last executing test programs: 3.024632303s ago: executing program 1 (id=176): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) prlimit64(0x0, 0x6, &(0x7f00000002c0), 0x0) syz_clone3(&(0x7f0000000440)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.982854877s ago: executing program 1 (id=181): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x3, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 2.784558567s ago: executing program 1 (id=187): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x2, @mcast2, 0xa}, 0x1c) 2.699275296s ago: executing program 3 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) writev(r0, &(0x7f0000001c00)=[{&(0x7f0000000280)="11f01bf6", 0x4}], 0x1) 2.698995846s ago: executing program 1 (id=192): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 2.698714016s ago: executing program 3 (id=194): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c099}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.698521676s ago: executing program 1 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MODE={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 2.538702522s ago: executing program 3 (id=196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x4, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x2}, 0x8, 0x10, &(0x7f0000001b80), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000001c40)="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", 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000001d40), &(0x7f0000001d80)}, 0x2c) 2.538426902s ago: executing program 1 (id=197): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x3a) 2.414286105s ago: executing program 3 (id=198): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000006c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 2.413942345s ago: executing program 3 (id=200): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000002c00)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x18, 0x6, "14f11181ee3e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 374.510942ms ago: executing program 2 (id=271): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x31) 310.537379ms ago: executing program 2 (id=272): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0}, 0x20) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 310.298079ms ago: executing program 4 (id=273): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/187, 0xbb}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xe) 255.117174ms ago: executing program 4 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x9, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 210.304779ms ago: executing program 4 (id=277): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x50f, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xa0c42, 0x100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000780)={0xc, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0xfffffffffe000001}) 210.166359ms ago: executing program 0 (id=278): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 195.477151ms ago: executing program 0 (id=279): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) lseek(r0, 0x7ffffffffffffffe, 0x1) write$cgroup_int(r0, &(0x7f0000000000)=0x5, 0x12) 170.130593ms ago: executing program 2 (id=280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) 169.970663ms ago: executing program 0 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./debug\x00', &(0x7f0000001540)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 76.035013ms ago: executing program 0 (id=282): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) 75.799433ms ago: executing program 2 (id=283): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) 75.620393ms ago: executing program 4 (id=284): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f0000000180)={0x11, 0x18, r1, 0x1, 0xd6}, 0x14) 75.403103ms ago: executing program 3 (id=285): capset(&(0x7f0000000240)={0x20071026}, &(0x7f00000002c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x90, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 50.260495ms ago: executing program 2 (id=286): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000004cc0)={'tunl0\x00', &(0x7f0000004d00)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000004d40)={'syztnl0\x00', &(0x7f0000004d80)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 49.973485ms ago: executing program 0 (id=287): r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 437.95µs ago: executing program 4 (id=288): r0 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\xff#\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\x03\x00\x00\x00\x00\x00\x00\x00?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i\x00'/255, 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write(r0, &(0x7f0000000180)='T', 0x1) 223.28µs ago: executing program 2 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)="306663353a3132373a636c49f47541a80aa2ea08657baf4077ad89a9c1940a5a784e3b1667b8ef7f6d", 0x29) 127.52µs ago: executing program 0 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x40000080}]}) 0s ago: executing program 4 (id=291): capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000540)={0x200000, 0x200000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 22.839853][ T30] audit: type=1400 audit(1794500760.093:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.842959][ T277] cgroup: Unknown subsys name 'net' [ 22.862614][ T30] audit: type=1400 audit(1794500760.093:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.890040][ T30] audit: type=1400 audit(1794500760.123:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.890450][ T277] cgroup: Unknown subsys name 'devices' [ 23.036276][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.042034][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.179856][ T30] audit: type=1400 audit(1794500760.433:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.203425][ T30] audit: type=1400 audit(1794500760.433:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.228140][ T30] audit: type=1400 audit(1794500760.433:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.255652][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.264373][ T30] audit: type=1400 audit(1794500760.513:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.289825][ T30] audit: type=1400 audit(1794500760.513:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.332798][ T30] audit: type=1400 audit(1794500760.583:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.358371][ T30] audit: type=1400 