last executing test programs: 9.803032808s ago: executing program 2: openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() clock_gettime(0xa, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xa, 0x61, 0x12, 0x4c}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 9.771426493s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000300)={0x3}) 8.830867686s ago: executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000359, 0x0, 0x0) 5.820053708s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003e00)=@newlinkprop={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x7}]}, 0x28}}, 0x0) 4.462759106s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]}) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.295660042s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x62, 0x9, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r0, &(0x7f00000008c0), 0x0}, 0x20) 4.183659889s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x364, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0xda042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071116d000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) io_uring_setup(0x3c7b, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB='m\x00\x00\x00\"a'], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x90) sendfile(r0, r0, 0x0, 0x2400) 4.168536211s ago: executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) unshare(0x20000600) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80000001}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200000a, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b5, &(0x7f00000001c0)="$eJzs3U9rK1UUAPAz+dc8XSSIG0VwQBeuyqtbN43yBLErJYK6MfhakKQUWghYwdpVP4FL8Wu4defabyC4Fdy1i8rIZGaaxCZttP/A/n6b3t57z52TOUOyyskXr+0On+8lcXz6W7TbSdQ2YzPOkuhGLSrfRSMAgP+PsyyLP7OIaBb/JytHNmp3lxUAcJeKz//CQ+cCANyPjz/97MPe1tazj9K0Ha90Tsb9JCJ2T8b9Yr23E1/FKLbjaXTiPCK7UIzf/2DrWTTSXDfe3D0a98dz5/f+iCeT+I3oRHdx/EZaKOP7EfnfZrwQafR2mtVRnXh5cfzbC+Kj34q33pjJfz068euXsRejeB557DT+2400fS/7/vSbz/PL5PFJLfprk31TWf1+KgIAAAAAAAAAAAAAAAAAAAAAwGOwnqZJ0b5n0r8nnyr779TPJ+vraaU735+niL/oF1z0B8qibNFzlMUPVX+dp2maZuXGaXwjXm34YQEAAAAAAAAAAAAAAAAAAADIHXx9OByMRtv7Nx7Uh4NR1Q2g+lr/fz1wc2bm9TgcDurLD1xb/Vqz3QbyXK/cHI1G3MJtuX4QPz/J81my58cy339/8tq0uJ+U4VVhbvVVvPTuRYZpuVTd5OEgue5a7apwP80utWLlNJJkbmZS29H2fjZ5JM6z+Zq2l9zM1i3cjfwZbb24cOmvLMtWO+ed34salTPJpMXGamk0y8HSp6V9uRa/LD9w6VtG/abvOQAAAAAAAAAAAAAAAAAAwGLzX5z+h+MrQ2t3lhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LPp7/9Xg3ZEzM9cGhyVwVftKQet2D944JcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/B3AAAA//+VpEaB") mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/41, 0x29) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in=@private}]}]}, 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000fe8000000000000000000000000000aa600000000000000029000000370000000108000000000000c910fe880000000000000000000000000001050203ffc91020010000000000000000000000000002050200020001000108000000000000000001080000000000000000000000000088"], 0x110}}], 0x1, 0x0) getdents64(r3, 0x0, 0x2e) 3.833951023s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000300)={0x3}) 3.52578292s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3.412595487s ago: executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() clock_gettime(0xa, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xa, 0x61, 0x12, 0x4c}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2.67301356s ago: executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8, 0xc1}}}}, 0x30}}, 0x0) 2.401373082s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008402, &(0x7f0000000680)={[{@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@lazytime}, {@debug}, {@usrquota}, {@errors_continue}]}, 0x1, 0x5fe, &(0x7f0000000c00)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r5, &(0x7f00000001c0), r4, 0x0, 0xffffffffa003e45c, 0x700000000000000) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfcd5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a331277", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f00000000c0)=0x9, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r7, &(0x7f0000000840)=[{&(0x7f0000000340)="b8", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f00000004c0)="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", 0x196, 0x805, 0x0, 0x0) 2.327949913s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]}) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.122644235s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00eb9f8f280000000000000a0080"], 0x38}}, 0x0) 2.027629229s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x62, 0x9, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r0, &(0x7f00000008c0), 0x0}, 0x20) 2.003153823s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800004000000061107a0000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 1.927184535s ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x364, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0xda042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071116d000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) io_uring_setup(0x3c7b, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB='m\x00\x00\x00\"a'], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x90) sendfile(r0, r0, 0x0, 0x2400) 1.874810123s ago: executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) unshare(0x20000600) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80000001}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200000a, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/41, 0x29) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in=@private}]}]}, 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000fe8000000000000000000000000000aa600000000000000029000000370000000108000000000000c910fe880000000000000000000000000001050203ffc91020010000000000000000000000000002050200020001000108000000000000000001080000000000000000000000000088"], 0x110}}], 0x1, 0x0) getdents64(r3, 0x0, 0x2e) 1.218111293s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 856.819499ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1081000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) r1 = open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)) 835.559242ms ago: executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000178000/0x3000)=nil, 0x3000) munlock(&(0x7f00000e1000/0x800000)=nil, 0x800000) 815.541895ms ago: executing program 3: capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) 753.334634ms ago: executing program 2: openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() clock_gettime(0xa, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xa, 0x61, 0x12, 0x4c}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 741.686156ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15aba33a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f722fc58055b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775aafb8c5509086fdba99dba8fbbc7557df3769126732212b33004a42396dc614c501eddeec8a88861f6de3c01bcdf31dfbd3e1165bbb9591791aed6773b6ba1b221c46e5f2c9d6e55a659b29b7865b0a4a66d7ae364022"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 639.507652ms ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000100000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(0xffffffffffffffff) setreuid(0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x800) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21404e, &(0x7f00000000c0), 0x1, 0x512, &(0x7f00000005c0)="$eJzs3c9vI1cdAPDvOPE2201xSjmUSi0VLcpWsHbSQBtxaIuEuFUClfsSJU4UxYmj2Gk3oUKp+AOQEIJKnDhxQeIPQELlP6hWWgnuCBAIwS4cEAIGjT3ezVrjTZb1j8X5fKSXefM8M9/37PV4Zt7bmQAurBcj4q2ImImIVyKikpeX8hQn3ZQtd+f2++tZio+TeOcvSSR5WXRy91zJV5vrTgq1jo531hqN+kE+X2vv7tdaR8fXtnfXtupb9b2VleXXVl9fjbmlobQza9cbX/3DD7/306+98csvvPfb63+6+p2s1vP56912DF/3nSln70Xm1j/z8oNRBJuASp7Kk64IAADn8kxEfDIiPts5/q/ETMz2XnJIBwAAAFMifXM+/pVEpAAAAMDUerMzBjYpVfPxvvNRKlWr3TG8n4onS41mq/35zebh3kZ3rOxClEub2436Uj7ucyHKSTa/3Mnfm3+1b34lIp6OiB9ULnfmq+vNxsakL34AAADABXGl7/z/75Xu+T8AAAAwZRYmXQEAAABg5Aad/ydjrgcAAAAwOvr/AQAAYKp9/e23s5T2nn+98e7R4U7z3Wsb9dZOdfdwvbrePNivbjWbW5179u2etb1Gs7n/xdg7vFFr11vtWuvo+Ppu83CvfX279whsAAAAYNye/sxHv0ki4uTLlzspcyn7MzNgBWMFYGqUHmbh34+uHsD4DfqZB6bf7KQrAEzOyaQrAEzafbf6KDgoOD14575rBh+Prk4AAMBwLX66uP8/OwUoT7pywEg9VP8/MFX+9/5/HQfw/66o//9Xgxe/Ocq6AONVNgIQLryzHvUx8OYd5+7/T9MztwUAAIzUfHbsfxJRzfsC56NUqlYjnur8V/9ysrndqC9FxCci4teV8hPZ/HJnzcTjAQEAAAAAAAAAAAAAAAAAAAAAAADgnNI0iRQAAACYahGlPyb5878WKy/P918fuJT8o9KZRsR7P37nRzfW2u2D5az8r3fL2x/m5a9O4goGAAAAXHiz/QW98/TeeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNOd2++v99I44/75KxGxUBR/NuY607koR8STf0ti9tR6SUTMDCH+yQcR8WxR/CSrVizkteiPX4qIy+OJ/3yapqUoiH9lCPHhIvso2/+8VfT9K8WLnWnx9382T49q8P6vdHf/NzNg//fUOWM8d+vntYHxP4h4brZ4/9OLnwyI/1LRBgvelG998/h4UPz0JxGLhb8/yX2xau3d/Vrr6Pja9u7aVn2rvreysvza6uurX1pdqm1uN+r538IY33/+F//pK/p32tVpfwyIv3BG+1/OMuXTjekPkwe7deP2M91suW8TnfhXXyr+/J99QPzs38Tn8t+B7PXFXv6kmz/thZ/dfKGwYnn8jQHtP+vzvzpoo31e+cZ3f3fORQGAMWgdHe+sNRr1g5FnPkzTdFyxZB7DzNzjUY2LkXkiHmX1YVzZAgAAHjf3DvofYqVvj7BCAAAAAAAAAAAAAAAAAAAAcAG1jqI04DZgM3FpOHcj6495MpmmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA80H8DAAD//zwy4rg=") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 374.705663ms ago: executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r4, 0x719, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r6) r7 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x0, 0xcf, 0x48, &(0x7f00000003c0)="d91eb262f58cbb7f3b274ab40494c031ae6faa3946928ddd5d9920cbf49ae4317aa06404367072f1efd51ce4348ba3e2b887b475fa1eb5adc9f04f4cb811f476e1f43d4eba55fba460b896b4416a10644dc9fd2c2b4efc28160adb199eeb3f46d8d9630c700d483d0e7e26013cf77ccdea2cab14c8ff781099249ad82278b5f58dc7805630768cb2e836c62f6dac5887cd3e8cf318fdc9bb205714ace3e874c20dc4435994c680c6897d94b7be5e3c00e0689377553f0388f44061a8a8df16aeafcc2662550fd10cfb191a0a11cbe7", &(0x7f0000000740)=""/72, 0x7, 0x0, 0xfff, 0x0, &(0x7f00000021c0)="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", &(0x7f0000000240), 0x0, 0x0, 0x3}, 0x50) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x700}) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @multicast2, 0x13a621ac24c92558}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)={0x3ff, {{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x0, 0x1, [{{0x2, 0x4e21, @multicast1}}]}, 0x110) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000000100)=""/13, 0xd}], 0x2, 0x5e, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, 0x0}, 0x90) 130.52574ms ago: executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r0, 0xf0ffffff0f0000, 0x2) 115.537503ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800004000000061107a0000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 0s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)={0x20002007}) kernel console output (not intermixed with test programs): found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.238691][ T369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.281913][ T369] usb 3-1: config 0 descriptor?? [ 38.707813][ T479] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,minixdf,stripe=0x0000000000000020,,errors=continue [ 38.732295][ T479] ext4 filesystem being mounted at /root/syzkaller-testdir136734273/syzkaller.B5NNDf/3/file0 supports timestamps until 2038 (0x7fffffff) [ 38.911150][ T490] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 39.412081][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.419367][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.447218][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.464957][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.482490][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.495429][ T495] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 345: padding at end of block bitmap is not set [ 39.513886][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.531388][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.539185][ T495] EXT4-fs error (device loop0) in ext4_free_blocks:5019: Corrupt filesystem [ 39.558314][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.611111][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.618942][ T463] F2FS-fs (loop3): invalid crc value [ 39.624974][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.655978][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.666455][ T463] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.677196][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.684981][ T369] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.703392][ T369] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 39.743177][ T369] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 39.776157][ T369] usb 3-1: USB disconnect, device number 2 [ 39.875884][ T463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.889233][ T501] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 40.091639][ T514] overlayfs: failed to resolve './file0': -2 [ 40.165610][ T508] EXT4-fs (sda1): Cannot specify journal on remount [ 40.756863][ T379] attempt to access beyond end of device [ 40.756863][ T379] loop3: rw=2049, want=45104, limit=40427 [ 40.896926][ T369] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 41.293160][ T369] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 41.303735][ T369] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 41.313330][ T369] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 41.322970][ T369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.475956][ T534] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 42.295039][ T535] EXT4-fs (loop1): unsupported inode size: 264 [ 42.331648][ T535] EXT4-fs (loop1): blocksize: 1024 [ 42.483968][ T369] usb 3-1: string descriptor 0 read error: -71 [ 42.503127][ T369] usb 3-1: USB disconnect, device number 3 [ 42.517164][ T541] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,minixdf,minixdf,stripe=0x0000000000000020,,errors=continue [ 42.554067][ T541] ext4 filesystem being mounted at /root/syzkaller-testdir4036538873/syzkaller.hkt0uZ/10/file0 supports timestamps until 2038 (0x7fffffff) [ 42.769064][ T541] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 345: padding at end of block bitmap is not set [ 42.798949][ T535] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 42.804702][ T541] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 0 [ 42.822461][ T535] EXT4-fs (loop1): Unrecognized mount option "appraise" or missing value [ 42.996358][ T541] fs-verity (loop4, inode 13): Error -117 building Merkle tree [ 43.817569][ T563] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 44.389510][ T583] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 45.389803][ T573] F2FS-fs (loop0): invalid crc value [ 45.408397][ T573] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.612457][ T573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 45.856709][ T611] FAT-fs (loop3): Directory bread(block 64) failed [ 45.903961][ T611] FAT-fs (loop3): Directory bread(block 65) failed [ 45.922205][ T611] FAT-fs (loop3): Directory bread(block 