last executing test programs: 1m46.096618803s ago: executing program 6 (id=5206): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 1m46.058928734s ago: executing program 6 (id=5208): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) 1m46.014126475s ago: executing program 6 (id=5214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000003c0)=0x1, 0x4) 1m45.977774866s ago: executing program 6 (id=5218): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f, 0x404}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x40040) 1m45.932375917s ago: executing program 6 (id=5222): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) unshare(0x20000400) 1m45.869445288s ago: executing program 6 (id=5226): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1m45.423926636s ago: executing program 5 (id=5259): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xee00) 1m45.382598337s ago: executing program 0 (id=5263): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000100)) 1m45.361512797s ago: executing program 5 (id=5266): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) 1m45.328550448s ago: executing program 0 (id=5267): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0xc}], 0x1, 0x0, 0x0, 0x0) 1m45.328149268s ago: executing program 4 (id=5269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 1m45.297299699s ago: executing program 5 (id=5270): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_virt_wifi\x00', &(0x7f0000000380)=@ethtool_test={0x1a, 0x0, 0x6}}) 1m45.296948239s ago: executing program 4 (id=5272): alarm(0x9) alarm(0x4) 1m45.268306999s ago: executing program 0 (id=5273): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/136, 0x88, 0x48) 1m45.267989869s ago: executing program 1 (id=5274): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800400030004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1m45.23382231s ago: executing program 4 (id=5275): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0x468}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) 1m45.23353282s ago: executing program 5 (id=5276): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x40000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3000000000000000) 1m45.22679411s ago: executing program 0 (id=5277): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, r0) 1m45.22595331s ago: executing program 4 (id=5278): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0xfffffffffffffffc) 1m45.181633371s ago: executing program 1 (id=5279): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@enum64={0x2, 0x0, 0x0, 0x13, 0x1, 0x1}, @datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], '\x00'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000001f80)=""/4094, 0x44, 0xffe, 0x1}, 0x28) 1m45.181431561s ago: executing program 5 (id=5280): add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m45.181319591s ago: executing program 4 (id=5281): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000080)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}, @hoplimit={{0x14, 0x29, 0x34, 0xa68}}], 0x30}, 0x4008801) 1m45.133021732s ago: executing program 0 (id=5282): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file3\x00', 0x100481e, &(0x7f00000022c0)=ANY=[@ANYBLOB='keep_last_dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp866,discard,iocharset=cp437,errors=remount-ro,discard,umask=00000000000000000000007,umask=0000000000000003,keep_last_dots,\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb, 0x1505, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x100) 1m45.132882962s ago: executing program 1 (id=5283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m45.132752162s ago: executing program 1 (id=5284): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x70bd25, 0x25dfdbfe, {0xa, 0x78, 0x191}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004840) 1m45.122691382s ago: executing program 4 (id=5285): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000240)={[{@fat=@nfs_stale_rw}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_win95}, {@fat=@time_offset={'time_offset', 0x3d, 0x1c9}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@numtail}, {@shortname_mixed}, {@utf8}, {@utf8no}, {@shortname_winnt}]}, 0x83, 0x358, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m45.104806652s ago: executing program 5 (id=5286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000088a85d", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m45.088282963s ago: executing program 1 (id=5287): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m45.027771644s ago: executing program 1 (id=5288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000280)="17000000020001000003be8c5ee1568812003c000a03000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814b4f00c88fbb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e0400600000000000000dcd87f4e312a70ed4d46", 0xb8) 1m45.027264674s ago: executing program 0 (id=5289): r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) futimesat(r0, 0x0, 0x0) 1m23.119415352s ago: executing program 32 (id=5289): r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) futimesat(r0, 0x0, 0x0) 55.012322389s ago: executing program 33 (id=5288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000280)="17000000020001000003be8c5ee1568812003c000a03000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814b4f00c88fbb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e0400600000000000000dcd87f4e312a70ed4d46", 