0 [ 67.681453][ T1873] __alloc_pages+0x1a2/0x460 [ 67.686031][ T1873] new_slab+0xa0/0x4d0 [ 67.690077][ T1873] ___slab_alloc+0x3ac/0x840 [ 67.694648][ T1873] __slab_alloc+0x49/0x90 [ 67.698963][ T1873] kmem_cache_alloc_trace+0x146/0x270 [ 67.704322][ T1873] kernfs_fop_open+0x375/0xbb0 [ 67.709066][ T1873] do_dentry_open+0x82a/0x1010 [ 67.713808][ T1873] vfs_open+0x73/0x80 [ 67.717766][ T1873] path_openat+0x26e6/0x2f80 [ 67.722335][ T1873] do_filp_open+0x1df/0x400 [ 67.726817][ T1873] do_sys_openat2+0x15e/0x7f0 [ 67.731472][ T1873] __x64_sys_openat+0x136/0x160 [ 67.736301][ T1873] x64_sys_call+0x219/0x9a0 [ 67.740781][ T1873] page_owner free stack trace missing [ 67.746131][ T1873] [ 67.748434][ T1873] Memory state around the buggy address: [ 67.754042][ T1873] ffff88811abd2e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 67.762078][ T1873] ffff88811abd2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.770114][ T1873] >ffff88811abd2f80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 67.778150][ T1873] ^ [ 67.784278][ T1873] ffff88811abd3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.792316][ T1873] ffff88811abd3080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.800349][ T1873] ================================================================== [ 67.808384][ T1873] Disabling lock debugging due to kernel taint [ 67.825348][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 67.825361][ T30] audit: type=1400 audit(1785974492.121:500): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 67.895314][ T30] audit: type=1400 audit(1785974492.121:501): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.922794][ T30] audit: type=1400 audit(1785974492.121:502): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.944088][ T30] audit: type=1400 audit(1785974492.121:503): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.964615][ T30] audit: type=1400 audit(1785974492.121:504): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.999075][ T30] audit: type=1400 audit(1785974492.121:505): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.027132][ T30] audit: type=1400 audit(1785974492.121:506): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1