66) failed [ 45.992249][ T611] FAT-fs (loop3): Directory bread(block 67) failed [ 46.014022][ T611] FAT-fs (loop3): Directory bread(block 68) failed [ 46.052173][ T611] FAT-fs (loop3): Directory bread(block 69) failed [ 46.071531][ T611] FAT-fs (loop3): Directory bread(block 70) failed [ 46.342080][ T611] FAT-fs (loop3): Directory bread(block 71) failed [ 46.349067][ T611] FAT-fs (loop3): Directory bread(block 72) failed [ 46.357203][ T611] FAT-fs (loop3): Directory bread(block 73) failed [ 46.418439][ T23] kauditd_printk_skb: 32 callbacks suppressed [ 46.418467][ T23] audit: type=1400 audit(1718881784.800:148): avc: denied { create } for pid=610 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.475150][ T23] audit: type=1400 audit(1718881784.800:149): avc: denied { connect } for pid=610 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.535277][ T23] audit: type=1400 audit(1718881784.800:150): avc: denied { write } for pid=610 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.612534][ T23] audit: type=1400 audit(1718881784.830:151): avc: denied { read write } for pid=610 comm="syz-executor.3" name="fuse" dev="devtmpfs" ino=9191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 46.680805][ T23] audit: type=1400 audit(1718881784.830:152): avc: denied { open } for pid=610 comm="syz-executor.3" path="/dev/fuse" dev="devtmpfs" ino=9191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 46.705584][ T23] audit: type=1400 audit(1718881784.830:153): avc: denied { mounton } for pid=610 comm="syz-executor.3" path="/root/syzkaller-testdir403580172/syzkaller.2ZZ3R4/11/bus/file0" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 47.001262][ T622] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 47.011677][ T380] attempt to access beyond end of device [ 47.011677][ T380] loop0: rw=2049, want=45104, limit=40427 [ 47.065544][ T23] audit: type=1400 audit(1718881785.450:154): avc: denied { mounton } for pid=627 comm="syz-executor.2" path="/root/syzkaller-testdir3223654532/syzkaller.17VM5L/10/file0" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 47.175970][ T596] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.237021][ T638] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 47.264235][ T638] ext4 filesystem being mounted at /root/syzkaller-testdir3223654532/syzkaller.17VM5L/11/bus supports timestamps until 2038 (0x7fffffff) [ 47.337726][ T596] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.454786][ T23] audit: type=1400 audit(1718881785.830:155): avc: denied { append } for pid=595 comm="syz-executor.1" path="/root/syzkaller-testdir1508399945/syzkaller.aPHPcl/10/file2/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.485335][ T23] audit: type=1400 audit(1718881785.870:156): avc: denied { read } for pid=595 comm="syz-executor.1" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.486257][ T596] attempt to access beyond end of device [ 47.486257][ T596] loop1: rw=2049, want=45104, limit=40427 [ 47.601438][ T23] audit: type=1400 audit(1718881785.980:157): avc: denied { ioctl } for pid=595 comm="syz-executor.1" path="/root/syzkaller-testdir1508399945/syzkaller.aPHPcl/10/file2/file0" dev="loop1" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.813188][ T375] attempt to access beyond end of device [ 47.813188][ T375] loop1: rw=2049, want=45112, limit=40427 [ 47.985604][ T649] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,minixdf,minixdf,stripe=0x0000000000000020,,errors=continue [ 48.020091][ T649] ext4 filesystem being mounted at /root/syzkaller-testdir403580172/syzkaller.2ZZ3R4/13/file0 supports timestamps until 2038 (0x7fffffff) [ 48.097161][ T649] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz-executor.3: bg 0: block 345: padding at end of block bitmap is not set [ 48.127830][ T649] fs-verity (loop3, inode 13): Error -117 writing Merkle tree block 0 [ 48.144034][ T649] fs-verity (loop3, inode 13): Error -117 building Merkle tree [ 48.183896][ T656] EXT4-fs (loop2): unsupported inode size: 264 [ 48.189897][ T656] EXT4-fs (loop2): blocksize: 1024 [ 48.657924][ T661] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 49.198230][ T656] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 49.465010][ T656] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 49.645738][ T676] FAT-fs (loop3): Directory bread(block 64) failed [ 49.691887][ T676] FAT-fs (loop3): Directory bread(block 65) failed [ 49.699460][ T676] FAT-fs (loop3): Directory bread(block 66) failed [ 49.707472][ T676] FAT-fs (loop3): Directory bread(block 67) failed [ 49.716645][ T676] FAT-fs (loop3): Directory bread(block 68) failed [ 49.739801][ T676] FAT-fs (loop3): Directory bread(block 69) failed [ 49.750003][ T676] FAT-fs (loop3): Directory bread(block 70) failed [ 49.759806][ T676] FAT-fs (loop3): Directory bread(block 71) failed [ 49.775193][ T676] FAT-fs (loop3): Directory bread(block 72) failed [ 49.787323][ T676] FAT-fs (loop3): Directory bread(block 73) failed [ 50.069725][ T692] overlayfs: overlapping lowerdir path [ 51.502973][ T679] F2FS-fs (loop4): invalid crc value [ 51.611160][ T679] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.698632][ T726] overlayfs: overlapping lowerdir path [ 51.874554][ T679] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 52.032995][ T734] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 52.255738][ T729] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 52.567919][ T694] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.784724][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 52.784752][ T23] audit: type=1400 audit(1718881791.170:163): avc: denied { create } for pid=739 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.838794][ T23] audit: type=1400 audit(1718881791.200:164): avc: denied { bind } for pid=739 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.867978][ T694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 52.982430][ T694] attempt to access beyond end of device [ 52.982430][ T694] loop2: rw=2049, want=45104, limit=40427 [ 53.668772][ T378] attempt to access beyond end of device [ 53.668772][ T378] loop2: rw=2049, want=45112, limit=40427 [ 53.686288][ T23] audit: type=1400 audit(1718881792.070:165): avc: denied { append } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=934 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.728808][ T23] audit: type=1400 audit(1718881792.070:166): avc: denied { open } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=934 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.816631][ T23] audit: type=1400 audit(1718881792.070:167): avc: denied { getattr } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=934 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.997712][ T751] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,minixdf,stripe=0x0000000000000020,,errors=continue [ 54.023245][ T751] ext4 filesystem being mounted at /root/syzkaller-testdir136734273/syzkaller.B5NNDf/13/file0 supports timestamps until 2038 (0x7fffffff) [ 54.113893][ T751] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 345: padding at end of block bitmap is not set [ 54.128805][ T751] fs-verity (loop0, inode 13): Error -117 writing Merkle tree block 0 [ 54.136844][ T751] fs-verity (loop0, inode 13): Error -117 building Merkle tree [ 54.205608][ T755] FAT-fs (loop4): Directory bread(block 64) failed [ 54.212036][ T755] FAT-fs (loop4): Directory bread(block 65) failed [ 54.224065][ T755] FAT-fs (loop4): Directory bread(block 66) failed [ 54.232144][ T766] EXT4-fs (sda1): re-mounted. Opts: (null) [ 54.236086][ T755] FAT-fs (loop4): Directory bread(block 67) failed [ 54.252911][ T755] FAT-fs (loop4): Directory bread(block 68) failed [ 54.260301][ T755] FAT-fs (loop4): Directory bread(block 69) failed [ 54.266795][ T755] FAT-fs (loop4): Directory bread(block 70) failed [ 54.273205][ T755] FAT-fs (loop4): Directory bread(block 71) failed [ 54.279875][ T755] FAT-fs (loop4): Directory bread(block 72) failed [ 54.286335][ T755] FAT-fs (loop4): Directory bread(block 73) failed [ 54.310222][ T23] audit: type=1326 audit(1718881792.690:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=767 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc251172f29 code=0x0 [ 54.407234][ T23] audit: type=1400 audit(1718881792.750:169): avc: denied { mount } for pid=769 comm="syz-executor.3" name="/" dev="ramfs" ino=13541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.430085][ T23] audit: type=1400 audit(1718881792.790:170): avc: denied { unmount } for pid=379 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.854638][ T779] FAT-fs (loop2): Directory bread(block 64) failed [ 54.867773][ T779] FAT-fs (loop2): Directory bread(block 65) failed [ 54.877839][ T779] FAT-fs (loop2): Directory bread(block 66) failed [ 54.893895][ T779] FAT-fs (loop2): Directory bread(block 67) failed [ 54.904347][ T779] FAT-fs (loop2): Directory bread(block 68) failed [ 54.917748][ T779] FAT-fs (loop2): Directory bread(block 69) failed [ 54.931941][ T779] FAT-fs (loop2): Directory bread(block 70) failed [ 54.944479][ T779] FAT-fs (loop2): Directory bread(block 71) failed [ 54.951357][ T779] FAT-fs (loop2): Directory bread(block 72) failed [ 54.958045][ T779] FAT-fs (loop2): Directory bread(block 73) failed [ 55.953598][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.960573][ T783] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.969949][ T783] device bridge_slave_0 entered promiscuous mode [ 55.978140][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.985288][ T783] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.993545][ T783] device bridge_slave_1 entered promiscuous mode [ 56.067219][ T794] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 56.231423][ T777] F2FS-fs (loop3): invalid crc value [ 56.277372][ T777] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.522804][ T777] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.667410][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.674340][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.681537][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.688447][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.805490][ T23] audit: type=1400 audit(1718881795.190:171): avc: denied { write } for pid=810 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.865087][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.872992][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.881476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.894548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.946097][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.966501][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.973366][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.981842][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.990268][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.997201][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.073328][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.081994][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.749794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.780834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.819170][ T103] device bridge_slave_1 left promiscuous mode [ 57.840851][ T379] attempt to access beyond end of device [ 57.840851][ T379] loop3: rw=2049, want=45104, limit=40427 [ 57.852407][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.894476][ T103] device bridge_slave_0 left promiscuous mode [ 57.900523][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.366868][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.392932][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.418077][ T829] EXT4-fs (loop2): unsupported inode size: 264 [ 58.454395][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.462649][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.463961][ T829] EXT4-fs (loop2): blocksize: 1024 [ 58.504804][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.513256][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.596425][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.644777][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.694749][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.703375][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.765753][ T23] audit: type=1400 audit(1718881797.150:172): avc: denied { mounton } for pid=783 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=11572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.863722][ T829] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 58.932434][ T829] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 58.984042][ T837] FAT-fs (loop3): Directory bread(block 64) failed [ 59.012183][ T837] FAT-fs (loop3): Directory bread(block 65) failed [ 59.031639][ T837] FAT-fs (loop3): Directory bread(block 66) failed [ 59.055624][ T837] FAT-fs (loop3): Directory bread(block 67) failed [ 59.075896][ T837] FAT-fs (loop3): Directory bread(block 68) failed [ 59.082276][ T837] FAT-fs (loop3): Directory bread(block 69) failed [ 59.122515][ T837] FAT-fs (loop3): Directory bread(block 70) failed [ 59.149693][ T837] FAT-fs (loop3): Directory bread(block 71) failed [ 59.166468][ T837] FAT-fs (loop3): Directory bread(block 72) failed [ 59.181702][ T837] FAT-fs (loop3): Directory bread(block 73) failed [ 59.237006][ T836] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.244103][ T836] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.252376][ T836] device bridge_slave_0 entered promiscuous mode [ 59.363239][ T836] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.380372][ T836] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.391820][ T836] device bridge_slave_1 entered promiscuous mode [ 60.244390][ T824] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.571514][ T824] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.629077][ T23] audit: type=1400 audit(1718881799.010:173): avc: denied { create } for pid=823 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.012655][ T824] overlayfs: failed to resolve './file0': -2 [ 61.134494][ T23] audit: type=1400 audit(1718881799.170:174): avc: denied { mounton } for pid=823 comm="syz-executor.1" path="/root/syzkaller-testdir1508399945/syzkaller.aPHPcl/31/file0/bus" dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.314347][ T23] audit: type=1400 audit(1718881799.210:175): avc: denied { write } for pid=823 comm="syz-executor.1" name="bus" dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.336198][ T23] audit: type=1400 audit(1718881799.220:176): avc: denied { add_name } for pid=823 comm="syz-executor.1" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.356489][ T23] audit: type=1400 audit(1718881799.290:177): avc: denied { setattr } for pid=823 comm="syz-executor.1" name="work" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.455406][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.483080][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.522220][ T375] attempt to access beyond end of device [ 61.522220][ T375] loop1: rw=2049, want=45120, limit=40427 [ 61.545458][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.565695][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.575203][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.582061][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.593975][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.602684][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.634366][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.641232][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.683231][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.746241][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.754665][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.762867][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.775419][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.809581][ T877] FAT-fs (loop3): Directory bread(block 64) failed [ 61.816591][ T103] device bridge_slave_1 left promiscuous mode [ 61.822633][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.835885][ T103] device bridge_slave_0 left promiscuous mode [ 61.841923][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.845627][ T877] FAT-fs (loop3): Directory bread(block 65) failed [ 61.868184][ T877] FAT-fs (loop3): Directory bread(block 66) failed [ 61.894230][ T877] FAT-fs (loop3): Directory bread(block 67) failed [ 61.900672][ T877] FAT-fs (loop3): Directory bread(block 68) failed [ 61.930391][ T877] FAT-fs (loop3): Directory bread(block 69) failed [ 61.954736][ T877] FAT-fs (loop3): Directory bread(block 70) failed [ 61.961203][ T877] FAT-fs (loop3): Directory bread(block 71) failed [ 62.014115][ T877] FAT-fs (loop3): Directory bread(block 72) failed [ 62.050572][ T877] FAT-fs (loop3): Directory bread(block 73) failed [ 62.155957][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.165436][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.197996][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.211186][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.285054][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.300345][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.359307][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.368739][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.377944][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.411570][ T869] F2FS-fs (loop2): invalid crc value [ 62.417550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.454177][ T869] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.676820][ T881] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.683809][ T881] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.692036][ T881] device bridge_slave_0 entered promiscuous mode [ 62.702495][ T881] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.710011][ T881] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.731379][ T881] device bridge_slave_1 entered promiscuous mode [ 62.890675][ T869] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.454165][ T901] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 63.605811][ T903] EXT4-fs (loop3): unsupported inode size: 264 [ 63.611831][ T903] EXT4-fs (loop3): blocksize: 1024 [ 64.524069][ T378] attempt to access beyond end of device [ 64.524069][ T378] loop2: rw=2049, want=45104, limit=40427 [ 64.706724][ T898] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 64.713933][ T898] EXT4-fs (loop3): Unrecognized mount option "appraise" or missing value [ 64.777904][ T910] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 64.796737][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.811579][ T888] F2FS-fs (loop1): invalid crc value [ 64.816724][ T910] ext4 filesystem being mounted at /root/syzkaller-testdir1833985907/syzkaller.dw3ILJ/2/file0 supports timestamps until 2038 (0x7fffffff) [ 64.831487][ T23] audit: type=1400 audit(1718881803.210:178): avc: denied { setattr } for pid=909 comm="syz-executor.4" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.855120][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.862258][ T888] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.863464][ T23] audit: type=1400 audit(1718881803.220:179): avc: denied { remove_name } for pid=909 comm="syz-executor.4" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.892744][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.918455][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.967293][ T23] audit: type=1400 audit(1718881803.220:180): avc: denied { rename } for pid=909 comm="syz-executor.4" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.969255][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.996429][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.013895][ T23] audit: type=1400 audit(1718881803.220:181): avc: denied { unlink } for pid=909 comm="syz-executor.4" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.054814][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.062762][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.092672][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.093889][ T23] audit: type=1400 audit(1718881803.240:182): avc: denied { map } for pid=909 comm="syz-executor.4" path="/root/syzkaller-testdir1833985907/syzkaller.dw3ILJ/2/file0/memory.events" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.129637][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.136557][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.247568][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.256725][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.285039][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.293443][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.348401][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.358647][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.398566][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.435169][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.443632][ T888] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.474289][ T888] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 66.343570][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.352729][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.380995][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.391648][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.401384][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.411944][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.475082][ T103] device bridge_slave_1 left promiscuous mode [ 66.481212][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.520855][ T103] device bridge_slave_0 left promiscuous mode [ 66.538320][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.756638][ T23] audit: type=1400 audit(1718881805.140:183): avc: denied { write } for pid=942 comm="syz-executor.4" name="uinput" dev="devtmpfs" ino=824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.969548][ T923] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.162880][ T23] audit: type=1326 audit(1718881805.540:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=956 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd437594f29 code=0x0 [ 67.168903][ T923] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.438877][ T962] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 67.591083][ T375] syz-executor.1 (375) used greatest stack depth: 20440 bytes left [ 67.841037][ T966] overlayfs: failed to resolve './file0': -2 [ 68.065150][ T379] attempt to access beyond end of device [ 68.065150][ T379] loop3: rw=2049, want=45120, limit=40427 [ 68.080696][ T968] EXT4-fs (loop2): unsupported inode size: 264 [ 68.107580][ T968] EXT4-fs (loop2): blocksize: 1024 [ 68.453284][ T968] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 68.471961][ T968] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 68.618369][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.629956][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.676266][ T974] device bridge_slave_0 entered promiscuous mode [ 68.744306][ T103] device bridge_slave_1 left promiscuous mode [ 68.757133][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.803071][ T103] device bridge_slave_0 left promiscuous mode [ 68.836487][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.505784][ T23] audit: type=1400 audit(1718881807.890:185): avc: denied { create } for pid=989 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.557155][ T974] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.574400][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.583011][ T974] device bridge_slave_1 entered promiscuous mode [ 69.603540][ T23] audit: type=1400 audit(1718881807.930:186): avc: denied { write } for pid=989 comm="syz-executor.0" path="socket:[15088]" dev="sockfs" ino=15088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.667360][ T23] audit: type=1400 audit(1718881807.930:187): avc: denied { nlmsg_read } for pid=989 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.811630][ T1002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.403412][ T1014] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 71.608174][ T24] cfg80211: failed to load regulatory.db [ 72.026410][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.046611][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.743087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.752021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.761113][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.768004][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.776784][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.785436][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.794251][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.801113][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.808705][ T919] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.824800][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.833171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.854918][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.864146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.872402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.881057][ T1048] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 72.894533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.934214][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.942187][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.951863][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.964725][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.973130][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.001402][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.010669][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.027869][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.036525][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.073996][ T919] usb 1-1: Using ep0 maxpacket: 8 [ 73.193917][ T919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.374204][ T919] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 73.519836][ T1063] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 73.542220][ T1055] FAT-fs (loop2): Directory bread(block 64) failed [ 73.575339][ T1055] FAT-fs (loop2): Directory bread(block 65) failed [ 73.657371][ T1055] FAT-fs (loop2): Directory bread(block 66) failed [ 73.703892][ T1055] FAT-fs (loop2): Directory bread(block 67) failed [ 73.802014][ T1055] FAT-fs (loop2): Directory bread(block 68) failed [ 73.895676][ T1055] FAT-fs (loop2): Directory bread(block 69) failed [ 74.010864][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.018745][ T919] usb 1-1: Product: syz [ 74.022686][ T919] usb 1-1: Manufacturer: syz [ 74.028001][ T919] usb 1-1: SerialNumber: syz [ 74.034471][ T919] usb 1-1: config 0 descriptor?? [ 74.049930][ T1055] FAT-fs (loop2): Directory bread(block 70) failed [ 74.075452][ T919] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 74.081739][ T919] uvcvideo: No valid video chain found. [ 74.087588][ T1055] FAT-fs (loop2): Directory bread(block 71) failed [ 74.094290][ T1055] FAT-fs (loop2): Directory bread(block 72) failed [ 74.101968][ T1055] FAT-fs (loop2): Directory bread(block 73) failed [ 74.277964][ T23] audit: type=1400 audit(1718881812.658:188): avc: denied { remount } for pid=1054 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 74.299753][ T919] usb 1-1: USB disconnect, device number 2 [ 74.454490][ T1070] attempt to access beyond end of device [ 74.454490][ T1070] loop2: rw=2049, want=1768, limit=256 [ 74.489248][ T1055] attempt to access beyond end of device [ 74.489248][ T1055] loop2: rw=2049, want=1928, limit=256 [ 74.510929][ T1070] attempt to access beyond end of device [ 74.510929][ T1070] loop2: rw=2049, want=1808, limit=256 [ 74.537087][ T1055] attempt to access beyond end of device [ 74.537087][ T1055] loop2: rw=2049, want=1968, limit=256 [ 74.548128][ T1070] attempt to access beyond end of device [ 74.548128][ T1070] loop2: rw=2049, want=1976, limit=256 [ 74.559809][ T1055] attempt to access beyond end of device [ 74.559809][ T1055] loop2: rw=2049, want=1984, limit=256 [ 74.570853][ T1070] attempt to access beyond end of device [ 74.570853][ T1070] loop2: rw=2049, want=1992, limit=256 [ 74.582591][ T1055] attempt to access beyond end of device [ 74.582591][ T1055] loop2: rw=2049, want=2000, limit=256 [ 74.617564][ T1070] attempt to access beyond end of device [ 74.617564][ T1070] loop2: rw=2049, want=2008, limit=256 [ 74.774548][ T23] audit: type=1326 audit(1718881813.038:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1074 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd437594f29 code=0x0 [ 74.975476][ T1055] attempt to access beyond end of device [ 74.975476][ T1055] loop2: rw=2049, want=2016, limit=256 [ 75.411224][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.569101][ T1095] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 75.659169][ T1057] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.545826][ T1107] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 77.271621][ T23] audit: type=1400 audit(1718881815.648:190): avc: denied { bind } for pid=1108 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.573173][ T1115] FAT-fs (loop2): Directory bread(block 64) failed [ 77.579602][ T1115] FAT-fs (loop2): Directory bread(block 65) failed [ 77.586004][ T1115] FAT-fs (loop2): Directory bread(block 66) failed [ 77.592857][ T1115] FAT-fs (loop2): Directory bread(block 67) failed [ 77.599435][ T1115] FAT-fs (loop2): Directory bread(block 68) failed [ 77.605927][ T1115] FAT-fs (loop2): Directory bread(block 69) failed [ 77.612293][ T1115] FAT-fs (loop2): Directory bread(block 70) failed [ 77.618677][ T1115] FAT-fs (loop2): Directory bread(block 71) failed [ 77.625163][ T1115] FAT-fs (loop2): Directory bread(block 72) failed [ 77.631522][ T1115] FAT-fs (loop2): Directory bread(block 73) failed [ 77.722218][ T369] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.984126][ T369] usb 2-1: Using ep0 maxpacket: 8 [ 78.105405][ T369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.623956][ T369] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 78.648217][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.671470][ T369] usb 2-1: Product: syz [ 78.686164][ T369] usb 2-1: Manufacturer: syz [ 78.694160][ T369] usb 2-1: SerialNumber: syz [ 78.708469][ T369] usb 2-1: config 0 descriptor?? [ 78.755682][ T369] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 78.761948][ T369] uvcvideo: No valid video chain found. [ 78.809334][ T23] audit: type=1326 audit(1718881817.188:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1135 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d0cdf7f29 code=0x0 [ 79.084285][ T537] usb 2-1: USB disconnect, device number 2 [ 79.286826][ T1149] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 79.784676][ T23] audit: type=1400 audit(1718881818.158:192): avc: denied { connect } for pid=1137 comm="syz-executor.2" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.866973][ T1150] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.933326][ T23] audit: type=1400 audit(1718881818.248:193): avc: denied { write } for pid=1142 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.958143][ T23] audit: type=1400 audit(1718881818.248:194): avc: denied { nlmsg_write } for pid=1142 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.063083][ T1154] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=8843c09c, mo2=0000] [ 80.085850][ T1154] EXT4-fs (loop1): 1 orphan inode deleted [ 80.091433][ T1154] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000007,minixdf,errors=continue,noauto_da_alloc,init_itable=0x0000000000000080,bsdgroups,dioread_nolock,debug,,errors=continue [ 80.116839][ T1157] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 80.144071][ T1154] ext4 filesystem being mounted at /root/syzkaller-testdir4206274170/syzkaller.bYegwl/6/file1 supports timestamps until 2038 (0x7fffffff) [ 80.221994][ T1154] EXT4-fs warning (device loop1): ext4_group_extend:1827: can't shrink FS - resize aborted [ 80.235483][ T23] audit: type=1400 audit(1718881818.618:195): avc: denied { setattr } for pid=1155 comm="syz-executor.2" name="file1" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.305091][ T23] audit: type=1400 audit(1718881818.648:196): avc: denied { link } for pid=1155 comm="syz-executor.2" name="#21" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.348198][ T1157] syz-executor.2 (1157) used greatest stack depth: 20088 bytes left [ 80.368109][ T23] audit: type=1400 audit(1718881818.718:197): avc: denied { remove_name } for pid=378 comm="syz-executor.2" name="file0" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.368428][ T378] EXT4-fs error (device loop2): ext4_empty_dir:2990: inode #11: comm syz-executor.2: invalid size [ 80.410898][ T23] audit: type=1400 audit(1718881818.728:198): avc: denied { rmdir } for pid=378 comm="syz-executor.2" name="bus" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.440962][ T378] EXT4-fs warning (device loop2): ext4_rmdir:3274: inode #11: comm syz-executor.2: empty directory 'file1' has too many links (0) [ 80.477234][ T1166] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 80.491826][ T23] audit: type=1400 audit(1718881818.728:199): avc: denied { unlink } for pid=378 comm="syz-executor.2" name="file0" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.515706][ T1166] ext4 filesystem being mounted at /root/syzkaller-testdir4206274170/syzkaller.bYegwl/7/file0 supports timestamps until 2038 (0x7fffffff) [ 80.560229][ T23] audit: type=1400 audit(1718881818.728:200): avc: denied { rmdir } for pid=378 comm="syz-executor.2" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.613466][ T1171] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 80.626457][ T23] audit: type=1400 audit(1718881818.728:201): avc: denied { unlink } for pid=378 comm="syz-executor.2" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 80.895843][ T1177] FAT-fs (loop2): Directory bread(block 64) failed [ 80.902224][ T1177] FAT-fs (loop2): Directory bread(block 65) failed [ 80.914178][ T1177] FAT-fs (loop2): Directory bread(block 66) failed [ 80.924112][ T1177] FAT-fs (loop2): Directory bread(block 67) failed [ 80.930541][ T1177] FAT-fs (loop2): Directory bread(block 68) failed [ 80.953862][ T1177] FAT-fs (loop2): Directory bread(block 69) failed [ 80.964200][ T1177] FAT-fs (loop2): Directory bread(block 70) failed [ 80.974162][ T1177] FAT-fs (loop2): Directory bread(block 71) failed [ 80.980619][ T1177] FAT-fs (loop2): Directory bread(block 72) failed [ 80.988437][ T1177] FAT-fs (loop2): Directory bread(block 73) failed [ 81.083258][ T1159] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.214798][ T1190] handle_bad_sector: 4 callbacks suppressed [ 81.214823][ T1190] attempt to access beyond end of device [ 81.214823][ T1190] loop2: rw=2049, want=1768, limit=256 [ 81.253498][ T1190] attempt to access beyond end of device [ 81.253498][ T1190] loop2: rw=2049, want=1896, limit=256 [ 81.293551][ T1159] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.387321][ T836] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 81.415004][ T836] CPU: 0 PID: 836 Comm: syz-executor.4 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 81.424928][ T836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 81.434798][ T836] Call Trace: [ 81.437967][ T836] dump_stack+0x1d8/0x241 [ 81.442124][ T836] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 81.447754][ T836] ? f2fs_lookup_extent_cache+0x16b/0xc30 [ 81.453307][ T836] f2fs_is_valid_blkaddr+0xc2d/0x1380 [ 81.458514][ T836] f2fs_map_blocks+0xbe7/0x2a30 [ 81.463224][ T836] ? f2fs_force_buffered_io+0x4e0/0x4e0 [ 81.468588][ T836] ? preempt_count_add+0x8f/0x180 [ 81.473443][ T836] ? prep_new_page+0x115/0x370 [ 81.478046][ T836] f2fs_mpage_readpages+0x1206/0x2730 [ 81.483274][ T836] ? f2fs_update_iostat+0x240/0x240 [ 81.488295][ T836] ? should_fail+0x1ad/0x880 [ 81.492719][ T836] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 81.498706][ T836] ? f2fs_read_data_pages+0xc3/0x2a0 [ 81.503826][ T836] ? f2fs_set_data_page_dirty+0x740/0x740 [ 81.509381][ T836] read_pages+0x119/0x400 [ 81.513554][ T836] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 81.519195][ T836] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 81.524389][ T836] ? filename_lookup+0x50e/0x6e0 [ 81.529179][ T836] __do_page_cache_readahead+0x448/0x4f0 [ 81.534655][ T836] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 81.540979][ T836] f2fs_readdir+0x417/0xaf0 [ 81.545330][ T836] ? f2fs_fill_dentries+0xe10/0xe10 [ 81.550352][ T836] ? down_read_killable+0x101/0x220 [ 81.555377][ T836] ? __fsnotify_parent+0x310/0x310 [ 81.560338][ T836] ? security_file_permission+0x1dc/0x2f0 [ 81.565888][ T836] iterate_dir+0x266/0x4e0 [ 81.570143][ T836] ? f2fs_fill_dentries+0xe10/0xe10 [ 81.575181][ T836] ksys_getdents64+0x21b/0x4c0 [ 81.579883][ T836] ? __ia32_sys_getdents+0x80/0x80 [ 81.584825][ T836] ? ksys_getdents64+0x4c0/0x4c0 [ 81.589601][ T836] ? __do_page_fault+0x725/0xbb0 [ 81.594372][ T836] __x64_sys_getdents64+0x76/0x80 [ 81.599230][ T836] do_syscall_64+0xca/0x1c0 [ 81.603572][ T836] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 81.609318][ T836] RIP: 0033:0x7fd4375c0423 [ 81.613558][ T836] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 [ 81.632996][ T836] RSP: 002b:00007ffe9ffdba78 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 81.641248][ T836] RAX: ffffffffffffffda RBX: 00005555564f1850 RCX: 00007fd4375c0423 [ 81.649044][ T836] RDX: 0000000000008000 RSI: 00005555564f1850 RDI: 0000000000000005 [ 81.656856][ T836] RBP: 00005555564f1824 R08: 0000000000000000 R09: 0000000000000000 [ 81.664677][ T836] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 [ 81.672477][ T836] R13: 0000000000000010 R14: 00005555564f1820 R15: 0000000000000009 [ 81.686081][ T836] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 81.693671][ T836] CPU: 0 PID: 836 Comm: syz-executor.4 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 81.703550][ T836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 81.713448][ T836] Call Trace: [ 81.716591][ T836] dump_stack+0x1d8/0x241 [ 81.720756][ T836] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 81.726398][ T836] ? f2fs_lookup_extent_cache+0x16b/0xc30 [ 81.731947][ T836] f2fs_is_valid_blkaddr+0xc2d/0x1380 [ 81.737159][ T836] f2fs_get_read_data_page+0x4d1/0x8c0 [ 81.742451][ T836] ? page_cache_prev_miss+0x410/0x410 [ 81.747666][ T836] ? f2fs_get_block+0x1b0/0x1b0 [ 81.752354][ T836] ? pagecache_get_page+0x5a7/0x750 [ 81.757385][ T836] f2fs_find_data_page+0x182/0x3f0 [ 81.762333][ T836] f2fs_readdir+0x424/0xaf0 [ 81.766681][ T836] ? f2fs_fill_dentries+0xe10/0xe10 [ 81.771709][ T836] ? down_read_killable+0x101/0x220 [ 81.776730][ T836] ? __fsnotify_parent+0x310/0x310 [ 81.781694][ T836] ? security_file_permission+0x1dc/0x2f0 [ 81.787246][ T836] iterate_dir+0x266/0x4e0 [ 81.791484][ T836] ? f2fs_fill_dentries+0xe10/0xe10 [ 81.796528][ T836] ksys_getdents64+0x21b/0x4c0 [ 81.801123][ T836] ? __ia32_sys_getdents+0x80/0x80 [ 81.806067][ T836] ? ksys_getdents64+0x4c0/0x4c0 [ 81.810862][ T836] ? __do_page_fault+0x725/0xbb0 [ 81.815627][ T836] __x64_sys_getdents64+0x76/0x80 [ 81.820481][ T836] do_syscall_64+0xca/0x1c0 [ 81.824834][ T836] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 81.830546][ T836] RIP: 0033:0x7fd4375c0423 [ 81.834801][ T836] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 [ 81.854236][ T836] RSP: 002b:00007ffe9ffdba78 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 81.862488][ T836] RAX: ffffffffffffffda RBX: 00005555564f1850 RCX: 00007fd4375c0423 [ 81.870295][ T836] RDX: 0000000000008000 RSI: 00005555564f1850 RDI: 0000000000000005 [ 81.878109][ T836] RBP: 00005555564f1824 R08: 0000000000000000 R09: 0000000000000000 [ 81.885924][ T836] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 [ 81.893733][ T836] R13: 0000000000000010 R14: 00005555564f1820 R15: 0000000000000009 [ 81.947990][ T1183] F2FS-fs (loop0): invalid crc value [ 81.975819][ T1183] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.056189][ T1189] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.080400][ T7] attempt to access beyond end of device [ 82.080400][ T7] loop4: rw=2049, want=40992, limit=40427 [ 82.234437][ T1183] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.302201][ T1189] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.309804][ T1183] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 82.343876][ T381] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.404579][ T1189] attempt to access beyond end of device [ 82.404579][ T1189] loop1: rw=2049, want=45104, limit=40427 [ 82.432958][ T974] attempt to access beyond end of device [ 82.432958][ T974] loop1: rw=2049, want=45112, limit=40427 [ 82.584047][ T381] usb 3-1: Using ep0 maxpacket: 8 [ 82.711914][ T1201] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 82.719761][ T381] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.740047][ T1201] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 82.756384][ T1201] F2FS-fs (loop3): invalid crc value [ 82.765081][ T1201] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.874110][ T7] device bridge_slave_1 left promiscuous mode [ 82.880183][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.894047][ T381] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 82.911992][ T381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.973048][ T381] usb 3-1: Product: syz [ 83.013299][ T381] usb 3-1: Manufacturer: syz [ 83.017941][ T381] usb 3-1: SerialNumber: syz [ 83.022647][ T1201] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 83.032787][ T381] usb 3-1: config 0 descriptor?? [ 83.037871][ T1201] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.060866][ T7] device bridge_slave_0 left promiscuous mode [ 83.075300][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.095408][ T381] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 83.101664][ T381] uvcvideo: No valid video chain found. [ 83.194369][ T1214] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 83.301766][ T5] usb 3-1: USB disconnect, device number 4 [ 83.547069][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.554038][ T1216] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.561963][ T1216] device bridge_slave_0 entered promiscuous mode [ 83.570346][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.577294][ T1216] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.586769][ T1216] device bridge_slave_1 entered promiscuous mode [ 83.635050][ T1221] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 83.786134][ T974] EXT4-fs error (device loop1): ext4_empty_dir:2990: inode #11: comm syz-executor.1: invalid size [ 83.827590][ T974] EXT4-fs warning (device loop1): ext4_rmdir:3274: inode #11: comm syz-executor.1: empty directory 'file1' has too many links (0) [ 83.951800][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.958709][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.965957][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.972820][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.364626][ T1236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.650937][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.667769][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.786912][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.795902][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.827498][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.845420][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.863954][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.870833][ T907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.895821][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.914464][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.922792][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.929682][ T907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.970237][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.979677][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.992566][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.001642][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.085429][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.105110][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 85.105142][ T23] audit: type=1400 audit(1718881823.478:208): avc: denied { write } for pid=1255 comm="syz-executor.1" name="kvm" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.136231][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.188537][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.218417][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.293814][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.302288][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.406417][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.424627][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.450141][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.464936][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.705176][ T1287] kvm: emulating exchange as write [ 87.286063][ T1259] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.312903][ T1259] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.659616][ T1259] F2FS-fs (loop0): invalid crc value [ 87.988132][ T1259] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.177381][ T1375] EXT4-fs (loop0): Ignoring removed nobh option [ 90.227805][ T1375] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.0: corrupted xattr block 8 [ 90.246094][ T1375] EXT4-fs (loop0): Remounting filesystem read-only [ 90.252517][ T1375] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -117) [ 90.262605][ T1375] EXT4-fs (loop0): 1 orphan inode deleted [ 90.268944][ T1375] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000000001,journal_dev=0x0000000000000003,barrier,nobh,nogrpid, [ 90.303391][ T1375] ext4 filesystem being mounted at /root/syzkaller-testdir3949451381/syzkaller.33uLjy/22/file1 supports timestamps until 2038 (0x7fffffff) [ 91.517070][ T1352] F2FS-fs (loop3): invalid crc value [ 91.529754][ T1352] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.770827][ T1352] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 91.795235][ T13] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 92.761144][ T23] audit: type=1326 audit(1718881831.138:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1417 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f93131f29 code=0x0 [ 92.857386][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.867466][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.876811][ T379] attempt to access beyond end of device [ 92.876811][ T379] loop3: rw=2049, want=45104, limit=40427 [ 93.033956][ T13] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.042852][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.063818][ T13] usb 5-1: Product: syz [ 93.067836][ T13] usb 5-1: Manufacturer: syz [ 93.072263][ T13] usb 5-1: SerialNumber: syz [ 93.135225][ T13] usb-storage 5-1:1.0: USB Mass Storage device detected [ 93.222359][ T1405] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 93.253857][ T1405] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.271616][ T1405] F2FS-fs (loop0): invalid crc value [ 93.298711][ T1405] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.336922][ T13] usb 5-1: USB disconnect, device number 2 [ 93.383415][ T1405] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.390384][ T1405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.436094][ T1425] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 93.743419][ T1437] netlink: 344 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.203407][ T23] audit: type=1400 audit(1718881832.578:210): avc: denied { create } for pid=1454 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.643102][ T1469] netlink: 344 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.073830][ T537] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 95.453996][ T537] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.473861][ T537] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.562831][ T1464] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 95.618705][ T1464] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 95.631935][ T1487] tmpfs: Unknown parameter 'ÙoÕ^™‹l' [ 95.654475][ T23] audit: type=1400 audit(1718881833.998:211): avc: denied { read } for pid=1485 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.708969][ T1464] F2FS-fs (loop2): invalid crc value [ 95.714385][ T537] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.723730][ T537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.756954][ T1464] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.770364][ T537] usb 5-1: Product: syz [ 95.782874][ T537] usb 5-1: Manufacturer: syz [ 95.803669][ T537] usb 5-1: SerialNumber: syz [ 95.905423][ T537] usb-storage 5-1:1.0: USB Mass Storage device detected [ 95.981902][ T1464] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 95.988920][ T1464] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.120817][ T919] usb 5-1: USB disconnect, device number 3 [ 96.261375][ T23] audit: type=1400 audit(1718881834.638:212): avc: denied { unmount } for pid=881 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 96.602477][ T1519] FAT-fs (loop0): Directory bread(block 64) failed [ 96.641633][ T1519] FAT-fs (loop0): Directory bread(block 65) failed [ 96.679776][ T1519] FAT-fs (loop0): Directory bread(block 66) failed [ 96.696275][ T1519] FAT-fs (loop0): Directory bread(block 67) failed [ 96.709885][ T1519] FAT-fs (loop0): Directory bread(block 68) failed [ 96.716429][ T1525] netlink: 344 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.734028][ T1519] FAT-fs (loop0): Directory bread(block 69) failed [ 96.750964][ T1519] FAT-fs (loop0): Directory bread(block 70) failed [ 96.775664][ T1519] FAT-fs (loop0): Directory bread(block 71) failed [ 96.792884][ T1519] FAT-fs (loop0): Directory bread(block 72) failed [ 96.799625][ T1519] FAT-fs (loop0): Directory bread(block 73) failed [ 97.155254][ T1536] tmpfs: Unknown parameter 'ÙoÕ^™‹l' [ 98.183974][ T537] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 98.448464][ T1541] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 98.470654][ T1541] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.486411][ T1541] F2FS-fs (loop0): invalid crc value [ 98.506539][ T1541] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.564113][ T537] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.578559][ T537] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.661075][ T1541] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 98.668082][ T1541] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.764219][ T537] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.793927][ T537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.801789][ T537] usb 4-1: Product: syz [ 98.823817][ T537] usb 4-1: Manufacturer: syz [ 98.833908][ T537] usb 4-1: SerialNumber: syz [ 98.895192][ T537] usb-storage 4-1:1.0: USB Mass Storage device detected [ 99.783299][ T24] usb 4-1: USB disconnect, device number 2 [ 100.276950][ T1614] tmpfs: Unknown parameter 'ÙoÕ^™‹l' [ 100.798618][ T1629] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 100.841304][ T1629] ext4 filesystem being mounted at /root/syzkaller-testdir3223654532/syzkaller.17VM5L/78/file0 supports timestamps until 2038 (0x7fffffff) [ 101.410426][ T537] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.477680][ T23] audit: type=1400 audit(1718881839.858:213): avc: denied { write } for pid=1667 comm="syz-executor.2" name="/" dev="incremental-fs" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.557236][ T1669] tmpfs: Unknown parameter 'ÙoÕ^™‹l' [ 102.002518][ T23] audit: type=1400 audit(1718881839.908:214): avc: denied { add_name } for pid=1667 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.116209][ T537] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.227517][ T537] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.376064][ T23] audit: type=1400 audit(1718881839.908:215): avc: denied { associate } for pid=1667 comm="syz-executor.2" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 102.726624][ T23] audit: type=1400 audit(1718881840.018:216): avc: denied { unmount } for pid=378 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 102.801620][ T1677] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 102.822403][ T1677] ext4 filesystem being mounted at /root/syzkaller-testdir1467204188/syzkaller.ZpuOJC/28/file0 supports timestamps until 2038 (0x7fffffff) [ 102.853980][ T537] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.977930][ T1659] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 103.029602][ T1659] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 103.048522][ T537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.056904][ T537] usb 1-1: Product: syz [ 103.061189][ T537] usb 1-1: Manufacturer: syz [ 103.061822][ T1659] F2FS-fs (loop3): invalid crc_offset: 5705724 [ 103.065804][ T537] usb 1-1: SerialNumber: syz [ 103.090159][ T1659] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.100317][ T23] audit: type=1400 audit(1718881841.488:217): avc: denied { create } for pid=1690 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.105545][ T537] usb-storage 1-1:1.0: USB Mass Storage device detected [ 103.563270][ T23] audit: type=1400 audit(1718881841.568:218): avc: denied { map } for pid=1680 comm="syz-executor.1" path="socket:[19081]" dev="sockfs" ino=19081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 103.735698][ T23] audit: type=1400 audit(1718881841.568:219): avc: denied { accept } for pid=1680 comm="syz-executor.1" path="socket:[19081]" dev="sockfs" ino=19081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 103.766865][ T537] usb 1-1: USB disconnect, device number 3 [ 103.774211][ T23] audit: type=1400 audit(1718881841.648:220): avc: denied { nlmsg_write } for pid=1680 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 104.008848][ T1659] F2FS-fs (loop3): recover fsync data on readonly fs [ 104.020945][ T1659] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 104.040230][ T1659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.394419][ T23] audit: type=1400 audit(1718881843.778:221): avc: denied { write } for pid=1728 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.952744][ T1748] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 108.307071][ T1755] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.576707][ T23] audit: type=1400 audit(1718881846.958:222): avc: denied { audit_read } for pid=1777 comm="syz-executor.1" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.599148][ T400] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 109.004632][ T400] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.079250][ T400] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.383734][ T23] audit: type=1400 audit(1718881847.758:223): avc: denied { mount } for pid=1783 comm="syz-executor.1" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 109.413677][ T23] audit: type=1400 audit(1718881847.788:224): avc: denied { unmount } for pid=974 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 109.564006][ T400] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.574278][ T400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.582599][ T400] usb 3-1: Product: syz [ 109.587420][ T400] usb 3-1: Manufacturer: syz [ 109.591896][ T400] usb 3-1: SerialNumber: syz [ 109.655424][ T400] usb-storage 3-1:1.0: USB Mass Storage device detected [ 109.943682][ T1803] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 111.117911][ T1810] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 111.276173][ T400] usb 3-1: USB disconnect, device number 5 [ 112.763885][ T23] audit: type=1400 audit(1718881851.078:225): avc: denied { execute } for pid=1833 comm="syz-executor.4" path=2F6D656D66643A736563657203202864656C6574656429 dev="tmpfs" ino=20493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.789844][ T1831] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 112.797392][ T1831] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 112.812732][ T1831] F2FS-fs (loop3): invalid crc value [ 112.822847][ T1831] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 113.364023][ T1811] F2FS-fs (loop1): invalid crc value [ 113.414533][ T23] audit: type=1400 audit(1718881851.778:226): avc: denied { ioctl } for pid=1835 comm="syz-executor.4" path="socket:[19417]" dev="sockfs" ino=19417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.449178][ T1811] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.526603][ T1811] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 114.782510][ T23] audit: type=1400 audit(1718881853.158:227): avc: denied { mounton } for pid=1842 comm="syz-executor.2" path="/root/syzkaller-testdir3223654532/syzkaller.17VM5L/96/file1/file0" dev="loop2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 114.845542][ T23] audit: type=1400 audit(1718881853.158:228): avc: denied { read } for pid=1860 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=9280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.855267][ T378] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 114.868805][ T23] audit: type=1400 audit(1718881853.158:229): avc: denied { open } for pid=1860 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=9280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.945575][ T23] audit: type=1400 audit(1718881853.158:230): avc: denied { ioctl } for pid=1860 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=9280 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.956898][ T378] FAT-fs (loop2): Filesystem has been set read-only [ 114.981321][ T378] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 115.358789][ T378] syz-executor.2 (378) used greatest stack depth: 18744 bytes left [ 116.244403][ T23] audit: type=1400 audit(1718881854.628:231): avc: denied { mount } for pid=1882 comm="syz-executor.4" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.328602][ T23] audit: type=1400 audit(1718881854.688:232): avc: denied { unmount } for pid=1216 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.451493][ T1881] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.515993][ T1216] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 116.545604][ T1216] FAT-fs (loop4): Filesystem has been set read-only [ 116.564775][ T1216] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 116.573831][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.810214][ T1897] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.823793][ T1897] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.847563][ T1897] device bridge_slave_0 entered promiscuous mode [ 116.857755][ T423] device bridge_slave_1 left promiscuous mode [ 116.867222][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.964523][ T423] device bridge_slave_0 left promiscuous mode [ 116.973999][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.984994][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.994944][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.013890][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.026866][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.035934][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.061772][ T13] usb 1-1: config 0 descriptor?? [ 117.228506][ T1897] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.235880][ T1897] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.244638][ T1897] device bridge_slave_1 entered promiscuous mode [ 117.290795][ T1910] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.581421][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 117.597464][ T13] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 118.388728][ T23] audit: type=1400 audit(1718881856.768:233): avc: denied { create } for pid=1897 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.414046][ T1908] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.431365][ T1908] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.450418][ T1908] device bridge_slave_0 entered promiscuous mode [ 118.463848][ T23] audit: type=1400 audit(1718881856.818:234): avc: denied { write } for pid=1897 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.467205][ T13] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 118.499941][ T13] usb 1-1: USB disconnect, device number 4 [ 118.508675][ T1908] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.526505][ T1908] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.535194][ T1908] device bridge_slave_1 entered promiscuous mode [ 118.658504][ T23] audit: type=1400 audit(1718881856.818:235): avc: denied { read } for pid=1897 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.692518][ T23] audit: type=1400 audit(1718881857.068:236): avc: denied { name_bind } for pid=1926 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 118.806154][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.815023][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.823038][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.832395][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.840797][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.847692][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.874162][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.882081][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.891526][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.900181][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.907078][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.947021][ T1913] F2FS-fs (loop3): invalid crc value [ 118.974671][ T1913] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.002784][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.012453][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.037253][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.045975][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.106147][ T1913] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 119.173948][ T1930] attempt to access beyond end of device [ 119.173948][ T1930] loop3: rw=2049, want=45112, limit=40427 [ 119.206570][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.234802][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.269083][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.285050][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.340568][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.359659][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.399987][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.411492][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.447300][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.459695][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.480887][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.499683][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.518278][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.525412][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.590337][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.607771][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.623623][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.634661][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.647154][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.659027][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.665940][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.695021][ T423] device bridge_slave_1 left promiscuous mode [ 119.701078][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.710580][ T423] device bridge_slave_0 left promiscuous mode [ 119.716854][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.734329][ T1940] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 119.766051][ T1940] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 119.784388][ T1940] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.804363][ T1940] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 120.136410][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.820008][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.843856][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.852216][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.918958][ T23] kauditd_printk_skb: 7 callbacks suppressed [ 120.918989][ T23] audit: type=1400 audit(1718881859.298:244): avc: denied { mount } for pid=1952 comm="syz-executor.1" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 120.987266][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.997512][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.054315][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.062539][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.124548][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.133076][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.193824][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.202406][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.244799][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.253381][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.915836][ T1974] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 123.948061][ T23] audit: type=1400 audit(1718881862.328:245): avc: denied { mount } for pid=1982 comm="syz-executor.4" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 124.047844][ T23] audit: type=1400 audit(1718881862.428:246): avc: denied { unmount } for pid=1908 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 124.049495][ T1981] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 124.134476][ T23] audit: type=1400 audit(1718881862.518:247): avc: denied { mount } for pid=1980 comm="syz-executor.3" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 124.134574][ T1981] ext4 filesystem being mounted at /root/syzkaller-testdir403580172/syzkaller.2ZZ3R4/90/bus supports timestamps until 2038 (0x7fffffff) [ 124.382457][ T23] audit: type=1400 audit(1718881862.758:248): avc: denied { unmount } for pid=379 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 124.450712][ T1999] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.799879][ T23] audit: type=1400 audit(1718881863.178:249): avc: denied { bind } for pid=2004 comm="syz-executor.3" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.003735][ T23] audit: type=1400 audit(1718881863.178:250): avc: denied { node_bind } for pid=2004 comm="syz-executor.3" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 125.858726][ T2017] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 127.213138][ T2038] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.246777][ T2033] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 127.286038][ T2033] ext4 filesystem being mounted at /root/syzkaller-testdir3262963953/syzkaller.Wg22Dj/13/bus supports timestamps until 2038 (0x7fffffff) [ 127.514720][ T2041] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 127.522783][ T2041] EXT4-fs (loop1): can't mount with dioread_nolock if block size != PAGE_SIZE [ 127.801929][ T2025] F2FS-fs (loop3): invalid crc value [ 128.047743][ T2025] F2FS-fs (loop3): Found nat_bits in checkpoint [ 128.435695][ T2041] input: syz0 as /devices/virtual/input/input5 [ 128.469796][ T23] audit: type=1400 audit(1718881866.848:251): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=22375 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.523246][ T2025] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 128.557784][ T2025] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 128.570954][ T23] audit: type=1400 audit(1718881866.848:252): avc: denied { open } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=22375 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.733839][ T23] audit: type=1400 audit(1718881866.848:253): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=22375 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.819409][ T379] attempt to access beyond end of device [ 128.819409][ T379] loop3: rw=524288, want=45072, limit=40427 [ 128.831623][ T379] attempt to access beyond end of device [ 128.831623][ T379] loop3: rw=0, want=45072, limit=40427 [ 128.956026][ T2069] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 129.300570][ T7] attempt to access beyond end of device [ 129.300570][ T7] loop3: rw=2049, want=45120, limit=40427 [ 129.721203][ T2085] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.984494][ T2061] F2FS-fs (loop2): invalid crc value [ 130.086442][ T2061] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.723582][ T2061] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 130.881629][ T2092] attempt to access beyond end of device [ 130.881629][ T2092] loop2: rw=2049, want=45112, limit=40427 [ 131.374279][ T7] device bridge_slave_1 left promiscuous mode [ 131.380355][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.401876][ T7] device bridge_slave_0 left promiscuous mode [ 131.421585][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.456678][ T23] audit: type=1400 audit(1718881869.838:254): avc: denied { set_context_mgr } for pid=2108 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 131.501825][ T23] audit: type=1400 audit(1718881869.868:255): avc: denied { write } for pid=2108 comm="syz-executor.0" name="tcp" dev="proc" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 131.532777][ T2109] binder: 2108:2109 ioctl c0306201 20000380 returned -14 [ 131.555196][ T23] audit: type=1400 audit(1718881869.868:256): avc: denied { map } for pid=2108 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 131.603430][ T23] audit: type=1400 audit(1718881869.908:257): avc: denied { call } for pid=2108 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.391053][ T2101] F2FS-fs (loop1): invalid crc value [ 132.433003][ T2101] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.721473][ T2101] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 132.740163][ T2101] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.813373][ T2132] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 133.486658][ T2107] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.493533][ T2107] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.503813][ T2107] device bridge_slave_0 entered promiscuous mode [ 133.511801][ T2107] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.519154][ T2107] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.527658][ T2107] device bridge_slave_1 entered promiscuous mode [ 133.633143][ T2135] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 133.690405][ T2135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.728475][ T974] attempt to access beyond end of device [ 133.728475][ T974] loop1: rw=524288, want=45072, limit=40427 [ 133.743967][ T2135] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 133.783940][ T974] attempt to access beyond end of device [ 133.783940][ T974] loop1: rw=0, want=45072, limit=40427 [ 134.581771][ T879] attempt to access beyond end of device [ 134.581771][ T879] loop1: rw=2049, want=45120, limit=40427 [ 135.504150][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.511928][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.543311][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.562716][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.599699][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.606615][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.625318][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.644654][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.653073][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.659978][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.714640][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.782017][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.796469][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.824070][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.842702][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.911596][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.931873][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.983931][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.991782][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.024776][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.033206][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.071708][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.081694][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.111112][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.120757][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.253924][ T1753] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 136.324788][ T423] device bridge_slave_1 left promiscuous mode [ 136.330852][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.356260][ T2165] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 136.363533][ T2165] EXT4-fs (loop3): can't mount with dioread_nolock if block size != PAGE_SIZE [ 136.390656][ T423] device bridge_slave_0 left promiscuous mode [ 136.403273][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.592986][ T2165] input: syz0 as /devices/virtual/input/input6 [ 136.624129][ T1753] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.642171][ T1753] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.806843][ T2168] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.817688][ T2152] F2FS-fs (loop2): invalid crc value [ 136.849956][ T2152] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.864043][ T1753] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.887538][ T1753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.915837][ T1753] usb 1-1: Product: syz [ 136.927421][ T1753] usb 1-1: Manufacturer: syz [ 136.946137][ T1753] usb 1-1: SerialNumber: syz [ 136.983400][ T23] audit: type=1400 audit(1718881875.358:258): avc: denied { ioctl } for pid=2179 comm="syz-executor.3" path="socket:[22959]" dev="sockfs" ino=22959 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.996176][ T1753] usb-storage 1-1:1.0: USB Mass Storage device detected [ 137.142927][ T2152] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 137.263070][ T1753] usb 1-1: USB disconnect, device number 5 [ 137.265257][ T23] audit: type=1400 audit(1718881875.638:259): avc: denied { ioctl } for pid=2185 comm="syz-executor.3" path="socket:[22985]" dev="sockfs" ino=22985 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.280779][ T2176] attempt to access beyond end of device [ 137.280779][ T2176] loop2: rw=2049, want=45112, limit=40427 [ 137.361802][ T2175] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.377472][ T2175] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.386251][ T2175] device bridge_slave_0 entered promiscuous