last executing test programs: 27.8426619s ago: executing program 3 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x900000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002bf, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 27.80175623s ago: executing program 3 (id=333): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2cf2) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20a1, &(0x7f0000000200)={[{@bsdgroups}, {@nodelalloc}, {@nogrpid}, {@noblock_validity}, {@dax_inode}, {@prjquota}]}, 0x1, 0x654, &(0x7f0000000ec0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@lazytime}, {@grpjquota}, {@data_writeback}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r3, 0x0, 0x0) 27.42945026s ago: executing program 3 (id=335): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1) preadv(r0, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1, 0x13, 0xf7) 27.063449138s ago: executing program 3 (id=346): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2cf2) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20a1, &(0x7f0000000200)={[{@bsdgroups}, {@nodelalloc}, {@nogrpid}, {@noblock_validity}, {@dax_inode}, {@prjquota}]}, 0x1, 0x654, &(0x7f0000000ec0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@lazytime}, {@grpjquota}, {@data_writeback}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r3, 0x0, 0x0) 26.925973611s ago: executing program 3 (id=348): socket$netlink(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x4140011, 0x0, 0x52, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 25.606258723s ago: executing program 3 (id=356): unshare(0x400) r0 = open(&(0x7f0000001b40)='.\x00', 0x2400, 0x74) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 22.470513207s ago: executing program 4 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x18, r2, 0x10000000000005, 0xfffffffffffffffa) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000101002aa412e9ccca6f7c19000000000000000018110000e14f910262710a37f5d2d553d7fd32011012ba810efc5661a6", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r5, &(0x7f0000000000)=""/24, 0x18) getdents64(r5, 0x0, 0x36) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 21.94188666s ago: executing program 4 (id=399): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00020c0000000c00022b79"], 0x0, 0x0, 0x0}, 0x0) 19.714199432s ago: executing program 4 (id=426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x30, r1, 0x1, 0x870bd2c, 0x25dfdbfc, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x4}]}, 0x30}}, 0x890) 19.688968633s ago: executing program 4 (id=430): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xb2ad, 0x2, 0x7, 0x63e, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x890) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x800000000000, 0x1}, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 19.148322736s ago: executing program 4 (id=435): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) listen(r3, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) 19.147783936s ago: executing program 4 (id=438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x3, 0x5, 0x0, 0x0, 0x7d2, 0x2, 0xe, 0xb, 0x3, 0x1, 0xd4, 0x6, 0x0, 0x81, 0x34, 0x9, 0x1, 0x0, 0x9, '\x00', 0xe, 0x3}) 10.482604911s ago: executing program 32 (id=356): unshare(0x400) r0 = open(&(0x7f0000001b40)='.\x00', 0x2400, 0x74) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 4.097094712s ago: executing program 33 (id=438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x3, 0x5, 0x0, 0x0, 0x7d2, 0x2, 0xe, 0xb, 0x3, 0x1, 0xd4, 0x6, 0x0, 0x81, 0x34, 0x9, 0x1, 0x0, 0x9, '\x00', 0xe, 0x3}) 1.848351986s ago: executing program 2 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(r0, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r3, &(0x7f0000012400)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.689717029s ago: executing program 6 (id=657): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x8001, 0x800000000000, 0x4, 0x3}, {0x3, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1}, {{@in=@private=0xa010100, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1.68371811s ago: executing program 6 (id=658): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x3b1a5cba1e53678f, &(0x7f0000002800)) 1.576409202s ago: executing program 6 (id=662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa35d12) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r8, &(0x7f0000000000)=""/24, 0x18) getdents64(r8, 0x0, 0x36) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.417416276s ago: executing program 0 (id=669): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e25, 0x0, @mcast2, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1) 1.26435467s ago: executing program 0 (id=670): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf, 0x5, 0x101, 0x8, 0xc6e, 0xe87c, 0xc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x50811}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usb_ep_read(r0, 0xc0, 0xf1, &(0x7f0000000800)=""/241) 853.120389ms ago: executing program 2 (id=671): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x4, 0x0, 0x0) 852.987559ms ago: executing program 2 (id=672): r0 = epoll_create1(0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000007c0)) 852.792399ms ago: executing program 0 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgid(0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0xee00, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, 0x0) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 852.483239ms ago: executing program 5 (id=674): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000000c0)) 670.796574ms ago: executing program 1 (id=675): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @generic={0x7, 0x7, "e86c3fdce8"}]}}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x40000) 670.560734ms ago: executing program 6 (id=676): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 592.669506ms ago: executing program 2 (id=677): bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x20024, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000100)) 343.001471ms ago: executing program 2 (id=678): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) write$P9_RLOPEN(r0, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x40, 0x3, 0x1}, 0x200}}, 0x18) 342.813281ms ago: executing program 2 (id=679): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000002980)=""/4096, 0x1000, 0x8) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 245.812994ms ago: executing program 0 (id=680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) 245.630434ms ago: executing program 5 (id=681): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffff) 212.059305ms ago: executing program 1 (id=682): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x621d) 155.800296ms ago: executing program 1 (id=683): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000", @ANYBLOB, @ANYBLOB], 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xffff}]}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000040)={0xffffffffffffff01, 0x0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xc, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {0x4e20, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}}}}}}}}, 0x0) 154.997336ms ago: executing program 5 (id=684): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 107.888577ms ago: executing program 0 (id=685): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 107.607227ms ago: executing program 1 (id=686): r0 = timerfd_create(0x9, 0x80000) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x3, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xc}, 0x50) close(0xffffffffffffffff) socket(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) fchdir(r1) 78.598067ms ago: executing program 5 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 29.839739ms ago: executing program 0 (id=688): io_uring_setup(0x7a90, &(0x7f0000000080)={0x0, 0x6d46, 0x40, 0x1, 0x800025e}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) close(0x3) 29.645209ms ago: executing program 1 (id=689): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x59) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 29.525489ms ago: executing program 6 (id=690): r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 29.353519ms ago: executing program 5 (id=691): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000011d27bd6ffffffff8000a21004000000080000000001400030068737230000000000000000000000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x8810) io_uring_setup(0x1baa, &(0x7f0000000340)={0x0, 0x53e8, 0x40, 0x1, 0x385}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 23.402179ms ago: executing program 6 (id=692): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) 797.9µs ago: executing program 1 (id=693): sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x4004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x11) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 0s ago: executing program 5 (id=694): unshare(0x600) iopl(0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) 0s ago: executing program 6 (id=695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c70f000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x401, 0x81) write(r4, &(0x7f0000000600)='dummy_udc.0\n', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 17.593447][ T28] audit: type=1400 audit(1785054528.523:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.594470][ T279] cgroup: Unknown subsys name 'net' [ 17.596478][ T28] audit: type=1400 audit(1785054528.523:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.600089][ T28] audit: type=1400 audit(1785054528.523:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.600209][ T279] cgroup: Unknown subsys name 'devices' [ 17.692687][ T279] cgroup: Unknown subsys name 'hugetlb' [ 17.698305][ T279] cgroup: Unknown subsys name 'rlimit' [ 17.829634][ T28] audit: type=1400 audit(1785054528.753:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 17.852804][ T28] audit: type=1400 audit(1785054528.753:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 17.872537][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 17.877496][ T28] audit: type=1400 audit(1785054528.753:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 17.907112][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 17.909147][ T28] audit: type=1400 audit(1785054528.813:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.943115][ T28] audit: type=1400 audit(1785054528.813:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.968694][ T28] audit: type=1400 audit(1785054528.833:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.994173][ T28] audit: type=1400 audit(1785054528.833:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.084489][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.091768][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.099187][ T287] device bridge_slave_0 entered promiscuous mode [ 19.106150][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.113272][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.120652][ T287] device bridge_slave_1 entered promiscuous mode [ 19.198980][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.206047][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.213481][ T288] device bridge_slave_0 entered promiscuous mode [ 19.229226][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.236367][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.243728][ T288] device bridge_slave_1 entered promiscuous mode [ 19.288308][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.295552][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.302909][ T289] device bridge_slave_0 entered promiscuous mode [ 19.323230][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.330257][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.337648][ T289] device bridge_slave_1 entered promiscuous mode [ 19.350622][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.357694][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.364967][ T290] device bridge_slave_0 entered promiscuous mode [ 19.374726][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.381786][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.389147][ T290] device bridge_slave_1 entered promiscuous mode [ 19.417412][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.424505][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.431864][ T291] device bridge_slave_0 entered promiscuous mode [ 19.438952][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.446003][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.453456][ T291] device bridge_slave_1 entered promiscuous mode [ 19.507524][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.514602][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.521910][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.528922][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.616390][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.623737][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.632273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.639659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.671067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.679157][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.686178][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.693723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.702017][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.709015][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.744087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.762924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.785790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.798000][ T287] device veth0_vlan entered promiscuous mode [ 19.808434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.816246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.824355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.831891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.858773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.866413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.874680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.882950][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.889970][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.897433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.905655][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.912697][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.920090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.928230][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.935246][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.942626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.950704][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.957717][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.965041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.972999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.981139][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.988145][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.995493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.003569][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.010564][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.017942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.025561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.033121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.049455][ T287] device veth1_macvtap entered promiscuous mode [ 20.056314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.064779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.073686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.081659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.089502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.102641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.110941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.134838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.142972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.150955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.151697][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 20.160761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.174568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.182870][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.191190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.198521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.214371][ T290] device veth0_vlan entered promiscuous mode [ 20.226455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.240158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.249460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.258176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.266470][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.273511][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.281024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.289237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.297569][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.304595][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.312069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.319863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.327859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.335696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.343625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.351910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.360106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.367964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.375853][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.383692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.391165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.398501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.405889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.413392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.420767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.428605][ T288] device veth0_vlan entered promiscuous mode [ 20.441320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.449275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.457339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.465593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.475964][ T291] device veth0_vlan entered promiscuous mode [ 20.482301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.490464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.499354][ T290] device veth1_macvtap entered promiscuous mode [ 20.513052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.520651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.528858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.537085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.545475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.555028][ T288] device veth1_macvtap entered promiscuous mode [ 20.566587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.574166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.582456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.597618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.605892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.614341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.622683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.637144][ T291] device veth1_macvtap entered promiscuous mode [ 20.647471][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.656765][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.665009][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.677269][ T289] device veth0_vlan entered promiscuous mode [ 20.689488][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.699936][ T316] loop4: detected capacity change from 0 to 1024 [ 20.705292][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.706896][ T316] EXT4-fs: Ignoring removed oldalloc option [ 20.717972][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.728154][ T316] EXT4-fs: Ignoring removed oldalloc option [ 20.728355][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.742448][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.749890][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.757616][ T316] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 20.775338][ T289] device veth1_macvtap entered promiscuous mode [ 20.782738][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.790971][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.793774][ T316] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 20.799407][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.816372][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.824889][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.833286][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.841927][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.872219][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.881485][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.881582][ T290] EXT4-fs (loop4): unmounting filesystem. [ 20.889864][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.904530][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.934564][ T327] loop4: detected capacity change from 0 to 1024 [ 20.962292][ T327] ======================================================= [ 20.962292][ T327] WARNING: The mand mount option has been deprecated and [ 20.962292][ T327] and is ignored by this kernel. Remove the mand [ 20.962292][ T327] option from the mount to silence this warning. [ 20.962292][ T327] ======================================================= [ 20.998500][ T327] EXT4-fs: Ignoring removed oldalloc option [ 21.004506][ T327] EXT4-fs: Ignoring removed bh option [ 21.022694][ T327] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 21.031546][ T327] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.088097][ T327] EXT4-fs error (device loop4): swap_inode_boot_loader:378: comm syz.4.8: inode #5: comm syz.4.8: iget: illegal inode # [ 21.116825][ T290] EXT4-fs (loop4): unmounting filesystem. [ 21.373456][ T345] input: syz1 as /devices/virtual/input/input4 [ 21.450726][ T351] loop3: detected capacity change from 0 to 2048 [ 21.471071][ T297] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 21.480297][ T351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 21.489693][ T351] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.538008][ T320] syz.1.2 (320) used greatest stack depth: 19584 bytes left [ 21.675016][ T357] loop1: detected capacity change from 0 to 1024 [ 21.702912][ T357] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 21.713896][ T357] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 21.723799][ T357] jbd2_journal_init_inode: Cannot locate journal superblock [ 21.731458][ T357] EXT4-fs (loop1): Could not load journal inode [ 21.801470][ T297] usb 3-1: Using ep0 maxpacket: 32 [ 21.827497][ T297] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 544, setting to 64 [ 21.854449][ T297] usb 3-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 21.873657][ T361] loop1: detected capacity change from 0 to 512 [ 21.892419][ T297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 21.931049][ T297] usb 3-1: Product: syz [ 21.935442][ T297] usb 3-1: Manufacturer: syz [ 21.940640][ T297] usb 3-1: SerialNumber: syz [ 21.949493][ T361] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 21.961643][ T361] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.999708][ T288] EXT4-fs (loop1): unmounting filesystem. [ 22.047194][ T383] loop1: detected capacity change from 0 to 128 [ 22.080600][ T383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 22.090671][ T383] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 22.141987][ T383] EXT4-fs (loop1): unmounting filesystem. [ 22.200224][ T297] usb 3-1: MIDIStreaming interface descriptor not found [ 22.224707][ T297] usb 3-1: USB disconnect, device number 2 [ 22.317848][ T287] EXT4-fs (loop3): unmounting filesystem. [ 22.355704][ T402] loop3: detected capacity change from 0 to 128 [ 22.362652][ T402] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 22.372837][ T402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 22.382126][ T402] ext2 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 22.401112][ T337] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.464243][ T287] EXT4-fs (loop3): unmounting filesystem. [ 22.541048][ T314] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 22.591063][ T337] usb 1-1: Using ep0 maxpacket: 8 [ 22.597429][ T337] usb 1-1: unable to get BOS descriptor or descriptor too short [ 22.605801][ T337] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 22.616803][ T337] usb 1-1: config 1 interface 0 has no altsetting 0 [ 22.624761][ T337] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 22.633838][ T337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.641846][ T337] usb 1-1: Product: syz [ 22.645991][ T337] usb 1-1: Manufacturer: syz [ 22.650556][ T337] usb 1-1: SerialNumber: syz [ 22.739142][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 22.739155][ T28] audit: type=1400 audit(1785054533.663:148): avc: denied { setopt } for pid=422 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 22.749391][ T314] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 22.775291][ T314] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 22.784375][ T314] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 22.794785][ T314] usb 5-1: config 220 has no interface number 2 [ 22.801185][ T314] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 22.814478][ T314] usb 5-1: config 220 interface 0 has no altsetting 0 [ 22.827165][ T28] audit: type=1400 audit(1785054533.703:149): avc: denied { bind } for pid=422 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 22.846428][ T314] usb 5-1: config 220 interface 76 has no altsetting 0 [ 22.853596][ T314] usb 5-1: config 220 interface 1 has no altsetting 0 [ 22.868254][ T426] loop2: detected capacity change from 0 to 512 [ 22.883271][ T314] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 22.894525][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.902996][ T314] usb 5-1: Product: syz [ 22.907226][ T314] usb 5-1: Manufacturer: syz [ 22.919617][ T314] usb 5-1: SerialNumber: syz [ 22.927861][ T426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 22.937230][ T426] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 22.960211][ T28] audit: type=1400 audit(1785054533.883:150): avc: denied { append } for pid=425 comm="syz.2.36" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 22.991246][ T291] EXT4-fs (loop2): unmounting filesystem. [ 23.197287][ T337] usbhid 1-1:1.0: can't add hid device: -71 [ 23.203308][ T337] usbhid: probe of 1-1:1.0 failed with error -71 [ 23.204864][ T314] usb 5-1: selecting invalid altsetting 0 [ 23.221266][ T337] usb 1-1: USB disconnect, device number 2 [ 23.238382][ T314] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 23.257280][ T314] usb 5-1: No valid video chain found. [ 23.269684][ T434] loop2: detected capacity change from 0 to 1024 [ 23.284407][ T314] usb 5-1: USB disconnect, device number 2 [ 23.322460][ T434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 23.383485][ T291] EXT4-fs (loop2): unmounting filesystem. [ 23.401923][ T28] audit: type=1400 audit(1785054534.333:151): avc: denied { name_bind } for pid=442 comm="syz.1.38" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 23.488361][ T28] audit: type=1400 audit(1785054534.413:152): avc: denied { read } for pid=441 comm="syz.2.42" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 23.490582][ T452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.46'. [ 23.513345][ T28] audit: type=1400 audit(1785054534.413:153): avc: denied { open } for pid=441 comm="syz.2.42" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 23.554505][ T28] audit: type=1400 audit(1785054534.413:154): avc: denied { create } for pid=451 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 23.574673][ T28] audit: type=1400 audit(1785054534.413:155): avc: denied { write } for pid=451 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 23.594792][ T28] audit: type=1400 audit(1785054534.413:156): avc: denied { nlmsg_write } for pid=451 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 23.596556][ T456] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.617449][ T28] audit: type=1400 audit(1785054534.523:157): avc: denied { create } for pid=441 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 23.701081][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.970309][ T474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 23.979236][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 23.979351][ T474] sch_tbf: burst 0 is lower than device veth0_to_bond mtu (1514) ! [ 23.986578][ T60] usb 4-1: config index 0 descriptor too short (expected 158, got 36) [ 24.000893][ T60] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 24.009376][ T60] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.019783][ T60] usb 4-1: config 0 has no interface number 0 [ 24.026041][ T60] usb 4-1: config 0 interface 12 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 24.039134][ T60] usb 4-1: config 0 interface 12 has no altsetting 0 [ 24.047192][ T60] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 24.056340][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.064335][ T60] usb 4-1: Product: syz [ 24.068484][ T60] usb 4-1: Manufacturer: syz [ 24.073094][ T60] usb 4-1: SerialNumber: syz [ 24.078094][ T60] usb 4-1: config 0 descriptor?? [ 24.141055][ T19] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.321043][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 24.327493][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 24.335878][ T19] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 24.346841][ T19] usb 3-1: config 1 interface 0 has no altsetting 0 [ 24.354812][ T19] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 24.363982][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.372227][ T19] usb 3-1: Product: syz [ 24.376372][ T19] usb 3-1: Manufacturer: syz [ 24.380950][ T19] usb 3-1: SerialNumber: syz [ 24.488271][ T60] usb 4-1: USB disconnect, device number 2 [ 24.880755][ T493] loop0: detected capacity change from 0 to 128 [ 25.370030][ T493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.379943][ T493] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 25.562551][ T289] EXT4-fs (loop0): unmounting filesystem. [ 25.772519][ T510] loop2: detected capacity change from 0 to 128 [ 25.803800][ T510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 25.841218][ T510] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 25.898742][ T291] EXT4-fs (loop2): unmounting filesystem. [ 26.046247][ T516] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 26.344663][ T19] usbhid 3-1:1.0: can't add hid device: -71 [ 26.356198][ T19] usbhid: probe of 3-1:1.0 failed with error -71 [ 26.416758][ T19] usb 3-1: USB disconnect, device number 3 [ 26.433971][ T538] loop2: detected capacity change from 0 to 128 [ 26.791760][ T538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.813717][ T546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.84'. [ 26.822823][ T538] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.877953][ T291] EXT4-fs (loop2): unmounting filesystem. [ 26.979710][ T556] loop3: detected capacity change from 0 to 128 [ 27.407389][ T563] using random self ethernet address [ 27.412802][ T563] using random host ethernet address [ 27.451882][ T556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.470771][ T556] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 27.524719][ T287] EXT4-fs (loop3): unmounting filesystem. [ 27.781107][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.971070][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 27.977799][ T39] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.991052][ T314] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 28.001675][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.021510][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.042063][ T39] usb 1-1: string descriptor 0 read error: -22 [ 28.053670][ T39] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 28.072572][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.182072][ T314] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.203997][ T314] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.223031][ T314] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 28.245118][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.266223][ T314] hub 4-1:4.0: USB hub found [ 28.363893][ T39] usb 1-1: USB disconnect, device number 3 [ 28.384621][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 28.384635][ T28] audit: type=1400 audit(1785054539.313:188): avc: denied { mount } for pid=642 comm="syz.1.126" name="/" dev="configfs" ino=13279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 28.466555][ T314] hub 4-1:4.0: 2 ports detected [ 28.471525][ T314] usb 4-1: selecting invalid altsetting 1 [ 28.477396][ T314] hub 4-1:4.0: Using single TT (err -22) [ 28.561564][ T28] audit: type=1400 audit(1785054539.493:189): avc: denied { sqpoll } for pid=660 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 28.961312][ T614] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 29.026610][ T28] audit: type=1400 audit(1785054539.903:190): avc: denied { relabelto } for pid=613 comm="syz.2.113" name="cgroup.procs" dev="cgroup" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:logrotate_var_lib_t:s0" [ 29.095288][ T666] loop4: detected capacity change from 0 to 4096 [ 29.101703][ T28] audit: type=1400 audit(1785054539.903:191): avc: denied { associate } for pid=613 comm="syz.2.113" name="cgroup.procs" dev="cgroup" ino=213 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:logrotate_var_lib_t:s0" [ 29.148101][ T666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.158404][ T28] audit: type=1400 audit(1785054539.923:192): avc: denied { create } for pid=660 comm="syz.4.135" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.191706][ T666] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz.4.138: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 29.206714][ T314] usb 4-1: USB disconnect, device number 3 [ 29.231144][ T28] audit: type=1400 audit(1785054539.923:193): avc: denied { map } for pid=660 comm="syz.4.135" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.255258][ T666] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.138: directory missing '..' [ 29.273195][ T290] EXT4-fs (loop4): unmounting filesystem. [ 29.278979][ T28] audit: type=1400 audit(1785054539.923:194): avc: denied { read write } for pid=660 comm="syz.4.135" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.334939][ T28] audit: type=1400 audit(1785054540.263:195): avc: denied { ioctl } for pid=674 comm="syz.0.141" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.361038][ T28] audit: type=1400 audit(1785054540.263:196): avc: denied { set_context_mgr } for pid=674 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 29.368865][ T675] binder: BINDER_SET_CONTEXT_MGR already set [ 29.386556][ T28] audit: type=1400 audit(1785054540.293:197): avc: denied { ioctl } for pid=678 comm="syz.1.142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16095 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.394004][ T681] loop4: detected capacity change from 0 to 1024 [ 29.412817][ T675] binder: 674:675 ioctl 4018620d 200000004a80 returned -16 [ 29.420408][ T681] EXT4-fs: Ignoring removed bh option [ 29.437122][ T681] EXT4-fs warning (device loop4): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 29.740190][ T691] Dead loop on virtual device ip6_vti0, fix it urgently! [ 29.743132][ T19] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.171522][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.201099][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 30.207284][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.218966][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.239972][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 30.260659][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.279836][ T19] usb 3-1: SerialNumber: syz [ 30.290080][ T19] usb 3-1: 0:2 : does not exist [ 30.306556][ T704] loop0: detected capacity change from 0 to 128 [ 30.411049][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 30.487531][ T6] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 30.502428][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 30.536017][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 30.547390][ T724] loop3: detected capacity change from 0 to 128 [ 30.582061][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.604969][ T19] usb 3-1: USB disconnect, device number 4 [ 30.634381][ T6] usb 5-1: config 0 descriptor?? [ 30.649497][ T724] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.672139][ T724] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.752133][ T287] EXT4-fs (loop3): unmounting filesystem. [ 30.852635][ T743] loop3: detected capacity change from 0 to 128 [ 30.903435][ T743] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.922250][ T743] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.433820][ T287] EXT4-fs (loop3): unmounting filesystem. [ 31.493135][ T6] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 31.500377][ T6] logitech 0003:046D:C298.0001: unknown main item tag 0x6 [ 31.511462][ T6] logitech 0003:046D:C298.0001: hidraw0: USB HID v5.40 Device [HID 046d:c298] on usb-dummy_hcd.4-1/input0 [ 31.522933][ T6] logitech 0003:046D:C298.0001: no inputs found [ 31.629332][ T6] usb 5-1: USB disconnect, device number 3 [ 31.662545][ T772] Zero length message leads to an empty skb [ 31.852867][ T779] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 32.788459][ T803] loop3: detected capacity change from 0 to 2048 [ 32.863102][ T809] loop0: detected capacity change from 0 to 128 [ 32.884824][ T812] dummy_hcd dummy_hcd.0: remove, state 4 [ 32.901338][ T812] usb usb1: USB disconnect, device number 1 [ 32.908200][ T803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.917340][ T809] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.924763][ T812] dummy_hcd dummy_hcd.0: stopped [ 32.929758][ T812] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 32.971656][ T809] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.015591][ T809] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.062577][ T809] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 33.063305][ T287] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 33.094520][ T809] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 33.114910][ T289] EXT4-fs (loop0): unmounting filesystem. [ 33.121047][ T287] EXT4-fs (loop3): unmounting filesystem. [ 33.196465][ T839] loop3: detected capacity change from 0 to 128 [ 33.225897][ T839] FAT-fs (loop3): bread failed, FSINFO block (sector = 18433) [ 33.243232][ T849] loop0: detected capacity change from 0 to 128 [ 33.317240][ T849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.340425][ T860] loop4: detected capacity change from 0 to 128 [ 33.347034][ T849] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.361930][ T860] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 33.391715][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 33.391727][ T28] audit: type=1400 audit(1785054544.323:209): avc: denied { mount } for pid=859 comm="syz.4.215" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.505241][ T308] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 33.521272][ T308] FAT-fs (loop4): Filesystem has been set read-only [ 33.527932][ T308] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 33.757874][ T28] audit: type=1400 audit(1785054544.433:210): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.930245][ T289] EXT4-fs (loop0): unmounting filesystem. [ 34.991088][ T908] Illegal XDP return value 4294967274 on prog (id 27) dev syz_tun, expect packet loss! [ 36.191732][ T28] audit: type=1400 audit(1785054547.123:211): avc: denied { read } for pid=929 comm="syz.2.242" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.272925][ T28] audit: type=1400 audit(1785054547.133:212): avc: denied { open } for pid=929 comm="syz.2.242" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.302574][ T933] usb usb7: usbfs: process 933 (syz.2.242) did not claim interface 0 before use [ 36.341571][ T933] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 36.371208][ T28] audit: type=1400 audit(1785054547.183:213): avc: denied { write } for pid=929 comm="syz.2.242" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.696579][ T28] audit: type=1400 audit(1785054547.623:214): avc: denied { create } for pid=943 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.726312][ T28] audit: type=1400 audit(1785054547.633:215): avc: denied { connect } for pid=943 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.737271][ T951] loop0: detected capacity change from 0 to 512 [ 36.763562][ T28] audit: type=1400 audit(1785054547.633:216): avc: denied { shutdown } for pid=943 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.805714][ T960] loop3: detected capacity change from 0 to 128 [ 36.873143][ T951] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.904137][ T960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.913287][ T960] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.924113][ T951] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.953756][ T28] audit: type=1400 audit(1785054547.883:217): avc: denied { read } for pid=959 comm="syz.3.254" path="/49/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.979448][ T951] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.011528][ T287] EXT4-fs (loop3): unmounting filesystem. [ 37.021743][ T951] EXT4-fs (loop0): 1 truncate cleaned up [ 37.048510][ T28] audit: type=1400 audit(1785054547.973:218): avc: denied { read } for pid=972 comm="syz.2.259" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.074081][ T951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.282527][ T988] loop2: detected capacity change from 0 to 256 [ 37.510516][ T998] loop2: detected capacity change from 0 to 2048 [ 37.597187][ T289] EXT4-fs (loop0): unmounting filesystem. [ 37.702054][ T998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.727728][ T1006] loop4: detected capacity change from 0 to 2048 [ 37.755511][ T998] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.848969][ T1014] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.268: bg 0: block 345: padding at end of block bitmap is not set [ 37.884416][ T1006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.946711][ T1014] EXT4-fs (loop2): Remounting filesystem read-only [ 37.997862][ T1028] loop0: detected capacity change from 0 to 1024 [ 38.187188][ T1028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.315549][ T291] EXT4-fs (loop2): unmounting filesystem. [ 38.347761][ T289] EXT4-fs (loop0): unmounting filesystem. [ 38.462242][ T290] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 38.514298][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 38.514312][ T28] audit: type=1400 audit(1785054549.443:221): avc: denied { setopt } for pid=1044 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.544225][ T1049] loop0: detected capacity change from 0 to 128 [ 38.550842][ T1049] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.574767][ T290] EXT4-fs (loop4): unmounting filesystem. [ 38.593651][ T1049] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.441872][ T1064] loop0: detected capacity change from 0 to 16 [ 39.477839][ T1064] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.488741][ T1064] erofs: (device loop0): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 39.541532][ T1064] erofs: (device loop0): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000 [ 40.105389][ T1104] loop2: detected capacity change from 0 to 2048 [ 40.157326][ T1104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.182007][ T1104] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #12: block 2: comm syz.2.310: lblock 0 mapped to illegal pblock 2 (length 1) [ 40.225264][ T291] EXT4-fs (loop2): unmounting filesystem. [ 40.551342][ T28] audit: type=1400 audit(1785054551.483:222): avc: denied { mount } for pid=1113 comm="syz.0.314" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 40.874713][ T1126] loop4: detected capacity change from 0 to 512 [ 40.954831][ T1126] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.982188][ T1126] EXT4-fs (loop4): 1 truncate cleaned up [ 40.987850][ T1126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.011924][ T28] audit: type=1400 audit(1785054551.943:223): avc: denied { append } for pid=1125 comm="syz.4.318" path="/37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.056739][ T28] audit: type=1400 audit(1785054551.943:224): avc: denied { map } for pid=1125 comm="syz.4.318" path="/37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.107669][ T290] EXT4-fs (loop4): unmounting filesystem. [ 41.118387][ T28] audit: type=1400 audit(1785054552.043:225): avc: denied { mmap_zero } for pid=1127 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 41.137970][ T28] audit: type=1400 audit(1785054552.043:226): avc: denied { create } for pid=1127 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 41.209009][ T28] audit: type=1400 audit(1785054552.133:227): avc: denied { sys_admin } for pid=1127 comm="syz.2.319" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 41.258617][ T1136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.307088][ T287] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 41.332940][ T287] EXT4-fs (loop3): unmounting filesystem. [ 41.335839][ T28] audit: type=1400 audit(1785054552.263:228): avc: denied { associate } for pid=1132 comm="syz.4.322" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.373808][ T1144] capability: warning: `syz.3.323' uses deprecated v2 capabilities in a way that may be insecure [ 41.398444][ T28] audit: type=1400 audit(1785054552.323:229): avc: denied { ioctl } for pid=1143 comm="syz.3.323" path="socket:[18151]" dev="sockfs" ino=18151 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.521145][ T28] audit: type=1400 audit(1785054552.393:230): avc: denied { map } for pid=1149 comm="syz.4.325" path="socket:[18159]" dev="sockfs" ino=18159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 41.561320][ T1153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.594093][ T1153] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.655663][ T1153] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 41.710539][ T1153] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.328: bg 0: block 248: padding at end of block bitmap is not set [ 41.891579][ T1153] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.328: Failed to acquire dquot type 1 [ 41.911504][ T1153] EXT4-fs (loop0): 1 truncate cleaned up [ 41.922207][ T1153] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.942807][ T1166] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.021786][ T287] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 42.111741][ T289] EXT4-fs (loop0): unmounting filesystem. [ 