audit(1794500760.583:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.358426][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.045880][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.052951][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.060629][ T285] device bridge_slave_0 entered promiscuous mode [ 24.067714][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.074791][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.082209][ T285] device bridge_slave_1 entered promiscuous mode [ 24.127868][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.134941][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.142214][ T286] device bridge_slave_0 entered promiscuous mode [ 24.151283][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.158376][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.165800][ T286] device bridge_slave_1 entered promiscuous mode [ 24.184076][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.191147][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.198551][ T287] device bridge_slave_0 entered promiscuous mode [ 24.222812][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.229866][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.237228][ T287] device bridge_slave_1 entered promiscuous mode [ 24.270658][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.277925][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.285320][ T289] device bridge_slave_0 entered promiscuous mode [ 24.293273][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.300361][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.307790][ T289] device bridge_slave_1 entered promiscuous mode [ 24.371579][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.378683][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.386137][ T288] device bridge_slave_0 entered promiscuous mode [ 24.405289][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.412336][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.419683][ T288] device bridge_slave_1 entered promiscuous mode [ 24.506507][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.513591][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.520922][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.527972][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.536793][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.543836][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.551119][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.558180][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.570773][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.577824][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.585090][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.592109][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.621254][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.628315][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.635614][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.642637][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.653737][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.660784][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.668046][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.675087][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.687048][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.694262][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.701839][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.709348][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.716584][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.723740][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.730961][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.738195][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.745703][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.752967][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.760640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.768066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.806845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.815382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.822838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.831092][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.838135][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.845629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.853755][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.860813][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.868198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.876171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.883543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.891729][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.898757][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.906176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.914297][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.921343][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.935178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.943075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.951478][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.958533][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.965911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.974092][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.981223][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.989459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.997602][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.004789][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.016726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.035072][ T285] device veth0_vlan entered promiscuous mode [ 