mode [ 137.408234][ T2175] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.426153][ T2175] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.465281][ T2175] device bridge_slave_1 entered promiscuous mode [ 137.660142][ T2175] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.667059][ T2175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.674308][ T2175] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.681174][ T2175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.722742][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.730243][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.761011][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.769055][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.781293][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.790279][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.800152][ T1753] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.807036][ T1753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.845278][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.854350][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.862625][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.869549][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.940650][ T2107] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 137.943220][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.948873][ T2107] FAT-fs (loop3): Filesystem has been set read-only [ 137.967697][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.982244][ T2107] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 137.995138][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.011645][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.054461][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.065029][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.102192][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.123682][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.166618][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.175921][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.184342][ T919] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.483226][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.497742][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.574635][ T2219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 139.209341][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.221255][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.263965][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.286821][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.297246][ T919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.310859][ T919] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.319851][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.393215][ T919] usb 1-1: config 0 descriptor?? [ 139.521734][ T2228] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.832384][ T2230] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 139.839952][ T2230] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.851273][ T2230] F2FS-fs (loop2): invalid crc value [ 139.856892][ T2230] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 139.991243][ T2220] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.998214][ T2220] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.006494][ T2220] device bridge_slave_0 entered promiscuous mode [ 140.019740][ T2220] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.030082][ T919] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.037510][ T2220] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.142322][ T2220] device bridge_slave_1 entered promiscuous mode [ 140.180243][ T2175] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 140.209855][ T2175] FAT-fs (loop1): Filesystem has been set read-only [ 140.217692][ T919] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 140.236411][ T919] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 140.256363][ T919] usb 1-1: USB disconnect, device number 6 [ 140.266991][ T2175] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 141.333004][ T7] device bridge_slave_1 left promiscuous mode [ 141.341378][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.396910][ T7] device bridge_slave_0 left promiscuous mode [ 141.403016][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.549566][ T2258] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 141.561470][ T2258] EXT4-fs (loop2): can't mount with dioread_nolock if block size != PAGE_SIZE [ 141.700253][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.709183][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.729374][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.738990][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.805632][ T2258] input: syz0 as /devices/virtual/input/input7 [ 141.954317][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.961367][ T919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.969104][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.978246][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.986950][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.993842][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.011697][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.027408][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.040633][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.077130][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.096394][ T2272] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 142.116656][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.338291][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.347725][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.366218][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.376739][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.402569][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.411828][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.434984][ T1897] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 142.448993][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.459271][ T1897] FAT-fs (loop2): Filesystem has been set read-only [ 142.464733][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.484611][ T1897] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 142.500990][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.525914][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.305806][ T2278] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 143.313304][ T2278] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 143.332788][ T2278] F2FS-fs (loop0): invalid crc value [ 143.338461][ T2278] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 143.405368][ T2274] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.422515][ T2274] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.435443][ T2274] device bridge_slave_0 entered promiscuous mode [ 143.458241][ T2274] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.465946][ T2274] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.474118][ T2274] device bridge_slave_1 entered promiscuous mode [ 143.584870][ T2266] F2FS-fs (loop4): invalid crc value [ 143.667588][ T2266] F2FS-fs (loop4): Found nat_bits in checkpoint [ 143.687295][ T2276] F2FS-fs (loop3): invalid crc value [ 143.717052][ T2276] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.894057][ T2266] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 143.940925][ T2276] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 144.046379][ T2276] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.054534][ T2285] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.061395][ T2285] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.105746][ T2285] device bridge_slave_0 entered promiscuous mode [ 144.113873][ T2285] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.120804][ T2285] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.129953][ T2285] device bridge_slave_1 entered promiscuous mode [ 144.148313][ T2288] attempt to access beyond end of device [ 144.148313][ T2288] loop4: rw=2049, want=45112, limit=40427 [ 144.557111][ T2220] attempt to access beyond end of device [ 144.557111][ T2220] loop3: rw=524288, want=45072, limit=40427 [ 144.577460][ T2220] attempt to access beyond end of device [ 144.577460][ T2220] loop3: rw=0, want=45072, limit=40427 [ 144.714672][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.723173][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.742996][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.763236][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.783450][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.801112][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.824815][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.831809][ T919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.841380][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.849731][ T879] attempt to access beyond end of device [ 144.849731][ T879] loop3: rw=2049, want=45120, limit=40427 [ 144.850219][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.870151][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.877054][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.885660][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.995745][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.005410][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.042278][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.051270][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.098421][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.129306][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.218702][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.234543][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.286252][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.304894][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.313516][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.322290][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.345436][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.372526][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.400276][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.407216][ T919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.436103][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.444883][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.453318][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.460240][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.484221][ T7] device bridge_slave_1 left promiscuous mode [ 145.491501][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.521082][ T7] device bridge_slave_0 left promiscuous mode [ 145.533068][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.555275][ T7] device bridge_slave_1 left promiscuous mode [ 145.561391][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.625219][ T7] device bridge_slave_0 left promiscuous mode [ 145.631386][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.694876][ T2313] binder: 2312:2313 ioctl c0306201 20000380 returned -14 [ 146.581367][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.658289][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.667224][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.678430][ T1908] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 146.701815][ T1908] FAT-fs (loop4): Filesystem has been set read-only [ 146.715067][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.716044][ T1908] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 146.723587][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.838932][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.853229][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.898902][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.908245][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.943103][ T2323] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.033834][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.042331][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.205443][ T2317] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.232638][ T2317] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.258201][ T2317] device bridge_slave_0 entered promiscuous mode [ 147.280107][ T2317] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.306194][ T2317] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.327572][ T2317] device bridge_slave_1 entered promiscuous mode [ 147.394345][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.402992][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.452193][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.467518][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.944382][ T1749] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.957418][ T2332] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.964371][ T2332] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.972493][ T2332] device bridge_slave_0 entered promiscuous mode [ 147.992287][ T2332] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.000076][ T2332] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.015588][ T2332] device bridge_slave_1 entered promiscuous mode [ 148.173526][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.181856][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.214555][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.223175][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.232507][ T1855] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.239415][ T1855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.264778][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.273429][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.294301][ T1855] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.301168][ T1855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.323988][ T1749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.344425][ T1749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.361339][ T1749] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.374819][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.393847][ T1749] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.404267][ T1749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.431796][ T1749] usb 3-1: config 0 descriptor?? [ 148.447243][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.484200][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.576925][ T7] device bridge_slave_1 left promiscuous mode [ 148.584254][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.593358][ T7] device bridge_slave_0 left promiscuous mode [ 148.611665][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.630142][ T7] device bridge_slave_1 left promiscuous mode [ 148.639384][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.654528][ T7] device bridge_slave_0 left promiscuous mode [ 148.670831][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.894837][ T2340] F2FS-fs (loop1): invalid crc value [ 148.916683][ T1749] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.927776][ T1749] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 148.945036][ T2340] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.968863][ T1749] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 149.089734][ T2340] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 149.113598][ T2340] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 149.122055][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.154210][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.163480][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.228427][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.239332][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.283546][ T2274] attempt to access beyond end of device [ 149.283546][ T2274] loop1: rw=524288, want=45072, limit=40427 [ 149.299710][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.311083][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.336862][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.345391][ T2274] attempt to access beyond end of device [ 149.345391][ T2274] loop1: rw=0, want=45072, limit=40427 [ 149.358450][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.374067][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.382145][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.409958][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.422753][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.442910][ T1749] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.449849][ T1749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.479067][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.490832][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.512197][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.531872][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.538815][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.620049][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.629381][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.630091][ T879] attempt to access beyond end of device [ 149.630091][ T879] loop1: rw=2049, want=45120, limit=40427 [ 149.654553][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.663601][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.672416][ T2349] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 149.683502][ T2349] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.705344][ T2349] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 149.734955][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.745636][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.765135][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.774213][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.801334][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.810678][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.854718][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.865590][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.924553][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.937615][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.064751][ T23] audit: type=1400 audit(1718881890.438:260): avc: denied { create } for pid=2367 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 152.101420][ T23] audit: type=1400 audit(1718881890.468:261): avc: denied { read } for pid=2367 comm="syz-executor.3" name="file0" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 152.124803][ T2369] binder: 2368:2369 ioctl c0306201 20000380 returned -14 [ 152.613609][ T23] audit: type=1400 audit(1718881890.468:262): avc: denied { open } for pid=2367 comm="syz-executor.3" path="/root/syzkaller-testdir3345211233/syzkaller.lrY3B0/2/file0" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 152.856652][ T23] audit: type=1400 audit(1718881891.238:263): avc: denied { mounton } for pid=2367 comm="syz-executor.3" path="/root/syzkaller-testdir3345211233/syzkaller.lrY3B0/2/file0" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 152.895197][ T400] usb 3-1: USB disconnect, device number 6 [ 153.100646][ T23] audit: type=1400 audit(1718881891.478:264): avc: denied { unlink } for pid=2317 comm="syz-executor.3" name="file0" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 153.302954][ T2359] F2FS-fs (loop4): invalid crc value [ 153.454951][ T7] device bridge_slave_1 left promiscuous mode [ 153.491882][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.627417][ T7] device bridge_slave_0 left promiscuous mode [ 153.758792][ T2359] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.803882][ T369] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.828911][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.223953][ T2359] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 154.233975][ T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.264544][ T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.286704][ T369] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.313821][ T369] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.340638][ T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.351500][ T2391] attempt to access beyond end of device [ 154.351500][ T2391] loop4: rw=2049, want=45112, limit=40427 [ 154.372026][ T369] usb 4-1: config 0 descriptor?? [ 154.685473][ T2399] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.700933][ T2399] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.718411][ T2399] device bridge_slave_0 entered promiscuous mode [ 154.735356][ T2399] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.749954][ T2399] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.770826][ T2399] device bridge_slave_1 entered promiscuous mode [ 154.866996][ T369] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 154.885636][ T369] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 154.925067][ T369] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 155.135097][ T2399] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.141980][ T2399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.149418][ T2399] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.156409][ T2399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.232509][ T23] audit: type=1400 audit(1718881893.608:265): avc: denied { setopt } for pid=2411 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.343175][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.356312][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.376057][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.396332][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.408896][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.415893][ T919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.423583][ T2416] binder: 2415:2416 ioctl c0306201 20000380 returned -14 [ 155.434579][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.443053][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.450027][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.103153][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.112273][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.120924][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.130153][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.138800][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.148667][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.157869][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.166553][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.264777][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.273354][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.338547][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.350917][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.406240][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.415245][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.456351][ T23] audit: type=1400 audit(1718881894.838:266): avc: denied { mount } for pid=2433 comm="syz-executor.0" name="/" dev="tmpfs" ino=26303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 156.528748][ T23] audit: type=1400 audit(1718881894.888:267): avc: denied { unmount } for pid=881 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.043571][ T2441] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 157.229510][ T2441] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.354904][ T2441] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 157.575002][ T919] usb 4-1: USB disconnect, device number 3 [ 158.926036][ T2470] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 159.593908][ T919] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 159.984500][ T919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.065370][ T919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.208196][ T919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.400572][ T919] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.580054][ T919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.590789][ T919] usb 5-1: config 0 descriptor?? [ 160.695992][ T2496] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 160.734003][ T2496] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.755208][ T2496] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 161.081513][ T919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 161.099332][ T919] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 161.145955][ T919] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 161.366419][ T2509] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 162.213956][ T2524] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 162.249452][ T2520] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 162.277116][ T23] audit: type=1400 audit(1718881900.658:268): avc: denied { map } for pid=2519 comm="syz-executor.1" path="/root/syzkaller-testdir1303341940/syzkaller.9rgIA4/7/file0/bus" dev="devtmpfs" ino=9211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.620758][ T2399] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 162.721654][ T2399] EXT4-fs error (device loop1): __ext4_iget:5217: inode #13: block 127754: comm syz-executor.1: invalid block [ 162.816216][ T2399] EXT4-fs error (device loop1): __ext4_iget:5217: inode #13: block 127754: comm syz-executor.1: invalid block [ 162.887481][ T2535] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.907782][ T2535] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 162.923899][ T2526] ------------[ cut here ]------------ [ 162.925232][ T2535] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz-executor.0: iget: bad extended attribute block 19 [ 162.929232][ T2526] kernel BUG at fs/buffer.c:3027! [ 162.942337][ T2535] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 15 (err -117) 2024/06/20 11:11:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 163.033015][ T2535] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 163.051379][ T2526] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 163.057313][ T2526] CPU: 0 PID: 2526 Comm: kmmpd-loop1 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 163.067018][ T2526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 163.076940][ T2526] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 163.082137][ T2526] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 f6 a7 ba ff 0f 0b e8 ef a7 ba ff <0f> 0b e8 e8 a7 ba ff 0f 0b e8 e1 a7 ba ff 0f 0b e8 da a7 ba ff 0f [ 163.101578][ T2526] RSP: 0018:ffff8881e5157bf0 EFLAGS: 00010293 [ 163.107660][ T2526] RAX: ffffffff81a99431 RBX: 0000000000000000 RCX: ffff8881e84e8fc0 [ 163.115476][ T2526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.123287][ T2526] RBP: 0000000000003800 R08: ffffffff81a98ca4 R09: ffffed1039d81001 [ 163.131105][ T2526] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 163.138905][ T2526] R13: ffff8881cec08000 R14: 0000000000000001 R15: 0000000000000000 [ 163.146810][ T2526] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 163.155572][ T2526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.161996][ T2526] CR2: 00007fffecce6da8 CR3: 00000001dfd3e000 CR4: 00000000003406b0 [ 163.170764][ T2526] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.178572][ T2526] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.186371][ T2526] Call Trace: [ 163.189528][ T2526] ? __die+0xb4/0x100 [ 163.193340][ T2526] ? die+0x26/0x50 [ 163.196898][ T2526] ? do_trap+0x1e7/0x340 [ 163.200984][ T2526] ? submit_bh_wbc+0x831/0x850 [ 163.205581][ T2526] ? submit_bh_wbc+0x831/0x850 [ 163.210181][ T2526] ? do_invalid_op+0xfb/0x110 [ 163.214691][ T2526] ? submit_bh_wbc+0x831/0x850 [ 163.219303][ T2526] ? invalid_op+0x1e/0x30 [ 163.223465][ T2526] ? submit_bh_wbc+0xa4/0x850 [ 163.227980][ T2526] ? submit_bh_wbc+0x831/0x850 [ 163.232588][ T2526] ? submit_bh_wbc+0x831/0x850 [ 163.237176][ T2526] ? debug_smp_processor_id+0x20/0x20 [ 163.242395][ T2526] submit_bh+0x21/0x30 [ 163.246303][ T2526] write_mmp_block+0x3ff/0x5b0 [ 163.250901][ T2526] ? console_conditional_schedule+0x10/0x10 [ 163.256620][ T2526] ? check_preemption_disabled+0x9f/0x320 [ 163.262189][ T2526] ? read_mmp_block+0x8a0/0x8a0 [ 163.266870][ T2526] kmmpd+0x7de/0xa10 [ 163.270616][ T2526] ? write_mmp_block+0x5b0/0x5b0 [ 163.275379][ T2526] ? __wake_up_locked+0xb7/0x110 [ 163.280161][ T2526] ? __kthread_parkme+0xb0/0x1b0 [ 163.284934][ T2526] kthread+0x2da/0x360 [ 163.288826][ T2526] ? write_mmp_block+0x5b0/0x5b0 [ 163.293598][ T2526] ? kthread_blkcg+0xd0/0xd0 [ 163.298021][ T2526] ret_from_fork+0x1f/0x30 [ 163.302264][ T2526] Modules linked in: [ 163.311899][ T399] usb 5-1: USB disconnect, device number 4 [ 163.390754][ T2526] ---[ end trace 9eed3f46037a0887 ]--- [ 163.396655][ T2543] overlayfs: failed to resolve './file0': -2 [ 163.407704][ T2526] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 163.413605][ T2526] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 f6 a7 ba ff 0f 0b e8 ef a7 ba ff <0f> 0b e8 e8 a7 ba ff 0f 0b e8 e1 a7 ba ff 0f 0b e8 da a7 ba ff 0f [ 163.475399][ T2526] RSP: 0018:ffff8881e5157bf0 EFLAGS: 00010293 [ 163.487999][ T2526] RAX: ffffffff81a99431 RBX: 0000000000000000 RCX: ffff8881e84e8fc0 [ 163.514469][ T2526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.522310][ T2526] RBP: 0000000000003800 R08: ffffffff81a98ca4 R09: ffffed1039d81001 [ 163.560396][ T2526] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 163.586569][ T2526] R13: ffff8881cec08000 R14: 0000000000000001 R15: 0000000000000000 [ 163.596384][ T2526] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 163.616399][ T2526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.622840][ T2526] CR2: 0000563760e84458 CR3: 00000001ee15d000 CR4: 00000000003406b0 [ 163.634185][ T2526] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.642119][ T2526] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.653913][ T2526] Kernel panic - not syncing: Fatal exception [ 163.660025][ T2526] Kernel Offset: disabled [ 163.664206][ T2526] Rebooting in 86400 seconds..