last executing test programs: 15.37688737s ago: executing program 2 (id=389): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='user./d']) 14.532099168s ago: executing program 2 (id=391): creat(0x0, 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9ffff", @ANYRES8=r1, @ANYRES64=r0], 0x0) 13.292466148s ago: executing program 3 (id=401): r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffa}, 0x10}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x5, 0x9a, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010102}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0xffbe, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r5, 0x0, 0x0}, 0x20) syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x20000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x0, 0x1}, 0x48) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) 12.064653897s ago: executing program 2 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x20000890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpid() mmap(&(0x7f00006b6000/0x1000)=nil, 0x1000, 0x9, 0x100010, r1, 0xfc2c5000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2040000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 10.656647751s ago: executing program 2 (id=420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 5.114131717s ago: executing program 0 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x8000450a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 4.220942919s ago: executing program 0 (id=456): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) 3.34466694s ago: executing program 0 (id=459): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) process_vm_writev(r0, &(0x7f00000008c0), 0x0, &(0x7f0000000f80), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000bc0)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2.578469402s ago: executing program 3 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000340), &(0x7f00000000c0), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.285391395s ago: executing program 3 (id=464): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 2.204821412s ago: executing program 3 (id=465): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200e00000000000000d0001007564703a"], 0x54}}, 0x0) 2.181497024s ago: executing program 0 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) 2.112455169s ago: executing program 4 (id=467): bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.568292233s ago: executing program 1 (id=470): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5515, &(0x7f00000079c0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="e017110000cf0c9fbe451b8735d9d1bd5e2a8364abd5d4325451aafdc13e37e4132593225f023a1d6a5a44acde2f2aaf", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000004c0)=0x7) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x80000000, 0x2, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) 1.523499227s ago: executing program 3 (id=471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000003, 0x20000009}]}}}}}}}, 0x0) 1.522914017s ago: executing program 3 (id=472): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x12, @string={0x12, 0x3, "a7b0c3f72a3105357aee619da3149c71"}}, 0x0, 0x0}, 0x0) 978.204331ms ago: executing program 0 (id=473): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) rt_tgsigqueueinfo(0x0, 0x0, 0x27, 0x0) 918.314746ms ago: executing program 0 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x20000890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpid() mmap(&(0x7f00006b6000/0x1000)=nil, 0x1000, 0x9, 0x100010, r1, 0xfc2c5000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2040000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 917.999346ms ago: executing program 4 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000340), &(0x7f00000000c0), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 916.975096ms ago: executing program 4 (id=476): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setflags(r0, 0x2, 0x0) 848.847821ms ago: executing program 4 (id=477): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@grpjquota}, {@errors_remount}, {@init_itable}]}, 0x1, 0x4c5, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cfb43, 0x0) 322.256324ms ago: executing program 1 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) clock_gettime(0x0, 0x0) 308.955775ms ago: executing program 1 (id=479): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) timer_create(0x7, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 254.454449ms ago: executing program 1 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000040000000000000e03"], 0x0, 0x4a}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 117.20322ms ago: executing program 1 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56049, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4004) 116.8642ms ago: executing program 1 (id=482): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1e, 0x80004, 0x0) socket(0x1e, 0x4, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000008b80), 0x0, 0x40000) 116.35088ms ago: executing program 2 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) 116.07911ms ago: executing program 2 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) 11.803989ms ago: executing program 4 (id=485): setreuid(0x0, 0xee00) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9c020000160001"], 0x29c}}, 0x0) 0s ago: executing program 4 (id=486): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.621498][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.629466][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.650297][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.658355][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.666836][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.675182][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.682221][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.689674][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.697855][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.705110][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.712602][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.725260][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.733490][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.740546][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.757551][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.766287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.775104][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.782960][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.791088][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.799533][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.807756][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.814825][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.822298][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.829951][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.839498][ T283] device veth0_vlan entered promiscuous mode [ 25.858223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.866944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.875699][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.883810][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.895082][ T281] device veth0_vlan entered promiscuous mode [ 25.912043][ T283] device veth1_macvtap entered promiscuous mode [ 25.920401][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.928412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.936526][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.945112][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.953274][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.961882][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.970223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.978505][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.986685][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.994792][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.002747][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.010356][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.018015][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.025611][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.040706][ T282] device veth0_vlan entered promiscuous mode [ 26.050075][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.058831][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.067234][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.074424][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.082085][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.090778][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.099422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.107956][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.116251][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.123286][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.130859][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.139018][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.147324][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.155007][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.162435][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.173810][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.181993][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.198356][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.206740][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.215291][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.223585][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.232180][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.240453][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.251332][ T281] device veth1_macvtap entered promiscuous mode [ 26.258156][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.266490][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.274923][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.291010][ T284] device veth0_vlan entered promiscuous mode [ 26.301503][ T282] device veth1_macvtap entered promiscuous mode [ 26.308433][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.316654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.324133][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.331566][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.340364][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.348654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.356438][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.374177][ T284] device veth1_macvtap entered promiscuous mode [ 26.387846][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.396233][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.396869][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 26.405314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.420340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.428927][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.437464][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.445991][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.454422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.462790][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.476867][ T285] device veth0_vlan entered promiscuous mode [ 26.484392][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.492879][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.501379][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.509684][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.518186][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.526252][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.534439][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.542677][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.564256][ T285] device veth1_macvtap entered promiscuous mode [ 26.571557][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.579946][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.587769][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.595883][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.688289][ T335] loop2: detected capacity change from 0 to 40427 [ 26.701013][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.709470][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.718243][ T335] ======================================================= [ 26.718243][ T335] WARNING: The mand mount option has been deprecated and [ 26.718243][ T335] and is ignored by this kernel. Remove the mand [ 26.718243][ T335] option from the mount to silence this warning. [ 26.718243][ T335] ======================================================= [ 26.767312][ T335] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 26.775425][ T335] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 26.785671][ T335] F2FS-fs (loop2): invalid crc value [ 26.792489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.801179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.842973][ T335] F2FS-fs (loop2): Found nat_bits in checkpoint [ 26.894847][ T335] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 26.898089][ T349] loop4: detected capacity change from 0 to 128 [ 26.902064][ T335] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 26.965789][ T352] 9pnet: Insufficient options for proto=fd [ 26.987896][ T349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.000160][ T349] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 27.307322][ T335] attempt to access beyond end of device [ 27.307322][ T335] loop2: rw=2049, want=40432, limit=40427 [ 27.356446][ T343] loop3: detected capacity change from 0 to 1024 [ 27.399579][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 27.399593][ T30] audit: type=1400 audit(1754784758.433:121): avc: denied { create } for pid=364 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.410814][ T343] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 27.440108][ T335] syz.2.3 (335) used greatest stack depth: 21824 bytes left [ 27.464279][ T30] audit: type=1400 audit(1754784758.433:122): avc: denied { connect } for pid=364 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.502979][ T30] audit: type=1400 audit(1754784758.433:123): avc: denied { write } for pid=364 comm="syz.1.7" path="socket:[16451]" dev="sockfs" ino=16451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.520296][ T343] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 27.535923][ T360] syz.4.6 (360) used greatest stack depth: 21216 bytes left [ 27.568273][ T343] JBD2: no valid journal superblock found [ 27.589595][ T343] EXT4-fs (loop3): error loading journal [ 27.641860][ T30] audit: type=1400 audit(1754784758.673:124): avc: denied { relabelfrom } for pid=368 comm="syz.4.9" name="UDP" dev="sockfs" ino=16452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 27.641884][ T370] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 27.674173][ T30] audit: type=1400 audit(1754784758.673:125): avc: denied { relabelto } for pid=368 comm="syz.4.9" name="UDP" dev="sockfs" ino=16452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 27.718195][ T370] loop4: detected capacity change from 0 to 2048 [ 27.742126][ T30] audit: type=1400 audit(1754784758.733:126): avc: denied { nlmsg_read } for pid=368 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.767845][ T30] audit: type=1400 audit(1754784758.793:127): avc: denied { create } for pid=371 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.791467][ T374] loop3: detected capacity change from 0 to 16 [ 27.815251][ T374] erofs: Unknown parameter 'GPL' [ 28.304708][ T383] loop2: detected capacity change from 0 to 512 [ 28.318515][ T30] audit: type=1400 audit(1754784759.153:128): avc: denied { sys_admin } for pid=371 comm="syz.0.10" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 31.120023][ T370] EXT4-fs: error -4 creating inode table initialization thread [ 31.147810][ T383] EXT4-fs: error -4 creating inode table initialization thread [ 31.155711][ T383] EXT4-fs (loop2): mount failed [ 31.161264][ T370] EXT4-fs (loop4): mount failed [ 31.200607][ T30] audit: type=1400 audit(1754784760.993:129): avc: denied { unlink } for pid=380 comm="syz.3.12" name="#1" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 31.305900][ T30] audit: type=1400 audit(1754784762.203:130): avc: denied { create } for pid=394 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.634618][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 32.634678][ T30] audit: type=1400 audit(1754784763.663:134): avc: denied { setopt } for pid=418 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.883241][ T431] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.020205][ T429] loop4: detected capacity change from 0 to 256 [ 33.211357][ T30] audit: type=1400 audit(1754784763.913:135): avc: denied { ioctl } for pid=430 comm="syz.1.20" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.253596][ T436] loop3: detected capacity change from 0 to 16 [ 33.277198][ T435] loop2: detected capacity change from 0 to 512 [ 33.301626][ T441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22'. [ 33.311678][ T30] audit: type=1400 audit(1754784764.343:136): avc: denied { create } for pid=440 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 33.316885][ T441] netlink: 'syz.0.22': attribute type 8 has an invalid length. [ 33.331925][ T436] erofs: (device loop3): mounted with root inode @ nid 36. [ 33.346403][ T429] exfat: Deprecated parameter 'utf8' [ 33.351745][ T429] exfat: Deprecated parameter 'namecase' [ 33.357995][ T435] EXT4-fs (loop2): Test dummy encryption mode enabled [ 33.364886][ T435] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 33.372264][ T429] exfat: Deprecated parameter 'utf8' [ 33.382361][ T436] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 33.392961][ T436] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 33.395789][ T30] audit: type=1400 audit(1754784764.343:137): avc: denied { write } for pid=440 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 33.424917][ T436] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 33.429675][ T435] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 33.447398][ T435] EXT4-fs (loop2): 1 truncate cleaned up [ 33.453206][ T435] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 33.484741][ T429] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 33.489312][ T30] audit: type=1400 audit(1754784764.343:138): avc: denied { write } for pid=440 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.517190][ T30] audit: type=1400 audit(1754784764.343:139): avc: denied { read } for pid=440 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.557094][ T30] audit: type=1400 audit(1754784764.583:140): avc: denied { create } for pid=448 comm="syz.3.23" dev="anon_inodefs" ino=15722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.689504][ T30] audit: type=1400 audit(1754784764.723:141): avc: denied { write } for pid=430 comm="syz.1.20" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.705806][ T444] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 33.736913][ T449] loop3: detected capacity change from 0 to 4096 [ 33.761560][ T431] kvm [430]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800 [ 33.961553][ T30] audit: type=1400 audit(1754784764.993:142): avc: denied { name_bind } for pid=434 comm="syz.2.21" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 33.997822][ T449] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: writeback. [ 34.028031][ T30] audit: type=1400 audit(1754784764.993:143): avc: denied { node_bind } for pid=434 comm="syz.2.21" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 34.195366][ T445] loop0: detected capacity change from 0 to 40427 [ 34.302526][ T445] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.624699][ T445] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.695664][ T470] loop1: detected capacity change from 0 to 8192 [ 34.744693][ T470] loop1: p1 p2 p3 p4[EZD] [ 34.754355][ T470] loop1: p1 size 16128 extends beyond EOD, truncated [ 34.769270][ T470] loop1: p3 start 458783 is beyond EOD, truncated [ 34.776233][ T470] loop1: p4 size 65536 extends beyond EOD, truncated [ 34.876319][ T445] attempt to access beyond end of device [ 34.876319][ T445] loop0: rw=2049, want=81920, limit=40427 [ 34.903731][ T445] attempt to access beyond end of device [ 34.903731][ T445] loop0: rw=2049, want=53248, limit=40427 [ 34.919818][ T445] attempt to access beyond end of device [ 34.919818][ T445] loop0: rw=2049, want=58616, limit=40427 [ 35.014580][ T445] attempt to access beyond end of device [ 35.014580][ T445] loop0: rw=524288, want=78080, limit=40427 [ 35.026809][ T445] attempt to access beyond end of device [ 35.026809][ T445] loop0: rw=0, want=77832, limit=40427 [ 35.037978][ T445] attempt to access beyond end of device [ 35.037978][ T445] loop0: rw=0, want=77832, limit=40427 [ 35.049158][ T445] attempt to access beyond end of device [ 35.049158][ T445] loop0: rw=0, want=77832, limit=40427 [ 35.060239][ T445] attempt to access beyond end of device [ 35.060239][ T445] loop0: rw=0, want=77832, limit=40427 [ 35.071301][ T445] attempt to access beyond end of device [ 35.071301][ T445] loop0: rw=0, want=77832, limit=40427 [ 35.082387][ T445] attempt to access beyond end of device [ 35.082387][ T445] loop0: rw=0, want=77832, limit=40427 [ 35.372053][ T487] device pim6reg1 entered promiscuous mode [ 35.552433][ T489] loop0: detected capacity change from 0 to 40427 [ 35.639805][ T489] F2FS-fs (loop0): Invalid log blocks per segment (83886089) [ 35.647272][ T489] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 35.670505][ T489] F2FS-fs (loop0): invalid crc value [ 35.684414][ T489] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.818249][ T503] loop1: detected capacity change from 0 to 1024 [ 36.854659][ T489] F2FS-fs (loop0): Start checkpoint disabled! [ 36.866446][ T503] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 36.885663][ T503] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.897118][ T489] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 36.904177][ T503] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 36.914963][ T503] EXT4-fs error (device loop1): ext4_get_journal_inode:5149: inode #17: comm syz.1.39: iget: bad i_size value: 4398046511204 [ 36.928248][ T503] EXT4-fs (loop1): no journal found [ 36.934321][ T489] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 37.902776][ T512] syz.2.40 (512) used greatest stack depth: 20832 bytes left [ 37.913298][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 37.913313][ T30] audit: type=1400 audit(1754784768.943:167): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.577808][ T30] audit: type=1400 audit(1754784769.573:168): avc: denied { write } for pid=520 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.608101][ T30] audit: type=1400 audit(1754784769.573:169): avc: denied { read } for pid=520 comm="syz.4.45" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.705270][ T529] loop3: detected capacity change from 0 to 512 [ 39.851442][ T526] loop1: detected capacity change from 0 to 512 [ 40.008475][ T529] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.020059][ T529] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.874241][ T30] audit: type=1400 audit(1754784769.573:170): avc: denied { open } for pid=520 comm="syz.4.45" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.944206][ T529] syz.3.42 (529) used greatest stack depth: 19800 bytes left [ 40.969989][ T30] audit: type=1400 audit(1754784771.163:171): avc: denied { mounton } for pid=515 comm="syz.3.42" path="/10/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.973490][ T526] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,init_itable,. Quota mode: writeback. [ 40.993360][ T30] audit: type=1400 audit(1754784771.163:172): avc: denied { write } for pid=515 comm="syz.3.42" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.033489][ T30] audit: type=1400 audit(1754784771.163:173): avc: denied { add_name } for pid=515 comm="syz.3.42" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.082255][ T539] loop0: detected capacity change from 0 to 8192 [ 41.088977][ T526] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.099571][ T30] audit: type=1400 audit(1754784771.163:174): avc: denied { setattr } for pid=515 comm="syz.3.42" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.121346][ T30] audit: type=1400 audit(1754784771.173:175): avc: denied { remove_name } for pid=515 comm="syz.3.42" name="#3" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.173939][ T30] audit: type=1400 audit(1754784771.173:176): avc: denied { rename } for pid=515 comm="syz.3.42" name="#3" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.329222][ T552] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 42.355585][ T554] loop4: detected capacity change from 0 to 2048 [ 42.369250][ T555] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:338: inode #15: comm syz.1.46: verity file corrupted; can't find descriptor [ 42.387139][ T555] EXT4-fs (loop1): Remounting filesystem read-only [ 42.393762][ T555] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 42.422573][ T555] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:338: inode #15: comm syz.1.46: verity file corrupted; can't find descriptor [ 42.646634][ T555] EXT4-fs (loop1): Remounting filesystem read-only [ 42.653372][ T555] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 42.725470][ T554] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,nojournal_checksum,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 42.778968][ T549] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.779149][ T563] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 42.793972][ T549] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 42.824454][ T549] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.824454][ T549] [ 42.834166][ T549] EXT4-fs (loop4): Total free blocks count 0 [ 42.840170][ T549] EXT4-fs (loop4): Free/Dirty block details [ 42.846102][ T549] EXT4-fs (loop4): free_blocks=2415919504 [ 42.851834][ T549] EXT4-fs (loop4): dirty_blocks=16 [ 42.857238][ T549] EXT4-fs (loop4): Block reservation details [ 42.863250][ T549] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 43.166362][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 43.167048][ T30] audit: type=1400 audit(1754784774.193:203): avc: denied { bind } for pid=567 comm="syz.1.55" lport=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.194916][ T30] audit: type=1400 audit(1754784774.193:204): avc: denied { node_bind } for pid=567 comm="syz.1.55" saddr=fe88::2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 43.385043][ T576] loop2: detected capacity change from 0 to 512 [ 43.400792][ T573] loop4: detected capacity change from 0 to 512 [ 43.457511][ T30] audit: type=1400 audit(1754784774.203:205): avc: denied { read write } for pid=567 comm="syz.1.55" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.544048][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 43.565981][ T573] EXT4-fs (loop4): Test dummy encryption mode enabled [ 43.647077][ T573] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.700179][ T576] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 43.711891][ T576] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.323869][ C0] sched: RT throttling activated [ 44.324312][ T30] audit: type=1400 audit(1754784774.203:206): avc: denied { open } for pid=567 comm="syz.1.55" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.352557][ T30] audit: type=1400 audit(1754784774.203:207): avc: denied { ioctl } for pid=567 comm="syz.1.55" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.354721][ T573] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.456949][ T30] audit: type=1400 audit(1754784775.493:208): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.480760][ T573] EXT4-fs (loop4): 1 truncate cleaned up [ 44.488017][ T573] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 44.511915][ T26] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 44.528962][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.554109][ T26] usb 2-1: config 0 descriptor?? [ 44.590460][ T30] audit: type=1326 audit(1754784775.623:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=558 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc10ffbe9 code=0x7fc00000 [ 44.639203][ T30] audit: type=1326 audit(1754784775.623:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=558 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdc10ffbe9 code=0x7fc00000 [ 44.662426][ T30] audit: type=1326 audit(1754784775.623:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=558 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc10ffbe9 code=0x7fc00000 [ 44.697612][ T30] audit: type=1326 audit(1754784775.623:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=558 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc10ffbe9 code=0x7fc00000 [ 44.717523][ T587] loop0: detected capacity change from 0 to 512 [ 44.732069][ T587] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.754915][ T587] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.60: invalid indirect mapped block 4294967295 (level 1) [ 44.773173][ T587] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.60: invalid indirect mapped block 4294967295 (level 1) [ 44.788431][ T587] EXT4-fs (loop0): 2 truncates cleaned up [ 44.794385][ T587] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 45.902136][ T607] loop2: detected capacity change from 0 to 512 [ 48.723386][ T26] usb 2-1: USB disconnect, device number 2 [ 48.741799][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 48.741814][ T30] audit: type=1400 audit(1754784779.773:269): avc: denied { create } for pid=616 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.795456][ T607] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,quota,min_batch_time=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 48.843221][ T30] audit: type=1400 audit(1754784779.803:270): avc: denied { bind } for pid=616 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.973770][ T30] audit: type=1400 audit(1754784779.883:271): avc: denied { mounton } for pid=622 comm="syz.1.71" path="/10/file0/file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.003943][ T30] audit: type=1400 audit(1754784779.883:272): avc: denied { unmount } for pid=622 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.029182][ T30] audit: type=1400 audit(1754784779.893:273): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.056632][ T637] loop4: detected capacity change from 0 to 512 [ 49.067686][ T30] audit: type=1400 audit(1754784779.893:274): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.241011][ T637] EXT4-fs (loop4): Ignoring removed orlov option [ 50.247870][ T637] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 50.261076][ T30] audit: type=1400 audit(1754784779.893:275): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.316596][ T30] audit: type=1400 audit(1754784779.903:276): avc: denied { execmem } for pid=624 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.340317][ T30] audit: type=1400 audit(1754784779.913:277): avc: denied { mounton } for pid=626 comm="syz.0.74" path="/12/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.362984][ T637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 50.374156][ T30] audit: type=1400 audit(1754784779.913:278): avc: denied { mount } for pid=626 comm="syz.0.74" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.376734][ T649] loop3: detected capacity change from 0 to 128 [ 50.397959][ T637] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.73: corrupted in-inode xattr [ 50.447923][ T637] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.73: couldn't read orphan inode 15 (err -117) [ 50.460134][ T637] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 50.839813][ T658] loop0: detected capacity change from 0 to 256 [ 51.302986][ T658] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 51.481868][ T649] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.703994][ T649] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.054480][ T679] loop2: detected capacity change from 0 to 512 [ 53.294315][ T679] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,quota,min_batch_time=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 53.436730][ T668] loop4: detected capacity change from 0 to 512 [ 53.513618][ T668] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 53.594669][ T668] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 53.602831][ T668] System zones: 0-2, 18-18, 34-35 [ 53.608740][ T668] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.672156][ T684] loop0: detected capacity change from 0 to 40427 [ 53.813683][ T695] netlink: 'syz.2.92': attribute type 4 has an invalid length. [ 53.911693][ T684] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 53.944067][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 53.944138][ T30] audit: type=1400 audit(1754784784.793:321): avc: denied { create } for pid=692 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.982220][ T684] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 54.036580][ T684] F2FS-fs (loop0): Found nat_bits in checkpoint [ 54.127719][ T700] loop4: detected capacity change from 0 to 512 [ 54.149471][ T684] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 54.159371][ T684] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.239716][ T700] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 54.258707][ T700] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.93: bad orphan inode 15 [ 54.270752][ T30] audit: type=1400 audit(1754784785.303:322): avc: denied { create } for pid=683 comm="syz.0.91" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.293996][ T700] ext4_test_bit(bit=14, block=4) = 1 [ 54.303323][ T700] is_bad_inode(inode)=0 [ 54.308337][ T700] NEXT_ORPHAN(inode)=0 [ 54.312507][ T700] max_ino=32 [ 54.315973][ T700] i_nlink=1 [ 54.319180][ T30] audit: type=1400 audit(1754784785.333:323): avc: denied { read } for pid=703 comm="syz.3.94" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.355267][ T700] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000100,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 54.387846][ T30] audit: type=1400 audit(1754784785.333:324): avc: denied { open } for pid=703 comm="syz.3.94" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.411420][ T30] audit: type=1400 audit(1754784785.333:325): avc: denied { ioctl } for pid=703 comm="syz.3.94" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.141163][ T30] audit: type=1400 audit(1754784786.073:326): avc: denied { create } for pid=703 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.324698][ T30] audit: type=1400 audit(1754784786.173:327): avc: denied { write } for pid=703 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.355296][ T700] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 4: comm syz.4.93: lblock 0 mapped to illegal pblock 4 (length 1) [ 56.382301][ T30] audit: type=1400 audit(1754784786.173:328): avc: denied { read } for pid=703 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.428786][ T30] audit: type=1400 audit(1754784787.463:329): avc: denied { read write } for pid=699 comm="syz.4.93" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.491873][ T718] loop1: detected capacity change from 0 to 256 [ 56.572492][ T30] audit: type=1400 audit(1754784787.463:330): avc: denied { open } for pid=699 comm="syz.4.93" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.627424][ T718] FAT-fs (loop1): Directory bread(block 64) failed [ 56.654217][ T718] FAT-fs (loop1): Directory bread(block 65) failed [ 56.675950][ T718] FAT-fs (loop1): Directory bread(block 66) failed [ 56.682573][ T718] FAT-fs (loop1): Directory bread(block 67) failed [ 56.689384][ T718] FAT-fs (loop1): Directory bread(block 68) failed [ 56.696141][ T718] FAT-fs (loop1): Directory bread(block 69) failed [ 56.702715][ T718] FAT-fs (loop1): Directory bread(block 70) failed [ 56.709757][ T718] FAT-fs (loop1): Directory bread(block 71) failed [ 56.716445][ T718] FAT-fs (loop1): Directory bread(block 72) failed [ 56.722971][ T718] FAT-fs (loop1): Directory bread(block 73) failed [ 57.191420][ T733] loop4: detected capacity change from 0 to 512 [ 59.229944][ T713] loop3: detected capacity change from 0 to 40427 [ 59.238213][ T733] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,quota,min_batch_time=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 59.297530][ T713] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 59.306026][ T713] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.349658][ T713] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 59.352114][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 59.352130][ T30] audit: type=1400 audit(1754784790.383:334): avc: denied { write } for pid=740 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.397218][ T745] loop2: detected capacity change from 0 to 256 [ 59.491671][ T745] FAT-fs (loop2): Directory bread(block 64) failed [ 59.498518][ T745] FAT-fs (loop2): Directory bread(block 65) failed [ 59.505247][ T745] FAT-fs (loop2): Directory bread(block 66) failed [ 59.511795][ T745] FAT-fs (loop2): Directory bread(block 67) failed [ 59.518386][ T745] FAT-fs (loop2): Directory bread(block 68) failed [ 59.525103][ T745] FAT-fs (loop2): Directory bread(block 69) failed [ 59.531664][ T745] FAT-fs (loop2): Directory bread(block 70) failed [ 59.538205][ T745] FAT-fs (loop2): Directory bread(block 71) failed [ 59.544787][ T745] FAT-fs (loop2): Directory bread(block 72) failed [ 59.551309][ T745] FAT-fs (loop2): Directory bread(block 73) failed [ 59.744058][ T30] audit: type=1400 audit(1754784790.713:335): avc: denied { mounton } for pid=747 comm="syz.4.108" path="/20/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.159232][ T752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.106'. [ 60.514904][ T30] audit: type=1400 audit(1754784790.723:336): avc: denied { mount } for pid=747 comm="syz.4.108" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.579191][ T761] loop4: detected capacity change from 0 to 16 [ 60.611472][ T763] loop0: detected capacity change from 0 to 256 [ 60.653024][ T30] audit: type=1400 audit(1754784791.203:337): avc: denied { module_request } for pid=744 comm="syz.2.106" kmod="rtnl-link-ve" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 60.677535][ T763] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d) [ 60.708322][ T761] erofs: (device loop4): erofs_read_inode: unsupported i_format 1139 of nid 42 [ 60.713048][ T763] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 60.728904][ T765] loop3: detected capacity change from 0 to 256 [ 60.751084][ T30] audit: type=1400 audit(1754784791.783:338): avc: denied { write } for pid=762 comm="syz.0.113" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.781476][ T30] audit: type=1400 audit(1754784791.813:339): avc: denied { add_name } for pid=762 comm="syz.0.113" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.807473][ T765] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.830248][ T30] audit: type=1400 audit(1754784791.813:340): avc: denied { associate } for pid=762 comm="syz.0.113" name="file2" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 60.869743][ T30] audit: type=1400 audit(1754784791.813:341): avc: denied { read write } for pid=762 comm="syz.0.113" name="file2" dev="loop0" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.954777][ T770] loop0: detected capacity change from 0 to 1024 [ 60.975058][ T30] audit: type=1400 audit(1754784791.813:342): avc: denied { open } for pid=762 comm="syz.0.113" path="/20/file2/file2" dev="loop0" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.001100][ T30] audit: type=1400 audit(1754784791.933:343): avc: denied { map } for pid=766 comm="syz.2.115" path="socket:[16341]" dev="sockfs" ino=16341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 61.310974][ T778] loop1: detected capacity change from 0 to 512 [ 61.446630][ T778] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.507542][ T770] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.564058][ T778] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 61.576406][ T778] EXT4-fs error (device loop1): ext4_quota_enable:6406: comm syz.1.118: inode #2304: comm syz.1.118: iget: illegal inode # [ 61.657297][ T778] EXT4-fs error (device loop1): ext4_quota_enable:6409: comm syz.1.118: Bad quota inode: 2304, type: 2 [ 61.669395][ T778] EXT4-fs warning (device loop1): ext4_enable_quotas:6450: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 61.687422][ T778] EXT4-fs (loop1): mount failed [ 61.827115][ T785] overlayfs: failed to resolve './file1': -2 [ 61.865887][ T770] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.923595][ T787] loop4: detected capacity change from 0 to 256 [ 61.964086][ T787] FAT-fs (loop4): Directory bread(block 64) failed [ 61.970655][ T787] FAT-fs (loop4): Directory bread(block 65) failed [ 61.977229][ T787] FAT-fs (loop4): Directory bread(block 66) failed [ 61.983843][ T787] FAT-fs (loop4): Directory bread(block 67) failed [ 61.990929][ T787] FAT-fs (loop4): Directory bread(block 68) failed [ 61.997473][ T787] FAT-fs (loop4): Directory bread(block 69) failed [ 62.004040][ T787] FAT-fs (loop4): Directory bread(block 70) failed [ 62.010569][ T787] FAT-fs (loop4): Directory bread(block 71) failed [ 62.017363][ T787] FAT-fs (loop4): Directory bread(block 72) failed [ 62.023913][ T787] FAT-fs (loop4): Directory bread(block 73) failed [ 62.133563][ T770] JBD2: no valid journal superblock found [ 62.353481][ T770] EXT4-fs (loop0): error loading journal [ 63.048316][ T791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'. [ 63.629413][ T804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 64.211260][ T810] loop3: detected capacity change from 0 to 256 [ 64.295394][ T810] FAT-fs (loop3): Directory bread(block 64) failed [ 64.316041][ T810] FAT-fs (loop3): Directory bread(block 65) failed [ 64.332888][ T810] FAT-fs (loop3): Directory bread(block 66) failed [ 64.352344][ T810] FAT-fs (loop3): Directory bread(block 67) failed [ 64.369250][ T810] FAT-fs (loop3): Directory bread(block 68) failed [ 64.383996][ T810] FAT-fs (loop3): Directory bread(block 69) failed [ 64.392736][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 64.392749][ T30] audit: type=1400 audit(1754784795.413:350): avc: denied { read write } for pid=805 comm="syz.1.127" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.426329][ T810] FAT-fs (loop3): Directory bread(block 70) failed [ 64.433123][ T810] FAT-fs (loop3): Directory bread(block 71) failed [ 64.440020][ T810] FAT-fs (loop3): Directory bread(block 72) failed [ 64.447023][ T30] audit: type=1400 audit(1754784795.453:351): avc: denied { open } for pid=805 comm="syz.1.127" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.470504][ T810] FAT-fs (loop3): Directory bread(block 73) failed [ 64.500030][ T804] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 64.509337][ T804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 64.562056][ T30] audit: type=1400 