25.042365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.050603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.061740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.069791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.077739][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.085771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.093620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.102236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.110602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.118504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.126550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.134891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.143007][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.150070][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.157457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.164948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.185163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.193319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.200983][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.208567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.216893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.225904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.234141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.242326][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.249363][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.256771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.265079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.273156][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.280202][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.287671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.295753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.303629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.311672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.325476][ T288] device veth0_vlan entered promiscuous mode [ 25.344955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.353042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.361233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.369697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.378368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.386582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.394810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.402768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.410920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.419243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.427982][ T285] device veth1_macvtap entered promiscuous mode [ 25.438852][ T289] device veth0_vlan entered promiscuous mode [ 25.447998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.456220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.463757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.471676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.479757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.487256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.499831][ T286] device veth0_vlan entered promiscuous mode [ 25.509161][ T287] device veth0_vlan entered promiscuous mode [ 25.519351][ T289] device veth1_macvtap entered promiscuous mode [ 25.528987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.538747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.547112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.555515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.563289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.571509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.579416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.587361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.595663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.603931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.612324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.620770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.628273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.635794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.643186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.651263][ T288] device veth1_macvtap entered promiscuous mode [ 25.665036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.673121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.681350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.691031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.701952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.710391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.722153][ T287] device veth1_macvtap entered promiscuous mode [ 25.733974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.742332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.750639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.751295][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 25.759962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.775723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.783966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.801878][ T286] device veth1_macvtap entered promiscuous mode [ 25.811024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.818897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.827544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.835944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.844194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.862540][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.872605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.881000][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.889333][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.935589][ T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.096968][ T320] loop0: detected capacity change from 0 to 40427 [ 26.114007][ T320] F2FS-fs (loop0): invalid crc value [ 26.125164][ T320] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.159173][ T320] F2FS-fs (loop0): Start checkpoint disabled! [ 26.166095][ T320] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 26.191742][ T320] attempt to access beyond end of device [ 26.191742][ T320] loop0: rw=2049, want=45104, limit=40427 [ 26.214109][ T320] attempt to access beyond end of device [ 26.214109][ T320] loop0: rw=0, want=45104, limit=40427 [ 26.253766][ T10] attempt to access beyond end of device [ 26.253766][ T10] loop0: rw=2049, want=40984, limit=40427 [ 26.776870][ T317] syz.3.4 (317) used greatest stack depth: 21864 bytes left [ 26.791448][ T366] capability: warning: `syz.0.26' uses deprecated v2 capabilities in a way that may be insecure [ 26.923809][ T380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.33'. [ 26.943152][ T380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.33'. [ 26.972745][ T380] Zero length message leads to an empty skb [ 27.121217][ T376] loop4: detected capacity change from 0 to 40427 [ 27.144182][ T376] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 27.171533][ T376] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 27.194612][ T376] F2FS-fs (loop4): invalid crc value [ 27.210441][ T376] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 27.246700][ T404] SELinux: ebitmap: truncated map [ 27.252177][ T404] SELinux: failed to load policy [ 27.265086][ T376] F2FS-fs (loop4): Found nat_bits in checkpoint [ 27.355065][ T408] loop2: detected capacity change from 0 to 49152 [ 27.361822][ T376] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 27.376046][ T376] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 27.392044][ T419] overlayfs: unrecognized mount option "addr=127.0.pF÷nŒ8 \" or missing value [ 27.437718][ T408] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 27.468555][ T376] attempt to access beyond end of device [ 27.468555][ T376] loop4: rw=2049, want=53256, limit=40427 [ 27.489003][ T376] attempt to access beyond end of device [ 27.489003][ T376] loop4: rw=2049, want=53320, limit=40427 [ 27.500828][ T376] attempt to access beyond end of device [ 27.500828][ T376] loop4: rw=2049, want=53360, limit=40427 [ 27.512957][ T376] attempt to access beyond end of device [ 27.512957][ T376] loop4: rw=2049, want=53408, limit=40427 [ 27.525045][ T376] attempt to access beyond end of device [ 27.525045][ T376] loop4: rw=2049, want=53456, limit=40427 [ 27.537426][ T376] attempt to access beyond end of device [ 27.537426][ T376] loop4: rw=2049, want=53512, limit=40427 [ 27.557510][ T408] EXT4-fs (loop2): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: journalled. [ 27.574783][ T376] attempt to access beyond end of device [ 27.574783][ T376] loop4: rw=2049, want=53528, limit=40427 [ 27.664109][ T368] loop3: detected capacity change from 0 to 131072 [ 27.745476][ T368] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 27.763515][ T368] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 27.792773][ T368] F2FS-fs (loop3): invalid crc value [ 27.811538][ T443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.59'. [ 27.823234][ T368] F2FS-fs (loop3): Found nat_bits in checkpoint [ 27.895050][ T368] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 27.902139][ T368] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 28.025223][ T467] loop1: detected capacity change from 0 to 33280 [ 28.034765][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 28.034776][ T30] audit: type=1400 audit(1794500765.293:128): avc: denied { perfmon } for pid=427 comm="syz.0.54" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.056685][ T368] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 28.071976][ T467] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.085290][ T467] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 28.096428][ T368] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 28.106069][ T30] audit: type=1400 audit(1794500765.293:129): avc: denied { ioctl } for pid=367 comm="syz.3.27" path="/2/file1/file1" dev="loop3" ino=7 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.140577][ T467] EXT4-fs (loop1): 1 truncate cleaned up [ 28.146398][ T467] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,mb_optimize_scan=0x0000000000000000,bsddf,nombcache,jqfmt=vfsold,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 28.184852][ T30] audit: type=1400 audit(1794500765.323:130): avc: denied { prog_run } for pid=427 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.233150][ T30] audit: type=1400 audit(1794500765.473:131): avc: denied { setattr } for pid=466 comm="syz.1.69" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.263772][ T473] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 28.275898][ T30] audit: type=1400 audit(1794500765.533:132): avc: denied { relabelto } for pid=472 comm="syz.0.71" name="file0" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 28.309253][ T30] audit: type=1400 audit(1794500765.533:133): avc: denied { associate } for pid=472 comm="syz.0.71" name="file0" dev="cgroup2" ino=169 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 28.349462][ T30] audit: type=1400 audit(1794500765.603:134): avc: denied { mount } for pid=474 comm="syz.1.72" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.398066][ T30] audit: type=1400 audit(1794500765.633:135): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.505127][ T30] audit: type=1400 audit(1794500765.763:136): avc: denied { write } for pid=487 comm="syz.1.79" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 28.545283][ T30] audit: type=1400 audit(1794500765.783:137): avc: denied { open } for pid=487 comm="syz.1.79" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 28.810270][ T510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.88'. [ 28.830855][ T507] loop1: detected capacity change from 0 to 34816 [ 28.893359][ T507] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.983540][ T463] loop2: detected capacity change from 0 to 131072 [ 28.995643][ T463] F2FS-fs (loop2): invalid crc value [ 29.044900][ T463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 29.084837][ T463] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 29.091836][ T463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 29.122097][ T534] loop0: detected capacity change from 0 to 49152 [ 29.136348][ T546] loop3: detected capacity change from 0 to 33792 [ 29.200581][ T546] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.255609][ T534] EXT4-fs (loop0): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none. [ 29.335222][ T546] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 29.752077][ T578] loop1: detected capacity change from 0 to 32896 [ 29.885614][ T578] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.904767][ T578] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.979848][ T586] EXT4-fs (loop2): Ignoring removed bh option [ 29.981006][ T586] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 30.023672][ T586] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 30.038867][ T586] EXT4-fs error (device loop2): ext4_get_journal_inode:5178: inode #5: comm syz.2.117: unexpected bad inode w/o EXT4_IGET_BAD [ 30.056513][ T586] EXT4-fs (loop2): no journal found [ 30.073458][ T543] syz.3.102 (543) used greatest stack depth: 21544 bytes left [ 30.235461][ T610] ip_tables: iptables: counters copy to user failed while replacing table [ 30.352460][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.374553][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.392109][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.410484][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.438738][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.465043][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.474672][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.500242][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.518291][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.530775][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.539054][ T39] hid-generic 0000:0000:0000.0001: hidraw0: HID vffffff.fe Device [syz0] on