42.141325][ T1177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 42.143379][ T10] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 42.150675][ T1177] netlink: 64 bytes leftover after parsing attributes in process `syz.2.339'. [ 42.201858][ T287] EXT4-fs (loop3): unmounting filesystem. [ 42.210261][ T1183] set_capacity_and_notify: 4 callbacks suppressed [ 42.210274][ T1183] loop2: detected capacity change from 0 to 512 [ 42.255425][ T1183] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.399525][ T1183] EXT4-fs (loop2): 1 truncate cleaned up [ 42.405307][ T1183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 42.434584][ T1183] EXT4-fs error (device loop2): __ext4_iget:5104: inode #16: block 538: comm syz.2.343: invalid block [ 42.453331][ T291] EXT4-fs (loop2): unmounting filesystem. [ 42.467743][ T1197] loop3: detected capacity change from 0 to 2048 [ 42.492251][ T1197] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.542651][ T287] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 42.562844][ T287] EXT4-fs (loop3): unmounting filesystem. [ 43.702989][ T1217] device syzkaller0 entered promiscuous mode [ 44.012389][ T1232] loop2: detected capacity change from 0 to 128 [ 44.066768][ T1232] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.099955][ T1232] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.946213][ T1260] fuse: Bad value for 'fd' [ 44.952999][ T1259] loop0: detected capacity change from 0 to 2048 [ 45.212467][ T1259] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.221525][ T291] EXT4-fs (loop2): unmounting filesystem. [ 45.437188][ T1273] loop2: detected capacity change from 0 to 128 [ 45.508880][ T1273] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.558200][ T1273] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.633294][ T291] EXT4-fs (loop2): unmounting filesystem. [ 45.814032][ T1292] loop2: detected capacity change from 0 to 128 [ 45.854415][ T1292] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.874770][ T1292] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.906801][ T314] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.991987][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 45.992000][ T28] audit: type=1400 audit(1785054556.923:233): avc: denied { create } for pid=1291 comm="syz.2.385" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 46.047977][ T28] audit: type=1400 audit(1785054556.973:234): avc: denied { create } for pid=1291 comm="syz.2.385" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.090216][ T28] audit: type=1400 audit(1785054556.973:235): avc: denied { rename } for pid=1291 comm="syz.2.385" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.090418][ T291] EXT4-fs (loop2): unmounting filesystem. [ 46.161012][ T314] usb 5-1: Using ep0 maxpacket: 8 [ 46.167108][ T314] usb 5-1: config 1 has an invalid interface number: 71 but max is 0 [ 46.191346][ T314] usb 5-1: config 1 has no interface number 0 [ 46.197447][ T314] usb 5-1: config 1 interface 71 has no altsetting 0 [ 46.207171][ T314] usb 5-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=f4.7a [ 46.231067][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.239061][ T314] usb 5-1: Product: syz [ 46.251020][ T314] usb 5-1: Manufacturer: syz [ 46.255624][ T314] usb 5-1: SerialNumber: syz [ 46.476839][ T314] usb 5-1: USB disconnect, device number 4 [ 46.781035][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 46.971032][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 46.995584][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 47.009592][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 47.019602][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 47.029746][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 47.052430][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 47.061891][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.127405][ T24] usb 3-1: config 0 descriptor?? [ 47.141147][ T1304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 47.434325][ T1322] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 47.507657][ T1324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'. [ 47.583492][ T24] usb 3-1: USB disconnect, device number 5 [ 47.696448][ T28] audit: type=1400 audit(1785054558.623:236): avc: denied { watch } for pid=1331 comm="syz.1.403" path="/156" dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.752973][ T1336] fuse: Bad value for 'fd' [ 47.758789][ T28] audit: type=1400 audit(1785054558.683:237): avc: denied { remount } for pid=1335 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.047572][ T1259] 9pnet: bogus RREAD count (2 > 1) [ 48.071843][ T289] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 48.139282][ T289] EXT4-fs (loop0): unmounting filesystem. [ 48.185509][ T28] audit: type=1400 audit(1785054559.113:238): avc: denied { read write } for pid=1352 comm="syz.0.410" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 48.208708][ T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 48.236378][ T28] audit: type=1400 audit(1785054559.143:239): avc: denied { open } for pid=1352 comm="syz.0.410" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 48.413272][ T24] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 48.430789][ T24] usb 5-1: config 4 has no interface number 0 [ 48.438033][ T1359] loop0: detected capacity change from 0 to 128 [ 48.451123][ T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.485141][ T1359] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.501004][ T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.511334][ T1359] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.531048][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 48.561327][ T1358] EXT4-fs (loop0): unmounting filesystem. [ 48.567110][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.586604][ T24] hub 5-1:4.128: USB hub found [ 49.161700][ T24] hub 5-1:4.128: 2 ports detected [ 49.166777][ T24] hub 5-1:4.128: Using single TT (err -22) [ 49.199994][ T24] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 49.232297][ T24] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 49.281561][ T24] usb 5-1: USB disconnect, device number 5 [ 49.490355][ T1383] loop2: detected capacity change from 0 to 128 [ 49.587999][ T1383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.617254][ T1383] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.849631][ T291] EXT4-fs (loop2): unmounting filesystem. [ 50.891069][ T314] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 51.082358][ T314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.101360][ T314] usb 3-1: not running at top speed; connect to a high speed hub [ 51.122357][ T314] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 51.140997][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.159103][ T314] usb 3-1: Product: syz [ 51.163553][ T314] usb 3-1: Manufacturer: syz [ 51.168142][ T314] usb 3-1: SerialNumber: syz [ 51.388053][ T314] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 51.402038][ T314] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 51.440285][ T314] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 51.487259][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.504532][ T314] usb 3-1: USB disconnect, device number 6 [ 51.641508][ T28] audit: type=1400 audit(1785054562.573:240): avc: denied { map } for pid=1473 comm="syz.1.462" path="socket:[19754]" dev="sockfs" ino=19754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.864956][ T28] audit: type=1400 audit(1785054562.593:241): avc: denied { read } for pid=1473 comm="syz.1.462" path="socket:[19754]" dev="sockfs" ino=19754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.193799][ T1494] loop2: detected capacity change from 0 to 512 [ 52.262167][ T1494] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 52.271157][ T1494] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.320761][ T291] EXT4-fs (loop2): unmounting filesystem. [ 52.354739][ T1500] device batadv_slave_0 entered promiscuous mode [ 52.371353][ T1500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 52.691019][ T60] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 52.745353][ T28] audit: type=1400 audit(1785054563.673:242): avc: denied { mounton } for pid=1504 comm="syz.0.476" path="/92/file0" dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 52.881053][ T60] usb 3-1: Using ep0 maxpacket: 8 [ 52.899413][ T60] usb 3-1: unable to get BOS descriptor or descriptor too short [ 52.913869][ T60] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 52.927971][ T60] usb 3-1: can't read configurations, error -71 [ 55.862428][ T1621] 9pnet_fd: Insufficient options for proto=fd [ 56.057664][ T28] audit: type=1326 audit(1785054566.983:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1627 comm="syz.0.531" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6b739de99 code=0x0 [ 56.516368][ T297] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 57.041044][ T297] usb 3-1: Using ep0 maxpacket: 16 [ 57.048914][ T297] usb 3-1: config 90 has an invalid interface number: 234 but max is 0 [ 57.071025][ T297] usb 3-1: config 90 has no interface number 0 [ 57.079300][ T297] usb 3-1: config 90 interface 234 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 32 [ 57.100654][ T297] usb 3-1: config 90 interface 234 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 57.130285][ T297] usb 3-1: config 90 interface 234 altsetting 2 endpoint 0xE has an