audit(1754784795.453:352): avc: denied { ioctl } for pid=805 comm="syz.1.127" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.319756][ T829] loop0: detected capacity change from 0 to 2048 [ 65.334205][ T30] audit: type=1400 audit(1754784796.043:353): avc: denied { read } for pid=814 comm="syz.2.130" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.593970][ T336] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 65.601966][ T30] audit: type=1400 audit(1754784796.043:354): avc: denied { open } for pid=814 comm="syz.2.130" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.641365][ T829] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,nojournal_checksum,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 65.648041][ T30] audit: type=1400 audit(1754784796.333:355): avc: denied { ioctl } for pid=814 comm="syz.2.130" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.692883][ T30] audit: type=1400 audit(1754784796.723:356): avc: denied { read write } for pid=824 comm="syz.0.134" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.715680][ T828] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.730478][ T828] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 65.741653][ T30] audit: type=1400 audit(1754784796.723:357): avc: denied { open } for pid=824 comm="syz.0.134" path="/25/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.742687][ T828] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.742687][ T828] [ 65.775619][ T828] EXT4-fs (loop0): Total free blocks count 0 [ 65.781621][ T828] EXT4-fs (loop0): Free/Dirty block details [ 65.787685][ T828] EXT4-fs (loop0): free_blocks=2415919504 [ 65.793419][ T828] EXT4-fs (loop0): dirty_blocks=16 [ 65.798563][ T828] EXT4-fs (loop0): Block reservation details [ 65.804572][ T828] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 66.263938][ T336] usb 2-1: Using ep0 maxpacket: 16 [ 66.386908][ T30] audit: type=1400 audit(1754784797.413:358): avc: denied { read write } for pid=841 comm="syz.0.137" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.416706][ T336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.417062][ T30] audit: type=1400 audit(1754784797.413:359): avc: denied { open } for pid=841 comm="syz.0.137" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.656488][ T848] loop3: detected capacity change from 0 to 512 [ 66.667351][ T336] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 66.676553][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.687984][ T336] usb 2-1: config 0 descriptor?? [ 66.718139][ T848] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.845710][ T848] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 66.858647][ T848] EXT4-fs error (device loop3): ext4_quota_enable:6406: comm syz.3.138: inode #2304: comm syz.3.138: iget: illegal inode # [ 66.872477][ T848] EXT4-fs error (device loop3): ext4_quota_enable:6409: comm syz.3.138: Bad quota inode: 2304, type: 2 [ 66.884601][ T848] EXT4-fs warning (device loop3): ext4_enable_quotas:6450: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 66.901846][ T848] EXT4-fs (loop3): mount failed [ 66.959909][ T806] loop1: detected capacity change from 0 to 512 [ 67.131096][ T855] loop4: detected capacity change from 0 to 512 [ 67.257601][ T806] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.127: inode #1: comm syz.1.127: iget: illegal inode # [ 67.281783][ T806] EXT4-fs (loop1): Remounting filesystem read-only [ 67.365928][ T806] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.127: error while reading EA inode 1 err=-117 [ 67.378876][ T806] EXT4-fs (loop1): Remounting filesystem read-only [ 67.386802][ T806] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.127: inode #1: comm syz.1.127: iget: illegal inode # [ 67.404044][ T855] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,init_itable,. Quota mode: writeback. [ 67.479279][ T806] EXT4-fs (loop1): Remounting filesystem read-only [ 67.499396][ T855] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.514343][ T806] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.127: error while reading EA inode 1 err=-117 [ 67.585283][ T806] EXT4-fs (loop1): Remounting filesystem read-only [ 67.673162][ T806] EXT4-fs (loop1): 1 orphan inode deleted [ 67.679205][ T806] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sysvgroups,debug_want_extra_isize=0x000000000000004c,auto_da_alloc=0x00000000000007ff,norecovery,acl,usrjquota=,grpjquota=,usrquota,errors=remount-ro,. Quota mode: writeback. [ 68.186370][ T336] hid (null): invalid report_count 497205603 [ 68.192473][ T336] hid (null): invalid report_count -400155653 [ 68.206598][ T336] hid (null): unknown global tag 0xe [ 68.212043][ T336] hid (null): unknown global tag 0xe [ 68.676689][ T878] loop4: detected capacity change from 0 to 512 [ 68.749116][ T878] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.845568][ T879] netlink: 88 bytes leftover after parsing attributes in process `syz.0.146'. [ 68.857071][ T878] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 68.869159][ T878] EXT4-fs error (device loop4): ext4_quota_enable:6406: comm syz.4.145: inode #2304: comm syz.4.145: iget: illegal inode # [ 68.884016][ T878] EXT4-fs error (device loop4): ext4_quota_enable:6409: comm syz.4.145: Bad quota inode: 2304, type: 2 [ 68.895984][ T878] EXT4-fs warning (device loop4): ext4_enable_quotas:6450: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 68.913504][ T878] EXT4-fs (loop4): mount failed [ 70.881649][ T888] loop3: detected capacity change from 0 to 256 [ 70.944472][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 70.944488][ T30] audit: type=1400 audit(1754784801.973:368): avc: denied { mount } for pid=889 comm="syz.0.149" name="/" dev="ramfs" ino=17487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.973627][ T30] audit: type=1400 audit(1754784801.983:369): avc: denied { ioctl } for pid=889 comm="syz.0.149" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.976619][ T890] input: syz1 as /devices/virtual/input/input5 [ 71.008706][ T286] usb 2-1: USB disconnect, device number 3 [ 71.011780][ T30] audit: type=1400 audit(1754784802.043:370): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=709 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.040508][ T894] loop4: detected capacity change from 0 to 512 [ 71.058590][ T888] FAT-fs (loop3): Directory bread(block 64) failed [ 71.065980][ T888] FAT-fs (loop3): Directory bread(block 65) failed [ 71.072606][ T888] FAT-fs (loop3): Directory bread(block 66) failed [ 71.087426][ T30] audit: type=1400 audit(1754784802.043:371): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=709 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.120276][ T30] audit: type=1400 audit(1754784802.043:372): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=709 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.148029][ T888] FAT-fs (loop3): Directory bread(block 67) failed [ 71.165198][ T904] overlayfs: statfs failed on './file0' [ 71.174130][ T888] FAT-fs (loop3): Directory bread(block 68) failed [ 71.180681][ T888] FAT-fs (loop3): Directory bread(block 69) failed [ 71.193424][ T888] FAT-fs (loop3): Directory bread(block 70) failed [ 71.200528][ T888] FAT-fs (loop3): Directory bread(block 71) failed [ 71.208685][ T30] audit: type=1400 audit(1754784802.203:373): avc: denied { getattr } for pid=903 comm="syz.0.156" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.231847][ T906] loop1: detected capacity change from 0 to 16 [ 71.238313][ T888] FAT-fs (loop3): Directory bread(block 72) failed [ 71.247920][ T888] FAT-fs (loop3): Directory bread(block 73) failed [ 71.301391][ T906] erofs: (device loop1): mounted with root inode @ nid 36. [ 71.470468][ T894] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.641373][ T906] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 71.678954][ T894] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.760586][ T906] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 72.308738][ T906] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 72.334848][ T912] loop0: detected capacity change from 0 to 4096 [ 72.356879][ T912] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 72.357170][ T30] audit: type=1400 audit(1754784803.393:374): avc: denied { remount } for pid=893 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.417545][ T894] EXT4-fs (loop4): can't enable nombcache during remount [ 72.449982][ T30] audit: type=1400 audit(1754784803.483:375): avc: denied { map } for pid=911 comm="syz.0.157" path="/31/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.584645][ T919] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 72.605489][ T919] 9pnet: Insufficient options for proto=fd [ 72.620876][ T30] audit: type=1400 audit(1754784803.483:376): avc: denied { write } for pid=887 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 72.647466][ T30] audit: type=1400 audit(1754784803.503:377): avc: denied { execute } for pid=911 comm="syz.0.157" path="/31/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.223238][ T938] loop0: detected capacity change from 0 to 256 [ 74.256032][ T934] loop4: detected capacity change from 0 to 40427 [ 74.269367][ T938] FAT-fs (loop0): Directory bread(block 64) failed [ 74.276581][ T938] FAT-fs (loop0): Directory bread(block 65) failed [ 74.283311][ T938] FAT-fs (loop0): Directory bread(block 66) failed [ 74.290712][ T938] FAT-fs (loop0): Directory bread(block 67) failed [ 74.299548][ T934] F2FS-fs (loop4): invalid crc value [ 74.306064][ T938] FAT-fs (loop0): Directory bread(block 68) failed [ 74.312608][ T938] FAT-fs (loop0): Directory bread(block 69) failed [ 74.320769][ T938] FAT-fs (loop0): Directory bread(block 70) failed [ 74.327582][ T938] FAT-fs (loop0): Directory bread(block 71) failed [ 74.334451][ T934] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.349598][ T938] FAT-fs (loop0): Directory bread(block 72) failed [ 74.365037][ T938] FAT-fs (loop0): Directory bread(block 73) failed [ 74.386171][ T934] F2FS-fs (loop4): Start checkpoint disabled! [ 74.406980][ T934] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 74.495452][ T951] loop0: detected capacity change from 0 to 16 [ 74.872348][ T945] loop3: detected capacity change from 0 to 40427 [ 74.879345][ T951] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.994190][ T945] F2FS-fs (loop3): invalid crc value [ 75.079639][ T963] netlink: 'syz.1.171': attribute type 13 has an invalid length. [ 75.094576][ T963] gretap0: refused to change device tx_queue_len [ 75.101680][ T963] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.214872][ T945] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.335021][ T966] loop4: detected capacity change from 0 to 256 [ 75.354587][ T945] F2FS-fs (loop3): Start checkpoint disabled! [ 75.361612][ T945] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 75.382473][ T966] FAT-fs (loop4): Directory bread(block 64) failed [ 75.389080][ T966] FAT-fs (loop4): Directory bread(block 65) failed [ 75.395707][ T966] FAT-fs (loop4): Directory bread(block 66) failed [ 75.402578][ T966] FAT-fs (loop4): Directory bread(block 67) failed [ 75.409158][ T966] FAT-fs (loop4): Directory bread(block 68) failed [ 75.415794][ T966] FAT-fs (loop4): Directory bread(block 69) failed [ 75.422358][ T966] FAT-fs (loop4): Directory bread(block 70) failed [ 75.429098][ T966] FAT-fs (loop4): Directory bread(block 71) failed [ 75.435695][ T966] FAT-fs (loop4): Directory bread(block 72) failed [ 75.442315][ T966] FAT-fs (loop4): Directory bread(block 73) failed [ 75.550120][ T974] loop2: detected capacity change from 0 to 2048 [ 75.662804][ T974] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,nojournal_checksum,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 75.735471][ T982] loop0: detected capacity change from 0 to 256 [ 75.769263][ T977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'. [ 75.983959][ T982] FAT-fs (loop0): Directory bread(block 64) failed [ 75.991079][ T982] FAT-fs (loop0): Directory bread(block 65) failed [ 76.136311][ T982] FAT-fs (loop0): Directory bread(block 66) failed [ 76.147550][ T982] FAT-fs (loop0): Directory bread(block 67) failed [ 76.155326][ T982] FAT-fs (loop0): Directory bread(block 68) failed [ 76.161859][ T982] FAT-fs (loop0): Directory bread(block 69) failed [ 76.169718][ T982] FAT-fs (loop0): Directory bread(block 70) failed [ 76.177316][ T982] FAT-fs (loop0): Directory bread(block 71) failed [ 76.184041][ T982] FAT-fs (loop0): Directory bread(block 72) failed [ 76.190768][ T982] FAT-fs (loop0): Directory bread(block 73) failed [ 76.253094][ T991] loop2: detected capacity change from 0 to 1024 [ 76.295971][ T991] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 76.348398][ T991] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 76.389032][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 76.389047][ T30] audit: type=1400 audit(1754784807.423:389): avc: denied { create } for pid=999 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.523236][ T1005] loop4: detected capacity change from 0 to 16 [ 76.570206][ T991] process 'syz.2.182' launched './file1' with NULL argv: empty string added [ 76.761896][ T30] audit: type=1400 audit(1754784807.633:390): avc: denied { write } for pid=999 comm="syz.3.183" name="001" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.794050][ T1005] erofs: (device loop4): mounted with root inode @ nid 36. [ 76.852781][ T30] audit: type=1400 audit(1754784807.653:391): avc: denied { execute } for pid=990 comm="syz.2.182" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.912295][ T30] audit: type=1400 audit(1754784807.843:392): avc: denied { execute_no_trans } for pid=990 comm="syz.2.182" path="/44/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.958829][ T30] audit: type=1400 audit(1754784807.923:393): avc: denied { setopt } for pid=1007 comm="syz.2.185" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.980556][ T611] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.992298][ T30] audit: type=1400 audit(1754784807.983:394): avc: denied { ioctl } for pid=1007 comm="syz.2.185" path="socket:[18456]" dev="sockfs" ino=18456 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.283284][ T1018] netlink: 88 bytes leftover after parsing attributes in process `syz.3.188'. [ 77.310491][ T1020] loop0: detected capacity change from 0 to 1024 [ 77.317204][ T1018] netlink: 48 