syz0 [ 30.569371][ T635] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 30.589656][ T635] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.620295][ T639] fido_id[639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.638626][ T635] syz.0.139 (pid 635) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 30.762117][ T620] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 30.776291][ T620] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 30.800039][ T620] F2FS-fs (loop4): invalid crc value [ 30.811677][ T641] syz.2.141 (641) used greatest stack depth: 20840 bytes left [ 30.826609][ T620] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.875193][ T620] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 30.882309][ T620] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 30.892395][ T645] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 30.910873][ T645] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 30.924659][ T645] F2FS-fs (loop3): invalid crc value [ 30.944220][ T620] VFS:Filesystem freeze failed [ 30.949967][ T645] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.994251][ T645] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 31.001496][ T645] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 31.347998][ T686] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 31.353925][ T686] syzkaller0: linktype set to 823 [ 31.401153][ T664] set_capacity_and_notify: 5 callbacks suppressed [ 31.401165][ T664] loop2: detected capacity change from 0 to 131072 [ 31.423864][ T664] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 31.441847][ T664] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 31.450708][ T664] F2FS-fs (loop2): invalid crc value [ 31.469097][ T694] loop4: detected capacity change from 0 to 8192 [ 31.476216][ T664] F2FS-fs (loop2): Found nat_bits in checkpoint [ 31.523637][ T664] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 31.531105][ T664] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 31.532800][ T710] loop1: detected capacity change from 0 to 256 [ 31.543594][ T682] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input4 [ 31.599865][ T710] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 31.716579][ T736] loop3: detected capacity change from 0 to 33280 [ 31.739743][ T740] loop0: detected capacity change from 0 to 36864 [ 31.780230][ T736] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.855553][ T740] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.888852][ T753] loop5: detected capacity change from 0 to 7 [ 31.909848][ T740] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.182: corrupted inode contents [ 31.969138][ T770] loop2: detected capacity change from 0 to 33792 [ 31.977442][ T770] ======================================================= [ 31.977442][ T770] WARNING: The mand mount option has been deprecated and [ 31.977442][ T770] and is ignored by this kernel. Remove the mand [ 31.977442][ T770] option from the mount to silence this warning. [ 31.977442][ T770] ======================================================= [ 31.987845][ T740] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #15: comm syz.0.182: mark_inode_dirty error [ 32.040904][ T740] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.182: corrupted inode contents [ 32.047050][ T772] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.053818][ T740] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.182: mark_inode_dirty error [ 32.071252][ T740] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.182: corrupted inode contents [ 32.093250][ T740] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.182: mark_inode_dirty error [ 32.105877][ T770] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,inlinecrypt,,errors=continue. Quota mode: none. [ 32.124197][ T740] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.182: corrupted inode contents [ 32.136725][ T770] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.147647][ T740] EXT4-fs error (device loop0): ext4_truncate:4317: inode #15: comm syz.0.182: mark_inode_dirty error [ 32.157375][ T770] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 32.163984][ T781] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.173489][ T770] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 32.191389][ T740] EXT4-fs error (device loop0) in ext4_setattr:5676: Corrupt filesystem [ 32.200438][ T770] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.200438][ T770] [ 32.222595][ T768] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.182: corrupted inode contents [ 32.256550][ T287] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 32.463440][ T813] loop0: detected capacity change from 0 to 33280 [ 32.495241][ T813] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.209: missing EA_INODE flag [ 32.509040][ T810] loop4: detected capacity change from 0 to 40427 [ 32.514953][ T813] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.209: error while reading EA inode 2 err=-117 [ 32.527988][ T813] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.209: inode #3584: comm syz.0.209: iget: illegal inode # [ 32.541168][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.548842][ T813] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.209: error while reading EA inode 3584 err=-117 [ 32.561458][ T813] EXT4-fs (loop0): 1 orphan inode deleted [ 32.568397][ T810] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 32.574868][ T813] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 32.584904][ T810] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 32.598597][ T813] EXT4-fs warning (device loop0): ext4_empty_dir:3149: inode #2: comm syz.0.209: directory missing '.' [ 32.617155][ T810] F2FS-fs (loop4): invalid crc value [ 32.631122][ T810] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 32.662182][ T810] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 32.669337][ T810] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.681536][ T832] loop0: detected capacity change from 0 to 33280 [ 32.695715][ T810] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 32.711246][ T289] handle_bad_sector: 2 callbacks suppressed [ 32.711257][ T289] attempt to access beyond end of device [ 32.711257][ T289] loop4: rw=2049, want=45104, limit=40427 [ 32.753472][ T832] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 32.767503][ T832] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.804565][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 32.869855][ T857] EXT4-fs (loop0): Ignoring removed nobh option [ 32.885197][ T857] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.226: invalid indirect mapped block 256 (level 2) [ 32.901379][ T857] EXT4-fs (loop0): 2 truncates cleaned up [ 32.924654][ T39] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 32.926157][ T857] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 32.943307][ T39] usb 4-1: config 0 has no interface number 0 [ 32.962539][ T39] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 32.968580][ T856] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.226: bg 0: block 5: invalid block bitmap [ 32.982879][ T39] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 32.989271][ T856] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 33.009396][ T856] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.009396][ T856] [ 33.029329][ T856] EXT4-fs (loop0): Total free blocks count 0 [ 33.038366][ T856] EXT4-fs (loop0): Free/Dirty block details [ 33.044282][ T856] EXT4-fs (loop0): free_blocks=0 [ 33.049447][ T856] EXT4-fs (loop0): dirty_blocks=1 [ 33.055034][ T856] EXT4-fs (loop0): Block reservation details [ 33.061134][ T856] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 33.154613][ T39] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 33.167786][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.185792][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 33.185803][ T30] audit: type=1400 audit(1794500770.443:221): avc: denied { mounton } for pid=883 comm="syz.2.238" path="/49/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.186249][ T39] usb 4-1: Product: syz [ 33.222675][ T39] usb 4-1: Manufacturer: syz [ 33.236097][ T39] usb 4-1: SerialNumber: syz [ 33.243759][ T39] usb 4-1: config 0 descriptor?? [ 33.265037][ T789] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.272029][ T789] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.285050][ T892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.325328][ T892] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.241: bad orphan inode 131083 [ 33.344637][ T892] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,data_err=ignore,norecovery,barrier=0x00000000000000f2,stripe=0x0000000000000005,lazytime,,errors=continue. Quota mode: none. [ 33.366871][ T30] audit: type=1400 audit(1794500770.623:222): avc: denied { create } for pid=891 comm="syz.2.241" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 33.388140][ T892] EXT4-fs error (device loop2): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.2.241: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 33.424526][ T30] audit: type=1400 audit(1794500770.643:223): avc: denied { read } for pid=891 comm="syz.2.241" name=2E02 dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 33.454716][ T892] EXT4-fs error (device loop2) in ext4_delete_entry:2802: Corrupt filesystem [ 33.473829][ T892] EXT4-fs warning (device loop2): ext4_rename_delete:3794: inode #2: comm syz.2.241: Deleting old file: nlink 5, error=-117 [ 33.494506][ T30] audit: type=1400 audit(1794500770.643:224): avc: denied { write } for pid=891 comm="syz.2.241" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.498335][ T789] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.569214][ T30] audit: type=1400 audit(1794500770.643:225): avc: denied { rename } for pid=891 comm="syz.2.241" name=2E02 dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 33.574656][ T789] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.601784][ T894] F2FS-fs (loop0): fault_injection options not supported [ 33.622522][ T894] F2FS-fs (loop0): invalid crc value [ 33.628041][ T30] audit: type=1400 audit(1794500770.643:226): avc: denied { add_name } for pid=891 comm="syz.2.241" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.649236][ T30] audit: type=1400 audit(1794500770.883:227): avc: denied { read append } for pid=897 comm="syz.2.243" name="set_event" dev="tracefs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 33.679564][ T894] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.720472][ T894] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.774687][ T909] synth uevent: /bus/acpi: unknown uevent action string [ 33.785886][ T873] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 33.804848][ T873] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 33.813929][ T30] audit: type=1400 audit(1794500771.063:228): avc: denied { bind } for pid=910 comm="syz.2.249" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.834269][ T873] F2FS-fs (loop4): invalid crc value [ 33.840448][ T30] audit: type=1400 audit(1794500771.063:229): avc: denied { name_bind } for pid=910 comm="syz.2.249" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 33.866241][ T30] audit: type=1400 audit(1794500771.073:230): avc: denied { node_bind } for pid=910 comm="syz.2.249" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 33.892871][ T873] F2FS-fs (loop4): Found nat_bits in checkpoint [ 33.946376][ T873] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 33.959235][ T873] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 33.975405][ T873] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 33.995978][ T873] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 34.010160][ T932] tipc: Started in network mode [ 34.019648][ T932] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 34.026908][ T932] tipc: Enabled bearer , priority 0 [ 34.038602][ T932] tipc: Disabling bearer [ 34.075009][ T39] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 34.085055][ T39] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 34.095721][ T39] asix: probe of 4-1:0.34 failed with error -71 [ 34.116299][ T39] usb 4-1: USB disconnect, device number 2 [ 34.191475][ T952] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.198729][ T952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.248912][ T956] smpboot: CPU 1 is now offline [ 34.254803][ T6] Bluetooth: hci0: command 0x1003 tx timeout [ 34.261456][ T782] Bluetooth: hci0: sending frame failed (-49) [ 34.391410][ T971] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 34.482529][ T980] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 34.510687][ T980] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.584156][ C0] Illegal XDP return value 16128, expect packet loss! [ 34.611424][ T999] overlayfs: upper fs does not support file handles, falling back to index=off. [ 34.651283][ T999] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 36.334821][ T60] Bluetooth: hci0: command 0x1001 tx timeout [ 36.341287][ T782] Bluetooth: hci0: sending frame failed (-49) [ 38.415449][ T20] Bluetooth: hci0: command 0x1009 tx timeout