invalid bInterval 74, changing to 7 [ 57.162346][ T297] usb 3-1: config 90 interface 234 has no altsetting 0 [ 57.361252][ T1664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 57.402694][ T1664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.546'. [ 57.582724][ T297] usb 3-1: New USB device found, idVendor=1199, idProduct=683a, bcdDevice=77.72 [ 57.609121][ T1685] cgroup: noprefix used incorrectly [ 57.661038][ T28] audit: type=1400 audit(1785054568.533:244): avc: denied { mounton } for pid=1684 comm="syz.1.556" path="/237/file0" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.856192][ T297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.007819][ T297] usb 3-1: Product: syz [ 58.012151][ T297] usb 3-1: Manufacturer: syz [ 58.016745][ T297] usb 3-1: SerialNumber: syz [ 58.616220][ T28] audit: type=1400 audit(1785054569.543:245): avc: denied { create } for pid=1712 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.696338][ T28] audit: type=1400 audit(1785054569.573:246): avc: denied { connect } for pid=1712 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.716918][ T1720] loop2: detected capacity change from 0 to 128 [ 58.781789][ T1720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.811806][ T1720] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.825472][ T28] audit: type=1400 audit(1785054569.573:247): avc: denied { write } for pid=1712 comm="syz.2.567" laddr=fe80::fccc:c2ff:fe9f:2efd lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.827060][ T297] usb 3-1: can't set config #90, error -71 [ 58.858531][ T297] usb 3-1: USB disconnect, device number 9 [ 58.953320][ T28] audit: type=1400 audit(1785054569.583:248): avc: denied { setopt } for pid=1712 comm="syz.2.567" laddr=fe80::fccc:c2ff:fe9f:2efd lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.009065][ T291] EXT4-fs (loop2): unmounting filesystem. [ 59.263433][ T28] audit: type=1400 audit(1785054570.193:249): avc: denied { mounton } for pid=1741 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 59.333431][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.417890][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.441012][ T1741] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.451519][ T1741] device bridge_slave_0 entered promiscuous mode [ 59.468685][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.488538][ T1741] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.499004][ T1741] device bridge_slave_1 entered promiscuous mode [ 59.617925][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.625016][ T1741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.632300][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.639324][ T1741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.725973][ T1754] loop2: detected capacity change from 0 to 4096 [ 59.769319][ T1754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.819374][ T291] EXT4-fs (loop2): unmounting filesystem. [ 60.191789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.257069][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.352104][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.387702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.414285][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.421378][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.454605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.471731][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.478805][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.506815][ T10] device bridge_slave_1 left promiscuous mode [ 60.514125][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.532286][ T10] device bridge_slave_0 left promiscuous mode [ 60.544909][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.562002][ T10] device veth1_macvtap left promiscuous mode [ 60.575010][ T10] device veth0_vlan left promiscuous mode [ 60.828297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.840782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.868125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.896368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.031043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.511358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.552118][ T1741] device veth0_vlan entered promiscuous mode [ 61.570688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.601360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.627012][ T1741] device veth1_macvtap entered promiscuous mode [ 61.642595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.650416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.671237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.681794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.701295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.749304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.761791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.781108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.790417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.823396][ T28] audit: type=1400 audit(1785054572.753:250): avc: denied { mounton } for pid=1741 comm="syz-executor" path="/root/syzkaller.j3GDms/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.844350][ T1797] netlink: 2 bytes leftover after parsing attributes in process `syz.0.599'. [ 62.391215][ T28] audit: type=1400 audit(1785054572.773:251): avc: denied { nlmsg_read } for pid=1796 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.452793][ T28] audit: type=1400 audit(1785054572.823:252): avc: denied { bind } for pid=1798 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.749804][ T1844] loop5: detected capacity change from 0 to 128 [ 65.418299][ T28] audit: type=1400 audit(1785054576.343:253): avc: denied { connect } for pid=1875 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.453963][ T1880] loop5: detected capacity change from 0 to 128 [ 65.618872][ T1880] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 65.627831][ T1880] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.888367][ T1912] netlink: 180 bytes leftover after parsing attributes in process `syz.1.643'. [ 65.921403][ T1912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.643'. [ 65.950559][ T1912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.643'. [ 65.961657][ T1906] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.968681][ T1906] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.001386][ T1906] device bridge_slave_0 entered promiscuous mode [ 66.021670][ T1906] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.099764][ T28] audit: type=1400 audit(1785054577.023:254): avc: denied { create } for pid=1919 comm="syz.1.645" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.121223][ T1906] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.128685][ T1906] device bridge_slave_1 entered promiscuous mode [ 66.135816][ T1920] fuse: Bad value for 'fd' [ 66.160824][ T28] audit: type=1400 audit(1785054577.063:255): avc: denied { mounton } for pid=1919 comm="syz.1.645" path="/265/file0" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.204064][ T28] audit: type=1400 audit(1785054577.073:256): avc: denied { read write } for pid=1919 comm="syz.1.645" name="file0" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.251609][ T28] audit: type=1400 audit(1785054577.083:257): avc: denied { open } for pid=1919 comm="syz.1.645" path="/265/file0" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.295691][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.303436][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.310719][ T28] audit: type=1400 audit(1785054577.083:258): avc: denied { map } for pid=1919 comm="syz.1.645" path="/265/file0" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.341641][ T319] device bridge_slave_1 left promiscuous mode [ 66.347989][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.355646][ T319] device bridge_slave_0 left promiscuous mode [ 66.361931][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.369961][ T319] device veth1_macvtap left promiscuous mode [ 66.376764][ T319] device veth0_vlan left promiscuous mode [ 66.651912][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.660362][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.668974][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.676027][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.688639][ T28] audit: type=1400 audit(1785054577.613:259): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.718954][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.734393][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.751235][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.758296][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.784434][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.798284][ T28] audit: type=1400 audit(1785054577.723:260): avc: denied { name_bind } for pid=1929 comm="syz.1.649" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 66.819767][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.836123][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.844770][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.854036][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.861908][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.869321][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.877980][ T1906] device veth0_vlan entered promiscuous mode [ 66.890296][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.900007][ T1906] device veth1_macvtap entered promiscuous mode [ 66.910602][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.925323][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.958836][ T1933] loop6: detected capacity change from 0 to 512 [ 66.981407][ T1933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.142526][ T1933] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 67.171745][ T1933] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.225231][ T1906] EXT4-fs (loop6): unmounting filesystem. [ 67.695387][ T1741] EXT4-fs (loop5): unmounting filesystem. [ 67.718351][ T1944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.652'. [ 67.760545][ T1944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.838774][ T1955] loop6: detected capacity change from 0 to 512 [ 67.862143][ T1955] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.658: inode #1: comm syz.6.658: iget: illegal inode # [ 67.887287][ T1955] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.658: error while reading EA inode 1 err=-117 [ 67.903084][ T1955] EXT4-fs (loop6): 1 orphan inode deleted [ 67.908847][ T1955] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 67.931391][ T1906] EXT4-fs (loop6): unmounting filesystem. [ 68.377699][ T1988] loop2: detected capacity change from 0 to 1024 [ 68.418736][ T1988] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.479422][ T1988] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.508243][ T1988] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 68.529239][ T291] EXT4-fs (loop2): unmounting filesystem. [ 69.187959][ T2007] loop2: detected capacity change from 0 to 16 [ 69.227728][ T2011] loop6: detected capacity change from 0 to 128 [ 69.249242][ T2011] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 69.261254][ T2011] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.278369][ T2007] erofs: (device loop2): mounted with root inode @ nid 36. [ 69.330652][ T28] audit: type=1400 audit(1785054580.253:261): avc: denied { read } for pid=2016 comm="syz.5.681" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.371447][ T2011] syz.6.676 (pid 2011) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 69.400233][ T28] audit: type=1400 audit(1785054580.253:262): avc: denied { open } for pid=2016 comm="syz.5.681" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.465972][ T1906] EXT4-fs (loop6): unmounting filesystem. [ 69.498816][ T2040] netlink: 24 bytes leftover after parsing attributes in process `syz.5.691'. [ 69.520182][ T2045] netlink: 9 bytes leftover after parsing attributes in process `syz.1.693'. [ 69.528409][ T2007] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 69.541175][ T2045] device gretap0 entered promiscuous mode [ 69.553039][ T2007] syz.2.679: attempt to access beyond end of device [ 69.553039][ T2007] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 69.554623][ T2045] netlink: 5 bytes leftover after parsing attributes in process `syz.1.693'. [ 69.575147][ T2049] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 69.577168][ T2045] 0ªî{X¹¦: renamed from gretap0 [ 69.587592][ T2049] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 69.587607][ T2049] CPU: 0 PID: 2049 Comm: syz.6.695 Not tainted syzkaller #0 [ 69.587625][ T2049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 69.587634][ T2049] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 69.593970][ T2007] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 69.600966][ T2049] Code: 94 c0 4d 8d b4 c6 e0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5e 8f 6a fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 45 8f 6a fe 41 be 68 11 00 00 4d [ 69.600985][ T2049] RSP: 0018:ffffc90000fe7738 EFLAGS: 00010246 [ 69.601001][ T2049] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 69.608772][ T2007] syz.2.679: attempt to access beyond end of device [ 69.608772][ T2007] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 69.618290][ T2049] RDX: ffff88811ed20000 RSI: 0000000000000003 RDI: 0000000000000005 [ 69.618306][ T2049] RBP: ffffc90000fe7758 R08: ffff8881001b0367 R09: 1ffff1102003606c [ 69.618319][ T2049] R10: 0000000000000000 R11: ffffed102003606d R12: dffffc0000000000 [ 69.618332][ T2049] R13: ffff88811c252468 R14: ffff88810defd170 R15: 0000000000000000 [ 69.624826][ T2007] syz.2.679: attempt to access beyond end of device [ 69.624826][ T2007] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 69.633187][ T2049] FS: 00007fd86eac06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 69.633205][ T2049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.633219][ T2049] CR2: 00007fd86ea9f000 CR3: 000000011023e000 CR4: 00000000003506b0 [ 69.654018][ T2007] syz.2.679: attempt to access beyond end of device [ 69.654018][ T2007] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 69.658850][ T2049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.658865][ T2049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.778405][ T2049] Call Trace: [ 69.781668][ T2049] [ 69.784586][ T2049] ? __cfi_dummy_set_selfpowered+0x10/0x10 [ 69.790384][ T2049] usb_gadget_set_selfpowered+0x7a/0x190 [ 69.796002][ T2049] composite_dev_prepare+0x2e7/0x310 [ 69.801278][ T2049] configfs_composite_bind+0xb4/0x13b0 [ 69.806719][ T2049] ? mutex_unlock+0x8f/0x230 [ 69.811300][ T2049] ? __cfi_mutex_unlock+0x10/0x10 [ 69.816307][ T2049] ? __kasan_check_write+0x14/0x20 [ 69.821400][ T2049] ? kernfs_put+0x44f/0x480 [ 69.825882][ T2049] ? __cfi_configfs_composite_bind+0x10/0x10 [ 69.831844][ T2049] gadget_bind_driver+0x2eb/0x990 [ 69.836893][ T2049] ? sysfs_create_link+0x68/0x80 [ 69.841823][ T2049] ? __cfi_gadget_bind_driver+0x10/0x10 [ 69.847355][ T2049] really_probe+0x2d7/0x9a0 [ 69.851843][ T2049] ? __kasan_check_write+0x14/0x20 [ 69.856940][ T2049] __driver_probe_device+0x193/0x270 [ 69.862207][ T2049] driver_probe_device+0x54/0x3e0 [ 69.867217][ T2049] __driver_attach+0x41a/0x5d0 [ 69.871963][ T2049] bus_for_each_dev+0x18c/0x200 [ 69.876797][ T2049] ? __cfi__raw_spin_lock+0x10/0x10 [ 69.881979][ T2049] ? __cfi___driver_attach+0x10/0x10 [ 69.887245][ T2049] ? __cfi_bus_for_each_dev+0x10/0x10 [ 69.892605][ T2049] ? _raw_spin_unlock+0x4c/0x70 [ 69.897437][ T2049] ? klist_add_tail+0x1e5/0x220 [ 69.902273][ T2049] driver_attach+0x42/0x50 [ 69.906671][ T2049] bus_add_driver+0x322/0x560 [ 69.911335][ T2049] driver_register+0x335/0x440 [ 69.916085][ T2049] usb_gadget_register_driver_owner+0xf8/0x270 [ 69.922225][ T2049] gadget_dev_desc_UDC_store+0x220/0x340 [ 69.927838][ T2049] configfs_write_iter+0x323/0x410 [ 69.932934][ T2049] ? __cfi_gadget_dev_desc_UDC_store+0x10/0x10 [ 69.939070][ T2049] vfs_write+0x5ef/0xd00 [ 69.943294][ T2049] ? __cfi_vfs_write+0x10/0x10 [ 69.948037][ T2049] ? __cfi_mutex_lock+0x10/0x10 [ 69.952875][ T2049] ? __fdget_pos+0x2cd/0x380 [ 69.957444][ T2049] ? ksys_write+0x70/0x260 [ 69.961840][ T2049] ksys_write+0x14a/0x260 [ 69.966148][ T2049] ? __cfi_ksys_write+0x10/0x10 [ 69.970980][ T2049] ? fpregs_restore_userregs+0x128/0x260 [ 69.976594][ T2049] __x64_sys_write+0x7b/0x90 [ 69.981163][ T2049] x64_sys_call+0x27b/0x9a0 [ 69.985653][ T2049] do_syscall_64+0x4c/0xa0 [ 69.990051][ T2049] ? clear_bhb_loop+0x30/0x80 [ 69.994706][ T2049] ? clear_bhb_loop+0x30/0x80 [ 69.999364][ T2049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.005242][ T2049] RIP: 0033:0x7fd86db9de99 [ 70.009648][ T2049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.029239][ T2049] RSP: 002b:00007fd86eac0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.037642][ T2049] RAX: ffffffffffffffda RBX: 00007fd86de25fa0 RCX: 00007fd86db9de99 [ 70.045597][ T2049] RDX: 000000000000000c RSI: 0000200000000600 RDI: 0000000000000005 [ 70.053548][ T2049] RBP: 00007fd86dc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 70.061500][ T2049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.069452][ T2049] R13: 00007fd86de26038 R14: 00007fd86de25fa0 R15: 00007fffa8af5928 [ 70.077408][ T2049] [ 70.080419][ T2049] Modules linked in: [ 70.085405][ T2045] device 30ªî{X¹¦ left promiscuous mode [ 70.091356][ T2049] ---[ end trace 0000000000000000 ]--- [ 70.096918][ T2049] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 70.103053][ T2049] Code: 94 c0 4d 8d b4 c6 e0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5e 8f 6a fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 45 8f 6a fe 41 be 68 11 00 00 4d [ 70.123418][ T2045] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 70.139688][ T2049] RSP: 0018:ffffc90000fe7738 EFLAGS: 00010246 [ 70.145979][ T2049] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 70.166250][ T2049] RDX: ffff88811ed20000 RSI: 0000000000000003 RDI: 0000000000000005 [ 70.174300][ T2049] RBP: ffffc90000fe7758 R08: ffff8881001b0367 R09: 1ffff1102003606c [ 70.182327][ T2049] R10: 0000000000000000 R11: ffffed102003606d R12: dffffc0000000000 [ 70.190336][ T2049] R13: ffff88811c252468 R14: ffff88810defd170 R15: 0000000000000000 [ 70.198634][ T2049] FS: 00007fd86eac06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 70.211230][ T2049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.224298][ T2049] CR2: 00007f0d17c25fac CR3: 000000011023e000 CR4: 00000000003506a0 [ 70.239362][ T2049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.247628][ T2049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.255794][ T2049] Kernel panic - not syncing: Fatal exception [ 70.262070][ T2049] Kernel Offset: disabled [ 70.266382][ T2049] Rebooting in 86400 seconds..