bytes leftover after parsing attributes in process `syz.3.188'. [ 77.374808][ T1020] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 77.406672][ T1020] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 77.939734][ T1034] loop0: detected capacity change from 0 to 256 [ 78.214978][ T1034] FAT-fs (loop0): Directory bread(block 64) failed [ 78.221579][ T1034] FAT-fs (loop0): Directory bread(block 65) failed [ 78.228188][ T1034] FAT-fs (loop0): Directory bread(block 66) failed [ 78.234802][ T1034] FAT-fs (loop0): Directory bread(block 67) failed [ 78.241402][ T1034] FAT-fs (loop0): Directory bread(block 68) failed [ 78.247963][ T1034] FAT-fs (loop0): Directory bread(block 69) failed [ 78.254511][ T1034] FAT-fs (loop0): Directory bread(block 70) failed [ 78.261013][ T1034] FAT-fs (loop0): Directory bread(block 71) failed [ 78.267573][ T1034] FAT-fs (loop0): Directory bread(block 72) failed [ 78.274122][ T1034] FAT-fs (loop0): Directory bread(block 73) failed [ 78.400960][ T1046] loop3: detected capacity change from 0 to 16 [ 78.497989][ T1047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 78.571675][ T1046] erofs: (device loop3): mounted with root inode @ nid 36. [ 80.878533][ T30] audit: type=1400 audit(1754784810.063:395): avc: denied { mount } for pid=1054 comm="syz.0.199" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.901843][ T578] Bluetooth: hci0: command 0x1003 tx timeout [ 80.916907][ T1015] Bluetooth: hci0: sending frame failed (-49) [ 81.019793][ T1073] 9pnet: Insufficient options for proto=fd [ 81.048968][ T1080] loop4: detected capacity change from 0 to 16 [ 81.154386][ T1083] loop1: detected capacity change from 0 to 512 [ 81.216569][ T1083] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.495976][ T30] audit: type=1400 audit(1754784812.403:396): avc: denied { bind } for pid=1076 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.037269][ T1080] erofs: (device loop4): mounted with root inode @ nid 36. [ 82.080954][ T1083] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 82.227740][ T1083] EXT4-fs error (device loop1): ext4_quota_enable:6406: comm syz.1.206: inode #2304: comm syz.1.206: iget: illegal inode # [ 82.241286][ T1083] EXT4-fs error (device loop1): ext4_quota_enable:6409: comm syz.1.206: Bad quota inode: 2304, type: 2 [ 82.253636][ T1083] EXT4-fs warning (device loop1): ext4_enable_quotas:6450: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 82.271211][ T1083] EXT4-fs (loop1): mount failed [ 82.353772][ T1089] loop3: detected capacity change from 0 to 256 [ 82.384264][ T1089] FAT-fs (loop3): Directory bread(block 64) failed [ 82.390824][ T1089] FAT-fs (loop3): Directory bread(block 65) failed [ 82.397405][ T1089] FAT-fs (loop3): Directory bread(block 66) failed [ 82.403948][ T1089] FAT-fs (loop3): Directory bread(block 67) failed [ 82.410493][ T1089] FAT-fs (loop3): Directory bread(block 68) failed [ 82.417040][ T1089] FAT-fs (loop3): Directory bread(block 69) failed [ 82.423586][ T1089] FAT-fs (loop3): Directory bread(block 70) failed [ 82.430138][ T1089] FAT-fs (loop3): Directory bread(block 71) failed [ 82.436692][ T1089] FAT-fs (loop3): Directory bread(block 72) failed [ 82.443396][ T1089] FAT-fs (loop3): Directory bread(block 73) failed [ 82.520339][ T30] audit: type=1400 audit(1754784812.483:397): avc: denied { write } for pid=1076 comm="syz.3.208" path="socket:[17736]" dev="sockfs" ino=17736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.781752][ T1091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.210'. [ 82.994190][ T527] Bluetooth: hci0: command 0x1001 tx timeout [ 83.001924][ T1015] Bluetooth: hci0: sending frame failed (-49) [ 83.834250][ T30] audit: type=1400 audit(1754784814.863:398): avc: denied { connect } for pid=1094 comm="syz.4.213" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.806773][ T1113] 9pnet: Insufficient options for proto=fd [ 85.076258][ T527] Bluetooth: hci0: command 0x1009 tx timeout [ 85.208085][ T1122] loop4: detected capacity change from 0 to 16 [ 85.311267][ T1122] erofs: (device loop4): mounted with root inode @ nid 36. [ 85.466137][ T1115] loop1: detected capacity change from 0 to 512 [ 85.546980][ T1115] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 85.567165][ T1115] EXT4-fs (loop1): Ignoring removed bh option [ 85.573338][ T1115] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.586112][ T1115] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.601013][ T1115] EXT4-fs (loop1): 1 truncate cleaned up [ 85.606905][ T1115] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 85.714493][ T1134] device batadv_slave_0 entered promiscuous mode [ 86.244588][ T30] audit: type=1326 audit(1754784817.283:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e37870be9 code=0x7fc00000 [ 86.272325][ T30] audit: type=1326 audit(1754784817.283:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e37870be9 code=0x7fc00000 [ 86.295688][ T30] audit: type=1326 audit(1754784817.283:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e37870be9 code=0x7fc00000 [ 86.346335][ T30] audit: type=1326 audit(1754784817.283:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e37870be9 code=0x7fc00000 [ 86.369936][ T30] audit: type=1326 audit(1754784817.283:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e37870be9 code=0x7fc00000 [ 86.393454][ T30] audit: type=1326 audit(1754784817.283:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e37870be9 code=0x7fc00000 [ 86.421595][ T30] audit: type=1326 audit(1754784817.283:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e37870be9 code=0x7fc00000 [ 87.008338][ T1153] loop3: detected capacity change from 0 to 512 [ 87.075266][ T1153] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,init_itable,. Quota mode: writeback. [ 87.093155][ T1153] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.059303][ T1163] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:338: inode #15: comm syz.3.232: verity file corrupted; can't find descriptor [ 88.074562][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 88.074578][ T30] audit: type=1400 audit(1754784819.093:466): avc: denied { ioctl } for pid=1152 comm="syz.3.232" path="/52/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.104891][ T1163] EXT4-fs (loop3): Remounting filesystem read-only [ 88.111450][ T1163] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 88.313195][ T30] audit: type=1400 audit(1754784819.343:467): avc: denied { setopt } for pid=1172 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.588545][ T610] af_packet: tpacket_rcv: packet too big, clamped from 142 to 4294967286. macoff=82 [ 88.756649][ T1182] loop3: detected capacity change from 0 to 1024 [ 88.852746][ T1182] EXT4-fs (loop3): Ignoring removed orlov option [ 88.894971][ T1182] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 89.220242][ T1201] overlayfs: unrecognized mount option "subj_user={#" or missing value [ 89.274078][ T610] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.286989][ T1202] loop1: detected capacity change from 0 to 16 [ 89.319441][ T1202] erofs: (device loop1): mounted with root inode @ nid 36. [ 89.405208][ T1206] loop4: detected capacity change from 0 to 512 [ 89.634875][ T1206] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,init_itable,. Quota mode: writeback. [ 89.655152][ T1206] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.724559][ T610] usb 3-1: Using ep0 maxpacket: 16 [ 89.946085][ T1212] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:338: inode #15: comm syz.4.248: verity file corrupted; can't find descriptor [ 89.962095][ T1212] EXT4-fs (loop4): Remounting filesystem read-only [ 89.968699][ T1212] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 90.035142][ T610] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 90.048914][ T610] usb 3-1: config 0 has no interface number 0 [ 90.055096][ T610] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 90.065069][ T610] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 90.300885][ T610] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 90.310022][ T610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.323899][ T853] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.529058][ T659] kernel write not supported for file /167/clear_refs (pid: 659 comm: kworker/1:6) [ 90.704067][ T853] usb 4-1: Using ep0 maxpacket: 32 [ 90.854277][ T853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.358636][ T610] usb 3-1: Product: syz [ 91.362850][ T610] usb 3-1: Manufacturer: syz [ 91.572633][ T853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.583334][ T853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.591543][ T853] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 91.602102][ T853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.708178][ T610] usb 3-1: SerialNumber: syz [ 91.713508][ T610] usb 3-1: config 0 descriptor?? [ 91.734113][ T853] usb 4-1: config 0 descriptor?? [ 91.738119][ T1238] input: syz1 as /devices/virtual/input/input7 [ 91.745574][ T1193] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.752903][ T1193] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.810989][ T1240] overlayfs: failed to resolve './file1': -2 [ 91.850776][ T1242] loop4: detected capacity change from 0 to 256 [ 91.865084][ T1242] FAT-fs (loop4): Directory bread(block 64) failed [ 91.876629][ T1242] FAT-fs (loop4): Directory bread(block 65) failed [ 91.883365][ T1242] FAT-fs (loop4): Directory bread(block 66) failed [ 91.890517][ T1242] FAT-fs (loop4): Directory bread(block 67) failed [ 91.897385][ T1242] FAT-fs (loop4): Directory bread(block 68) failed [ 91.904217][ T1242] FAT-fs (loop4): Directory bread(block 69) failed [ 91.910819][ T1242] FAT-fs (loop4): Directory bread(block 70) failed [ 91.922051][ T1242] FAT-fs (loop4): Directory bread(block 71) failed [ 91.932598][ T1242] FAT-fs (loop4): Directory bread(block 72) failed [ 91.940852][ T1242] FAT-fs (loop4): Directory bread(block 73) failed [ 91.983967][ T610] asix: probe of 3-1:0.251 failed with error -71 [ 92.004310][ T610] usb 3-1: USB disconnect, device number 2 [ 92.122439][ T1246] loop1: detected capacity change from 0 to 40427 [ 92.140636][ T1246] F2FS-fs (loop1): invalid crc value [ 92.181506][ T1246] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.221036][ T1246] F2FS-fs (loop1): Start checkpoint disabled! [ 92.228127][ T1246] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 92.271334][ T853] wacom 0003:056A:032C.0002: hidraw0: USB HID vb.27 Device [HID 056a:032c] on usb-dummy_hcd.3-1/input0 [ 93.193070][ T610] usb 4-1: USB disconnect, device number 2 [ 93.290391][ T1261] xt_bpf: check failed: parse error [ 93.312118][ T1263] netlink: 'syz.2.267': attribute type 11 has an invalid length. [ 93.319993][ T1263] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.267'. [ 93.625136][ T1272] input: syz1 as /devices/virtual/input/input11 [ 94.033973][ T30] audit: type=1400 audit(1754784825.063:468): avc: denied { map } for pid=1262 comm="syz.2.267" path="socket:[18785]" dev="sockfs" ino=18785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 94.147222][ T1281] overlayfs: failed to resolve './file1': -2 [ 94.203170][ T1284] loop4: detected capacity change from 0 to 256 [ 94.285956][ T1284] FAT-fs (loop4): Directory bread(block 64) failed [ 94.321963][ T1284] FAT-fs (loop4): Directory bread(block 65) failed [ 94.360327][ T1284] FAT-fs (loop4): Directory bread(block 66) failed [ 94.375386][ T1284] FAT-fs (loop4): Directory bread(block 67) failed [ 94.383234][ T30] audit: type=1400 audit(1754784825.413:469): avc: denied { write } for pid=1287 comm="syz.3.275" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.406864][ T1284] FAT-fs (loop4): Directory bread(block 68) failed [ 94.431995][ T1284] FAT-fs (loop4): Directory bread(block 69) failed [ 94.439693][ T1284] FAT-fs (loop4): Directory bread(block 70) failed [ 94.453000][ T1284] FAT-fs (loop4): Directory bread(block 71) failed [ 94.466295][ T1284] FAT-fs (loop4): Directory bread(block 72) failed [ 94.476669][ T1284] FAT-fs (loop4): Directory bread(block 73) failed [ 94.665843][ T1296] loop3: detected capacity change from 0 to 8192 [ 95.423931][ T1309] loop0: detected capacity change from 0 to 512 [ 95.749382][ T1313] overlayfs: failed to resolve './file1': -2 [ 95.765410][ T1309] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,init_itable,. Quota mode: writeback. [ 95.804291][ T1309] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.931164][ T1321] loop4: detected capacity change from 0 to 1024 [ 96.262073][ T1322] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:338: inode #15: comm syz.0.282: verity file corrupted; can't find descriptor [ 96.277567][ T578] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.285721][ T1322] EXT4-fs (loop0): Remounting filesystem read-only [ 96.292273][ T1322] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 96.349510][ T1321] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.286: Invalid block bitmap block 0 in block_group 0 [ 96.369435][ T1321] Quota error (device loop4): write_blk: dquota write failed [ 96.370476][ T1325] loop1: detected capacity change from 0 to 256 [ 96.377389][ T1321] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 96.393350][ T1321] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.286: Failed to acquire dquot type 0 [ 96.403885][ T39] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 96.409382][ T1321] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.286: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.425581][ T1321] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.286: Invalid inode bitmap blk 0 in block_group 0 [ 96.438598][ T1321] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 96.447264][ T1321] EXT4-fs (loop4): 1 orphan inode deleted [ 96.447323][ T428] Quota error (device loop4): remove_tree: Getting block too big (0 >= 8) [ 96.453001][ T1321] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; nodiscard,grpid,,errors=continue. Quota mode: writeback. [ 96.462671][ T428] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 96.480420][ T1325] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 96.493003][ T30] audit: type=1400 audit(1754784827.523:470): avc: denied { create } for pid=1320 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.743957][ T578] usb 3-1: Using ep0 maxpacket: 16 [ 96.761384][ T1325] x_tables: duplicate underflow at hook 3 [ 97.412785][ T578] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.443933][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.618819][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.664008][ T578] usb 3-1: config 8 has an invalid interface number: 195 but max is 0 [ 97.672402][ T578] usb 3-1: config 8 has no interface number 0 [ 97.678855][ T578] usb 3-1: config 8 interface 195 altsetting 6 has an invalid endpoint descriptor of length 6, skipping [ 97.690430][ T578] usb 3-1: config 8 interface 195 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.704742][ T578] usb 3-1: config 8 interface 195 has no altsetting 0 [ 97.803977][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.813437][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.822925][ T39] usb 4-1: Product: syz [ 97.827462][ T39] usb 4-1: Manufacturer: syz [ 97.832180][ T39] usb 4-1: SerialNumber: syz [ 97.873963][ T578] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01a5, bcdDevice=2b.4e [ 97.883211][ T578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.891686][ T578] usb 3-1: Product: syz [ 97.898666][ T578] usb 3-1: Manufacturer: syz [ 97.903417][ T578] usb 3-1: SerialNumber: syz [ 97.924606][ T1311] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.158871][ T1346] device batadv_slave_0 entered promiscuous mode [ 98.203507][ T1348] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 98.214098][ T39] usb 4-1: 0:2 : does not exist [ 98.224726][ T578] ftdi_sio 3-1:8.195: FTDI USB Serial Device converter detected [ 98.236624][ T578] usb 3-1: Detected FT-X [ 98.255553][ T30] audit: type=1400 audit(1754784829.283:471): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.278562][ T578] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 98.291963][ T39] usb 4-1: USB disconnect, device number 3 [ 98.300291][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.313940][ T578] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 98.334213][ T578] ftdi_sio 3-1:8.195: GPIO initialisation failed: -71 [ 98.347634][ T578] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 98.358449][ T578] usb 3-1: USB disconnect, device number 3 [ 98.365542][ T578] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 98.375244][ T578] ftdi_sio 3-1:8.195: device disconnected [ 99.000722][ T1366] loop4: detected capacity change from 0 to 1024 [ 99.015943][ T1366] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 99.026711][ T1366] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 100.138203][ T1373] device syzkaller0 entered promiscuous mode [ 100.275633][ T1377] loop1: detected capacity change from 0 to 2048 [ 100.640238][ T1366] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,abort,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,usrquota,nodioread_nolock,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 100.723958][ T30] audit: type=1400 audit(1754784831.743:472): avc: denied { setattr } for pid=1365 comm="syz.4.301" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.756614][ T1366] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2755: inode #2: comm syz.4.301: corrupted in-inode xattr [ 100.778321][ T1377] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,nojournal_checksum,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 100.806078][ T1376] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 100.820823][ T1376] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 100.833015][ T1376] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.833015][ T1376] [ 100.842688][ T1376] EXT4-fs (loop1): Total free blocks count 0 [ 100.848880][ T1376] EXT4-fs (loop1): Free/Dirty block details [ 100.854889][ T1376] EXT4-fs (loop1): free_blocks=2415919504 [ 100.860642][ T1376] EXT4-fs (loop1): dirty_blocks=16 [ 100.865808][ T1376] EXT4-fs (loop1): Block reservation details [ 100.871814][ T1376] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 100.884387][ T1366] EXT4-fs (loop4): Remounting filesystem read-only [ 100.904256][ T1366] EXT4-fs error (device loop4): ext4_xattr_ibody_get:603: inode #2: comm syz.4.301: corrupted in-inode xattr [ 100.916145][ T1366] EXT4-fs (loop4): Remounting filesystem read-only [ 101.042667][ T1390] device batadv_slave_0 entered promiscuous mode [ 101.096138][ T1393] loop4: detected capacity change from 0 to 1024 [ 101.160571][ T1393] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.228512][ T1393] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.309: Allocating blocks 497-513 which overlap fs metadata [ 101.262543][ T1393] EXT4-fs (loop4): pa ffff8881115b7150: logic 256, phys. 385, len 8 [ 101.270761][ T1393] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 101.316695][ T30] audit: type=1400 audit(1754784832.353:473): avc: denied { mounton } for pid=1391 comm="syz.4.309" path="/67/file1/bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.336469][ T285] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 18: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 101.348475][ T30] audit: type=1400 audit(1754784832.353:474): avc: denied { append } for pid=1391 comm="syz.4.309" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.378691][ T30] audit: type=1400 audit(1754784832.353:475): avc: denied { remove_name } for pid=285 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.402366][ T285] Trying to write to read-only block-device loop4 [ 101.409059][ T30] audit: type=1400 audit(1754784832.353:476): avc: denied { rmdir } for pid=285 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.433551][ T30] audit: type=1400 audit(1754784832.353:477): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.434454][ T285] Trying to write to read-only block-device loop4 [ 101.521953][ T285] Trying to write to read-only block-device loop4 [ 101.766659][ T30] audit: type=1400 audit(1754784832.353:478): avc: denied { unlink } for pid=285 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 101.791189][ T30] audit: type=1400 audit(1754784832.353:479): avc: denied { unlink } for pid=285 comm="syz-executor" name="memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.830056][ T30] audit: type=1400 audit(1754784832.383:480): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 101.854057][ T285] Trying to write to read-only block-device loop4 [ 101.866427][ T285] Trying to write to read-only block-device loop4 [ 101.873464][ T285] Trying to write to read-only block-device loop4 [ 101.884299][ T285] Trying to write to read-only block-device loop4 [ 101.891474][ T285] Trying to write to read-only block-device loop4 [ 101.892653][ T1410] 9pnet: Insufficient options for proto=fd [ 101.898115][ T285] Trying to write to read-only block-device loop4 [ 101.912330][ T285] Trying to write to read-only block-device loop4 [ 102.014164][ T1418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1418 comm=syz.0.316 [ 102.520944][ T1428] loop0: detected capacity change from 0 to 2048 [ 104.581901][ T1438] loop1: detected capacity change from 0 to 512 [ 104.595797][ T1428] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,nojournal_checksum,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 104.626142][ T1425] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 104.640979][ T1425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 104.653198][ T1425] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.653198][ T1425] [ 104.662866][ T1425] EXT4-fs (loop0): Total free blocks count 0 [ 104.668874][ T1425] EXT4-fs (loop0): Free/Dirty block details [ 104.674803][ T1425] EXT4-fs (loop0): free_blocks=2415919504 [ 104.680551][ T1425] EXT4-fs (loop0): dirty_blocks=16 [ 104.685699][ T1425] EXT4-fs (loop0): Block reservation details [ 104.691701][ T1425] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 104.880671][ T1434] loop2: detected capacity change from 0 to 40427 [ 104.917615][ T1434] F2FS-fs (loop2): invalid crc value [ 104.955168][ T1438] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 104.986024][ T1438] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.997162][ T1434] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.035784][ T1438] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.322: corrupted xattr block 19 [ 105.068256][ T1438] EXT4-fs (loop1): Remounting filesystem read-only [ 105.075879][ T1438] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 105.085011][ T1438] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.322: corrupted xattr block 19 [ 105.106828][ T1438] EXT4-fs (loop1): Remounting filesystem read-only [ 105.116167][ T1438] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 105.121042][ T1451] loop0: detected capacity change from 0 to 512 [ 105.131818][ T30] audit: type=1400 audit(1754784836.163:481): avc: denied { setattr } for pid=1436 comm="syz.1.322" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.154814][ T1434] F2FS-fs (loop2): Start checkpoint disabled! [ 105.163185][ T1438] EXT4-fs error (device loop1): ext4_xattr_block_find:1866: inode #15: comm syz.1.322: corrupted xattr block 19 [ 105.175459][ T1434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 105.184660][ T1438] EXT4-fs (loop1): Remounting filesystem read-only [ 105.194963][ T1451] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 105.208398][ T1451] EXT4-fs (loop0): Ignoring removed bh option [ 105.228276][ T1451] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.240674][ T1451] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.268316][ T1451] EXT4-fs (loop0): 1 truncate cleaned up [ 105.274168][ T1451] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 105.660891][ T1464] loop1: detected capacity change from 0 to 1024 [ 105.677029][ T1464] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.705079][ T1451] netlink: 'syz.0.324': attribute type 27 has an invalid length. [ 105.718109][ T1464] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 105.763437][ T1458] loop4: detected capacity change from 0 to 40427 [ 105.774916][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.782209][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.855590][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 105.855605][ T30] audit: type=1400 audit(1754784836.893:483): avc: denied { connect } for pid=1469 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.886067][ T1451] device batadv_slave_0 left promiscuous mode [ 105.888510][ T1470] loop3: detected capacity change from 0 to 512 [ 105.929344][ T30] audit: type=1326 audit(1754784836.963:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9280398be9 code=0x7ffc0000 [ 106.071942][ T1470] EXT4-fs (loop3): Test dummy encryption mode enabled [ 106.214098][ T1466] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.221202][ T1466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.258891][ T1470] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 106.258891][ T1470] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 106.258891][ T1470] [ 106.271774][ T30] audit: type=1326 audit(1754784836.963:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9280398be9 code=0x7ffc0000 [ 106.301580][ T1466] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.308669][ T1466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.316517][ T1470] EXT4-fs (loop3): Test dummy encryption mode enabled [ 106.323349][ T1470] EXT4-fs (loop3): Unrecognized mount option "fsname=:" or missing value [ 106.339708][ T30] audit: type=1326 audit(1754784836.963:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9280398be9 code=0x7ffc0000 [ 106.374175][ T1466] device veth0_vlan left promiscuous mode [ 106.387689][ T1466] device veth0_vlan entered promiscuous mode [ 106.393549][ T30] audit: type=1326 audit(1754784836.963:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9280398be9 code=0x7ffc0000 [ 106.408464][ T1466] device veth1_macvtap left promiscuous mode [ 106.424333][ T1466] device veth1_macvtap entered promiscuous mode [ 106.431310][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.438903][ T853] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.446986][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.455361][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.464054][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.474997][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.483587][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.491963][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.500516][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.509350][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.517797][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.527143][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 106.535541][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.544119][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 106.552342][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.560905][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.569252][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.577687][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.586021][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.594465][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.602959][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.613451][ T1472] bridge0: port 3(vlan2) entered blocking state [ 106.619800][ T1472] bridge0: port 3(vlan2) entered disabled state [ 106.660177][ T30] audit: type=1400 audit(1754784837.693:488): avc: denied { ioctl } for pid=1486 comm="syz.2.333" path="socket:[19157]" dev="sockfs" ino=19157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.693315][ T30] audit: type=1400 audit(1754784837.723:489): avc: denied { write } for pid=1488 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.715352][ T30] audit: type=1400 audit(1754784837.723:490): avc: denied { nlmsg_write } for pid=1488 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.738135][ T30] audit: type=1400 audit(1754784837.723:491): avc: denied { shutdown } for pid=1488 comm="syz.2.334" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.760202][ T30] audit: type=1400 audit(1754784837.723:492): avc: denied { read } for pid=1488 comm="syz.2.334" path="socket:[19502]" dev="sockfs" ino=19502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.762573][ T853] usb 5-1: Using ep0 maxpacket: 16 [ 107.154469][ T853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.165031][ T853] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 107.176197][ T853] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 107.264935][ T853] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.274358][ T853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 107.282440][ T853] usb 5-1: SerialNumber: syz [ 107.327025][ T853] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 107.644998][ T659] usb 5-1: USB disconnect, device number 2 [ 107.696630][ T1504] input: syz1 as /devices/virtual/input/input12 [ 107.727406][ T1506] loop2: detected capacity change from 0 to 256 [ 107.748514][ T1506] FAT-fs (loop2): Directory bread(block 64) failed [ 107.762345][ T1506] FAT-fs (loop2): Directory bread(block 65) failed [ 107.777712][ T1506] FAT-fs (loop2): Directory bread(block 66) failed [ 107.791602][ T1506] FAT-fs (loop2): Directory bread(block 67) failed [ 107.798621][ T1506] FAT-fs (loop2): Directory bread(block 68) failed [ 107.805473][ T1506] FAT-fs (loop2): Directory bread(block 69) failed [ 107.812169][ T1506] FAT-fs (loop2): Directory bread(block 70) failed [ 107.819174][ T1506] FAT-fs (loop2): Directory bread(block 71) failed [ 107.826029][ T1506] FAT-fs (loop2): Directory bread(block 72) failed [ 107.832644][ T1506] FAT-fs (loop2): Directory bread(block 73) failed [ 108.333912][ T853] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.793899][ T853] usb 2-1: Using ep0 maxpacket: 32 [ 108.831536][ T1531] loop2: detected capacity change from 0 to 256 [ 108.832280][ T1529] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 108.850980][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.864603][ T1531] exfat: Deprecated parameter 'utf8' [ 108.870316][ T1531] exfat: Deprecated parameter 'utf8' [ 108.880887][ T1531] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 108.913980][ T853] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.925373][ T853] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.935177][ T853] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.941876][ T853] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 108.950969][ T853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.964716][ T853] usb 2-1: config 0 descriptor?? [ 109.205842][ T1540] loop2: detected capacity change from 0 to 2048 [ 109.413301][ T1540] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,nojournal_checksum,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 109.439083][ T1536] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 109.453984][ T1536] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 109.466278][ T1536] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.466278][ T1536] [ 109.476369][ T1536] EXT4-fs (loop2): Total free blocks count 0 [ 109.482400][ T1536] EXT4-fs (loop2): Free/Dirty block details [ 109.488371][ T1536] EXT4-fs (loop2): free_blocks=2415919504 [ 109.494370][ T1536] EXT4-fs (loop2): dirty_blocks=16 [ 109.499523][ T1536] EXT4-fs (loop2): Block reservation details [ 109.505866][ T1536] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 109.992820][ T853] wacom 0003:056A:032C.0003: hidraw0: USB HID vb.27 Device [HID 056a:032c] on usb-dummy_hcd.1-1/input0 [ 110.185983][ T1554] loop3: detected capacity change from 0 to 512 [ 110.186120][ T1478] usb 2-1: USB disconnect, device number 4 [ 110.399921][ T1554] EXT4-fs (loop3): Test dummy encryption mode enabled [ 110.406987][ T1554] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 110.426707][ T1554] EXT4-fs (loop3): 1 truncate cleaned up [ 110.432505][ T1554] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 110.897715][ T1564] loop1: detected capacity change from 0 to 256 [ 110.930991][ T1564] FAT-fs (loop1): Directory bread(block 64) failed [ 110.939535][ T1564] FAT-fs (loop1): Directory bread(block 65) failed [ 110.946560][ T1564] FAT-fs (loop1): Directory bread(block 66) failed [ 110.953247][ T1564] FAT-fs (loop1): Directory bread(block 67) failed [ 110.958352][ T659] Bluetooth: hci0: command 0x1003 tx timeout [ 110.968034][ T1564] FAT-fs (loop1): Directory bread(block 68) failed [ 110.968976][ T1015] Bluetooth: hci0: sending frame failed (-49) [ 110.975423][ T1564] FAT-fs (loop1): Directory bread(block 69) failed [ 110.987319][ T1564] FAT-fs (loop1): Directory bread(block 70) failed [ 110.994214][ T1564] FAT-fs (loop1): Directory bread(block 71) failed [ 111.001487][ T1564] FAT-fs (loop1): Directory bread(block 72) failed [ 111.008522][ T1564] FAT-fs (loop1): Directory bread(block 73) failed [ 111.593896][ T853] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.794448][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 111.794462][ T30] audit: type=1400 audit(1754784842.833:497): avc: denied { connect } for pid=1582 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.084800][ T30] audit: type=1400 audit(1754784843.113:498): avc: denied { setopt } for pid=1582 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.164912][ T853] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.363925][ T853] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 112.373332][ T853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 112.381688][ T853] usb 3-1: Product: syz [ 112.386059][ T853] usb 3-1: Manufacturer: syz [ 112.390822][ T853] usb 3-1: SerialNumber: syz [ 112.456851][ T1590] loop0: detected capacity change from 0 to 1024 [ 112.470686][ T1590] EXT4-fs (loop0): Ignoring removed orlov option [ 112.485759][ T1590] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000001045,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,noauto_da_alloc,orlov,user_xattr,nodioread_nolock,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 112.524670][ T30] audit: type=1400 audit(1754784843.553:499): avc: denied { mounton } for pid=1589 comm="syz.0.365" path="/84/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.550383][ T30] audit: type=1400 audit(1754784843.563:500): avc: denied { write } for pid=1589 comm="syz.0.365" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.572408][ T30] audit: type=1400 audit(1754784843.563:501): avc: denied { add_name } for pid=1589 comm="syz.0.365" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.593128][ T30] audit: type=1400 audit(1754784843.563:502): avc: denied { setattr } for pid=1589 comm="syz.0.365" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.615155][ T30] audit: type=1400 audit(1754784843.563:503): avc: denied { remove_name } for pid=1589 comm="syz.0.365" name="#17" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.637237][ T30] audit: type=1400 audit(1754784843.563:504): avc: denied { rename } for pid=1589 comm="syz.0.365" name="#17" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 112.658954][ T30] audit: type=1400 audit(1754784843.563:505): avc: denied { unlink } for pid=1589 comm="syz.0.365" name="#17" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 112.681781][ T853] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.694420][ T30] audit: type=1400 audit(1754784843.563:506): avc: denied { write } for pid=1589 comm="syz.0.365" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.734061][ T853] usb 3-1: USB disconnect, device number 4 [ 112.755252][ T853] usblp0: removed [ 113.637620][ T1610] input: syz1 as /devices/virtual/input/input17 [ 113.670965][ T26] Bluetooth: hci0: command 0x1001 tx timeout [ 113.677343][ T1015] Bluetooth: hci0: sending frame failed (-49) [ 113.698059][ T1614] loop0: detected capacity change from 0 to 256 [ 113.777259][ T1614] FAT-fs (loop0): Directory bread(block 64) failed [ 113.784017][ T1614] FAT-fs (loop0): Directory bread(block 65) failed [ 113.790804][ T1614] FAT-fs (loop0): Directory bread(block 66) failed [ 113.797456][ T1614] FAT-fs (loop0): Directory bread(block 67) failed [ 113.804286][ T1614] FAT-fs (loop0): Directory bread(block 68) failed [ 113.810847][ T1614] FAT-fs (loop0): Directory bread(block 69) failed [ 113.817885][ T1614] FAT-fs (loop0): Directory bread(block 70) failed [ 113.824489][ T1614] FAT-fs (loop0): Directory bread(block 71) failed [ 113.831302][ T1614] FAT-fs (loop0): Directory bread(block 72) failed [ 113.838175][ T1614] FAT-fs (loop0): Directory bread(block 73) failed [ 114.685331][ T1632] loop1: detected capacity change from 0 to 40427 [ 114.701668][ T1632] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 114.709798][ T1632] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 114.720589][ T1632] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.751432][ T1632] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.758709][ T1632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.837524][ T1640] loop0: detected capacity change from 0 to 512 [ 115.070419][ T1640] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 115.077804][ T1640] EXT4-fs (loop0): Test dummy encryption mode enabled [ 115.084649][ T1640] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.118253][ T1640] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.124957][ T1640] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.381: inode #13: comm syz.0.381: iget: illegal inode # [ 115.224463][ T1640] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.381: couldn't read orphan inode 13 (err -117) [ 115.229707][ T1647] input: syz1 as /devices/virtual/input/input18 [ 115.237039][ T1640] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,dioread_nolock,max_dir_size_kb=0x000000000000222a,nouid32,test_dummy_encryption,bsdgroups,,errors=continue. Quota mode: none. [ 115.287925][ T1649] loop3: detected capacity change from 0 to 1024 [ 115.306191][ T1635] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 115.313558][ T1635] EXT4-fs (loop0): Test dummy encryption mode enabled [ 115.320430][ T1635] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.332587][ T1635] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 115.355679][ T1635] EXT4-fs error (device loop0): ext4_remount:6024: comm syz.0.381: Abort forced by user [ 115.366392][ T1635] EXT4-fs (loop0): Remounting filesystem read-only [ 115.372942][ T1635] EXT4-fs (loop0): re-mounted. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,dioread_nolock,max_dir_size_kb=0x000000000000222a,nouid32,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 115.408219][ T1649] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.431428][ T1649] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 115.662860][ T1658] netlink: 324 bytes leftover after parsing attributes in process `syz.2.386'. [ 115.714260][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 115.987114][ T1649] bridge0: port 3(vlan2) entered blocking state [ 115.993435][ T1649] bridge0: port 3(vlan2) entered disabled state [ 116.482291][ T1666] loop3: detected capacity change from 0 to 512 [ 116.954891][ T1666] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 116.963029][ T1666] System zones: 0-2, 18-18, 34-34 [ 116.975814][ T1666] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #3: comm syz.3.388: corrupted inode contents [ 116.988627][ T1666] EXT4-fs error (device loop3): ext4_dirty_inode:6071: inode #3: comm syz.3.388: mark_inode_dirty error [ 117.001821][ T1666] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #3: comm syz.3.388: corrupted inode contents [ 117.014280][ T1666] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.388: mark_inode_dirty error [ 117.027209][ T1666] __quota_error: 10 callbacks suppressed [ 117.027235][ T1666] Quota error (device loop3): write_blk: dquota write failed [ 117.040573][ T1666] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 117.050614][ T1666] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.388: Failed to acquire dquot type 0 [ 117.068814][ T1666] EXT4-fs (loop3): 1 orphan inode deleted [ 117.074637][ T1666] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 117.088320][ T1666] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.312730][ T30] audit: type=1400 audit(1754784848.343:517): avc: denied { setattr } for pid=1669 comm="syz.2.389" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.863872][ T853] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.101695][ T1681] loop1: detected capacity change from 0 to 1024 [ 118.165309][ T1681] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.206676][ T1681] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.393: Allocating blocks 497-513 which overlap fs metadata [ 118.220825][ T1681] EXT4-fs (loop1): pa ffff8881115b7348: logic 256, phys. 385, len 8 [ 118.228919][ T1681] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 118.364167][ T853] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.395480][ T853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.542713][ T281] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 18: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 118.557933][ T281] bio_check_ro: 1 callbacks suppressed [ 118.557945][ T281] Trying to write to read-only block-device loop1 [ 118.569994][ T281] Trying to write to read-only block-device loop1 [ 118.576565][ T281] Trying to write to read-only block-device loop1 [ 118.576578][ T853] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.583077][ T281] Trying to write to read-only block-device loop1 [ 118.592311][ T853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.599220][ T281] Trying to write to read-only block-device loop1 [ 118.613413][ T281] Trying to write to read-only block-device loop1 [ 118.620066][ T281] Trying to write to read-only block-device loop1 [ 118.626729][ T281] Trying to write to read-only block-device loop1 [ 118.633240][ T281] Trying to write to read-only block-device loop1 [ 118.641648][ T281] Trying to write to read-only block-device loop1 [ 118.651117][ T853] usb 3-1: SerialNumber: syz [ 118.663385][ T1692] netlink: 96 bytes leftover after parsing attributes in process `syz.3.397'. [ 118.780622][ T332] Bluetooth: hci1: Frame reassembly failed (-84) [ 118.937417][ T853] usb 3-1: 0:2 : does not exist [ 119.215505][ T853] usb 3-1: USB disconnect, device number 5 [ 119.291819][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.592553][ T1721] loop1: detected capacity change from 0 to 2048 [ 120.619339][ T1728] loop0: detected capacity change from 0 to 1024 [ 120.689559][ T1728] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.716425][ T30] audit: type=1400 audit(1754784851.753:518): avc: denied { name_bind } for pid=1731 comm="syz.1.409" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 120.746682][ T1728] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.408: Allocating blocks 385-513 which overlap fs metadata [ 120.767304][ T1736] loop4: detected capacity change from 0 to 1024 [ 120.768355][ T1727] EXT4-fs (loop0): pa ffff8881115b79d8: logic 16, phys. 129, len 24 [ 120.781755][ T1727] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 120.833891][ T1476] Bluetooth: hci1: command 0x1003 tx timeout [ 120.843505][ T47] Bluetooth: hci1: sending frame failed (-49) [ 121.392900][ T387] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.334080][ T1768] device pim6reg1 entered promiscuous mode [ 122.518589][ T1770] loop1: detected capacity change from 0 to 1024 [ 122.617626][ T1774] loop1: detected capacity change from 0 to 256 [ 122.653180][ T1776] loop4: detected capacity change from 0 to 1024 [ 122.731805][ T1778] loop0: detected capacity change from 0 to 8192 [ 123.049145][ T336] Bluetooth: hci1: command 0x1001 tx timeout [ 123.061931][ T1705] Bluetooth: hci1: sending frame failed (-49) [ 123.394458][ T336] Bluetooth: hci0: command 0x1003 tx timeout [ 123.405934][ T1705] Bluetooth: hci0: sending frame failed (-49) [ 123.897697][ T1796] loop1: detected capacity change from 0 to 256 [ 123.948527][ T1796] loop1: detected capacity change from 0 to 1024 [ 124.575966][ T1803] loop0: detected capacity change from 0 to 1024 [ 124.645674][ T1803] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.661148][ T1803] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.436: Allocating blocks 385-513 which overlap fs metadata [ 124.677416][ T1802] EXT4-fs (loop0): pa ffff8881115b7498: logic 16, phys. 129, len 24 [ 124.685653][ T1802] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 124.876392][ T1813] loop1: detected capacity change from 0 to 1024 [ 125.074363][ T30] audit: type=1400 audit(1754784856.023:519): avc: denied { connect } for pid=1809 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.207126][ T1476] Bluetooth: hci1: command 0x1009 tx timeout [ 125.474036][ T1476] Bluetooth: hci0: command 0x1001 tx timeout [ 125.480114][ T1705] Bluetooth: hci0: sending frame failed (-49) [ 126.053271][ T1828] loop1: detected capacity change from 0 to 2048 [ 126.080101][ T1832] loop4: detected capacity change from 0 to 256 [ 126.104695][ T1836] loop1: detected capacity change from 0 to 1024 [ 126.226377][ T1836] loop1: detected capacity change from 0 to 512 [ 126.242042][ T30] audit: type=1400 audit(1754784857.273:520): avc: denied { remount } for pid=1835 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.039172][ T1853] loop0: detected capacity change from 0 to 512 [ 127.213802][ T1853] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.454: inode #1: comm syz.0.454: iget: illegal inode # [ 127.227469][ T1853] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.454: error while reading EA inode 1 err=-117 [ 127.241311][ T1853] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.454: inode #1: comm syz.0.454: iget: illegal inode # [ 127.254979][ T1853] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.454: error while reading EA inode 1 err=-117 [ 127.268246][ T1853] EXT4-fs (loop0): 1 orphan inode deleted [ 127.274047][ T1853] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 127.330081][ T1856] loop4: detected capacity change from 0 to 256 [ 127.342664][ T1856] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙' [ 127.463911][ T659] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.553880][ T336] Bluetooth: hci0: command 0x1009 tx timeout [ 127.823943][ T659] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 127.834348][ T659] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.845531][ T659] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 127.855539][ T659] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.868456][ T659] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.877517][ T659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.934991][ T659] usb 2-1: invalid MIDI out EP 0 [ 127.940221][ T659] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 128.138732][ T659] usb 2-1: USB disconnect, device number 5 [ 128.881885][ T1872] loop0: detected capacity change from 0 to 512 [ 129.125890][ T1872] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.137435][ T1872] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.362147][ T1876] loop4: detected capacity change from 0 to 1024 [ 129.390306][ T30] audit: type=1400 audit(1754784860.423:521): avc: denied { block_suspend } for pid=1878 comm="syz.1.462" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.603785][ T1905] loop1: detected capacity change from 0 to 40427 [ 131.059919][ T1482] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.101113][ T1915] 9pnet: Insufficient options for proto=fd [ 131.150046][ T1921] loop4: detected capacity change from 0 to 512 [ 131.889624][ T1934] loop1: detected capacity change from 0 to 128 [ 131.962695][ T1482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.973973][ T1482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.984356][ T1482] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 131.993429][ T1482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.004410][ T1482] usb 4-1: config 0 descriptor?? [ 132.048555][ T1943] ================================================================== [ 132.056759][ T1943] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 132.065080][ T1943] Read of size 8 at addr ffff8881167d26c0 by task syz.4.486/1943 [ 132.072823][ T1943] [ 132.075180][ T1943] CPU: 0 PID: 1943 Comm: syz.4.486 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 132.085261][ T1943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.095347][ T1943] Call Trace: [ 132.098641][ T1943] [ 132.101576][ T1943] __dump_stack+0x21/0x30 [ 132.105927][ T1943] dump_stack_lvl+0xee/0x150 [ 132.110535][ T1943] ? show_regs_print_info+0x20/0x20 [ 132.115738][ T1943] ? load_image+0x3a0/0x3a0 [ 132.120250][ T1943] print_address_description+0x7f/0x2c0 [ 132.125800][ T1943] ? tc_setup_flow_action+0x870/0x3240 [ 132.131265][ T1943] kasan_report+0xf1/0x140 [ 132.135699][ T1943] ? tc_setup_flow_action+0x870/0x3240 [ 132.141159][ T1943] __asan_report_load8_noabort+0x14/0x20 [ 132.146792][ T1943] tc_setup_flow_action+0x870/0x3240 [ 132.152111][ T1943] mall_replace_hw_filter+0x293/0x820 [ 132.157496][ T1943] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 132.163568][ T1943] ? mall_set_parms+0x520/0x520 [ 132.168795][ T1943] ? tcf_exts_destroy+0xb0/0xb0 [ 132.173653][ T1943] ? mall_set_parms+0x1e8/0x520 [ 132.178505][ T1943] mall_change+0x526/0x740 [ 132.182926][ T1943] ? __kasan_check_write+0x14/0x20 [ 132.188036][ T1943] ? mall_get+0xa0/0xa0 [ 132.192196][ T1943] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 132.198104][ T1943] tc_new_tfilter+0x12a2/0x1870 [ 132.202971][ T1943] ? tcf_gate_entry_destructor+0x20/0x20 [ 132.208606][ T1943] ? security_capable+0x87/0xb0 [ 132.213667][ T1943] ? ns_capable+0x8c/0xf0 [ 132.218017][ T1943] ? netlink_net_capable+0x125/0x160 [ 132.223314][ T1943] ? tcf_gate_entry_destructor+0x20/0x20 [ 132.228955][ T1943] rtnetlink_rcv_msg+0x81b/0xb90 [ 132.233899][ T1943] ? rtnetlink_bind+0x80/0x80 [ 132.238589][ T1943] ? memcpy+0x56/0x70 [ 132.242579][ T1943] ? avc_has_perm_noaudit+0x2f4/0x460 [ 132.247956][ T1943] ? arch_stack_walk+0xee/0x140 [ 132.252812][ T1943] ? avc_denied+0x1b0/0x1b0 [ 132.257326][ T1943] ? stack_trace_save+0x98/0xe0 [ 132.262178][ T1943] ? avc_has_perm+0x158/0x240 [ 132.266884][ T1943] ? avc_has_perm_noaudit+0x460/0x460 [ 132.272378][ T1943] ? x64_sys_call+0x4b/0x9a0 [ 132.277000][ T1943] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 132.282390][ T1943] netlink_rcv_skb+0x1e0/0x430 [ 132.287163][ T1943] ? rtnetlink_bind+0x80/0x80 [ 132.291851][ T1943] ? netlink_ack+0xb60/0xb60 [ 132.296454][ T1943] ? __netlink_lookup+0x387/0x3b0 [ 132.301667][ T1943] rtnetlink_rcv+0x1c/0x20 [ 132.306099][ T1943] netlink_unicast+0x876/0xa40 [ 132.310880][ T1943] netlink_sendmsg+0x86a/0xb70 [ 132.315651][ T1943] ? netlink_getsockopt+0x530/0x530 [ 132.320859][ T1943] ? security_socket_sendmsg+0x82/0xa0 [ 132.326327][ T1943] ? netlink_getsockopt+0x530/0x530 [ 132.331556][ T1943] ____sys_sendmsg+0x5a2/0x8c0 [ 132.336339][ T1943] ? __sys_sendmsg_sock+0x40/0x40 [ 132.341378][ T1943] ? import_iovec+0x7c/0xb0 [ 132.345883][ T1943] ___sys_sendmsg+0x1f0/0x260 [ 132.350566][ T1943] ? __sys_sendmsg+0x250/0x250 [ 132.355341][ T1943] ? sock_show_fdinfo+0xa0/0xa0 [ 132.360209][ T1943] ? __fdget+0x1a1/0x230 [ 132.364456][ T1943] __x64_sys_sendmsg+0x1e2/0x2a0 [ 132.369410][ T1943] ? ___sys_sendmsg+0x260/0x260 [ 132.374269][ T1943] ? __kasan_check_write+0x14/0x20 [ 132.379394][ T1943] ? switch_fpu_return+0x15d/0x2c0 [ 132.384628][ T1943] x64_sys_call+0x4b/0x9a0 [ 132.389055][ T1943] do_syscall_64+0x4c/0xa0 [ 132.393644][ T1943] ? clear_bhb_loop+0x50/0xa0 [ 132.398342][ T1943] ? clear_bhb_loop+0x50/0xa0 [ 132.403040][ T1943] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.408960][ T1943] RIP: 0033:0x7f0e37870be9 [ 132.413384][ T1943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.433120][ T1943] RSP: 002b:00007f0e362d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.441553][ T1943] RAX: ffffffffffffffda RBX: 00007f0e37a97fa0 RCX: 00007f0e37870be9 [ 132.449523][ T1943] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 132.457500][ T1943] RBP: 00007f0e378f3e19 R08: 0000000000000000 R09: 0000000000000000 [ 132.465468][ T1943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.473447][ T1943] R13: 00007f0e37a98038 R14: 00007f0e37a97fa0 R15: 00007ffda3764df8 [ 132.481444][ T1943] [ 132.484659][ T1943] [ 132.486981][ T1943] Allocated by task 1943: [ 132.491306][ T1943] __kasan_kmalloc+0xda/0x110 [ 132.496000][ T1943] __kmalloc+0x13d/0x2c0 [ 132.500243][ T1943] tcf_idr_create+0x5f/0x790 [ 132.504834][ T1943] tcf_idr_create_from_flags+0x61/0x70 [ 132.510297][ T1943] tcf_gact_init+0x346/0x580 [ 132.514883][ T1943] tcf_action_init_1+0x3f7/0x6a0 [ 132.519829][ T1943] tcf_action_init+0x1e9/0x710 [ 132.524595][ T1943] tcf_exts_validate+0x217/0x520 [ 132.529620][ T1943] mall_set_parms+0x48/0x520 [ 132.534214][ T1943] mall_change+0x45a/0x740 [ 132.538632][ T1943] tc_new_tfilter+0x12a2/0x1870 [ 132.543500][ T1943] rtnetlink_rcv_msg+0x81b/0xb90 [ 132.548432][ T1943] netlink_rcv_skb+0x1e0/0x430 [ 132.553201][ T1943] rtnetlink_rcv+0x1c/0x20 [ 132.557618][ T1943] netlink_unicast+0x876/0xa40 [ 132.562378][ T1943] netlink_sendmsg+0x86a/0xb70 [ 132.567139][ T1943] ____sys_sendmsg+0x5a2/0x8c0 [ 132.571906][ T1943] ___sys_sendmsg+0x1f0/0x260 [ 132.576587][ T1943] __x64_sys_sendmsg+0x1e2/0x2a0 [ 132.581522][ T1943] x64_sys_call+0x4b/0x9a0 [ 132.585941][ T1943] do_syscall_64+0x4c/0xa0 [ 132.590372][ T1943] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.596260][ T1943] [ 132.598577][ T1943] The buggy address belongs to the object at ffff8881167d2600 [ 132.598577][ T1943] which belongs to the cache kmalloc-192 of size 192 [ 132.612624][ T1943] The buggy address is located 0 bytes to the right of [ 132.612624][ T1943] 192-byte region [ffff8881167d2600, ffff8881167d26c0) [ 132.626244][ T1943] The buggy address belongs to the page: [ 132.631869][ T1943] page:ffffea000459f480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1167d2 [ 132.642214][ T1943] flags: 0x4000000000000200(slab|zone=1) [ 132.647886][ T1943] raw: 4000000000000200 0000000000000000 0000000800000001 ffff888100042c00 [ 132.656486][ T1943] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 132.665073][ T1943] page dumped because: kasan: bad access detected [ 132.671495][ T1943] page_owner tracks the page as allocated [ 132.677209][ T1943] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 105, ts 6733571543, free_ts 0 [ 132.692234][ T1943] post_alloc_hook+0x192/0x1b0 [ 132.697019][ T1943] prep_new_page+0x1c/0x110 [ 132.701714][ T1943] get_page_from_freelist+0x2cc5/0x2d50 [ 132.707278][ T1943] __alloc_pages+0x18f/0x440 [ 132.711874][ T1943] new_slab+0xa1/0x4d0 [ 132.715958][ T1943] ___slab_alloc+0x381/0x810 [ 132.720564][ T1943] __slab_alloc+0x49/0x90 [ 132.724900][ T1943] kmem_cache_alloc_trace+0x146/0x270 [ 132.730287][ T1943] kernfs_fop_open+0x343/0xb30 [ 132.735276][ T1943] do_dentry_open+0x834/0x1010 [ 132.740056][ T1943] vfs_open+0x73/0x80 [ 132.744047][ T1943] path_openat+0x2646/0x2f10 [ 132.748653][ T1943] do_filp_open+0x1b3/0x3e0 [ 132.753154][ T1943] do_sys_openat2+0x14c/0x7b0 [ 132.757830][ T1943] __x64_sys_openat+0x136/0x160 [ 132.762677][ T1943] x64_sys_call+0x219/0x9a0 [ 132.767188][ T1943] page_owner free stack trace missing [ 132.772569][ T1943] [ 132.774890][ T1943] Memory state around the buggy address: [ 132.780582][ T1943] ffff8881167d2580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 132.788750][ T1943] ffff8881167d2600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 132.796821][ T1943] >ffff8881167d2680: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 132.804882][ T1943] ^ [ 132.811040][ T1943] ffff8881167d2700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.819128][ T1943] ffff8881167d2780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 132.827190][ T1943] ================================================================== [ 132.835250][ T1943] Disabling lock debugging due to kernel taint [ 132.870426][ T30] audit: type=1400 audit(1754784863.903:522): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 132.897036][ T30] audit: type=1400 audit(1754784863.933:523): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.919593][ T30] audit: type=1400 audit(1754784863.933:524): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.941063][ T30] audit: type=1400 audit(1754784863.933:525): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.961775][ T30] audit: type=1400 audit(1754784863.933:526): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.982284][ T30] audit: type=1400 audit(1754784863.933:527): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.005297][ T30] audit: type=1400 audit(1754784863.933:528): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.765466][ T1482] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0004/input/input19 [ 133.778639][ T1482] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0004/input/input20 [ 133.791442][ T1482] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 133.965852][ T336] usb 4-1: USB disconnect, device number 4