0xb8) 53.355586531s ago: executing program 34 (id=5226): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 53.345668081s ago: executing program 35 (id=5286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000088a85d", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 53.306772882s ago: executing program 36 (id=5285): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000240)={[{@fat=@nfs_stale_rw}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_win95}, {@fat=@time_offset={'time_offset', 0x3d, 0x1c9}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@numtail}, {@shortname_mixed}, {@utf8}, {@utf8no}, {@shortname_winnt}]}, 0x83, 0x358, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 26.536758783s ago: executing program 8 (id=6479): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x4000) 26.516956504s ago: executing program 8 (id=6482): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@heap}, {@alloc_mode_def}, {@six_active_logs}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x17}}, {@discard}, {@lfs_mode}, {@fsync_mode_posix}, {@alloc_mode_def}, {@memory_low}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5512, &(0x7f0000005a80)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x100, 0xb38dcf3f7bb4b8a7, 0x0) 25.686475719s ago: executing program 8 (id=6534): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) 25.366615976s ago: executing program 8 (id=6545): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000000)) 25.291461767s ago: executing program 8 (id=6549): ioperm(0x7, 0x5, 0xa) keyctl$invalidate(0x15, 0x0) 25.199982489s ago: executing program 8 (id=6556): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1, @ANYRESHEX], 0x0) 25.012603873s ago: executing program 2 (id=6562): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) read(r0, &(0x7f0000001240)=""/4096, 0x1000) 24.973849943s ago: executing program 2 (id=6563): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xfffffffb}]}}]}, 0x38}}, 0x4048000) 24.904125535s ago: executing program 2 (id=6565): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r0, 0xffffffffffffffff, 0x2) pidfd_getfd(r0, r0, 0x0) 24.903876175s ago: executing program 2 (id=6567): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 24.857030885s ago: executing program 2 (id=6569): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write(r0, &(0x7f0000000340)="0ba42ffb8fa9a4b4b004a401a80a06a8790940966cf2f0d46d43bd05cce3b30134173b6e4a21147375def1f3f05e0ecb8f72d23560b38f4255bf8fb74d5998a5d01f2309ffbea39381310b6b645d14b371a128428452159465b36317645dc17070c041c49b67", 0x66) 24.803849097s ago: executing program 2 (id=6573): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ppoll(&(0x7f0000001600)=[{r0, 0x400}], 0x1, 0x0, 0x0, 0x0) 24.508959352s ago: executing program 9 (id=6590): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3e, &(0x7f0000000100)=0x3915, 0x4) 24.490069663s ago: executing program 7 (id=6591): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x13}, @loopback, 0x1, 0x7, 0x80, 0x100, 0x4, 0x100440200}) 24.472944872s ago: executing program 3 (id=6592): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) 24.434250594s ago: executing program 3 (id=6593): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x100000}) 24.417507554s ago: executing program 9 (id=6594): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5414, 0x20200007) 24.416275484s ago: executing program 7 (id=6595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2a8, 0x278, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x5, 0x8}}, @common=@unspec=@addrtype1={{0x28}, {0x810, 0x34, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x3, 0x0, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x7f}}}}, {{@ipv6={@private1, @private1, [], [], 'geneve1\x00', 'erspan0\x00', {0xff}}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0xfffffffd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 24.415979474s ago: executing program 3 (id=6596): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000180)={0x2d}, 0x18) 24.367239915s ago: executing program 3 (id=6598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x18, r1, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) 24.333154606s ago: executing program 3 (id=6599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="39020000000000000000140000000c000780070002"], 0x20}}, 0x0) 24.333029005s ago: executing program 3 (id=6600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.332794955s ago: executing program 9 (id=6601): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5}]}}}]}, 0x48}}, 0x0) 24.322163236s ago: executing program 7 (id=6602): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 24.302700196s ago: executing program 9 (id=6603): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000010000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0) 24.293033366s ago: executing program 7 (id=6604): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006980)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) fadvise64(r0, 0xc89, 0x8000000000000001, 0x5) 24.264824237s ago: executing program 7 (id=6605): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0xe6e, 0xfffffff7, &(0x7f0000000600)}) 24.264771717s ago: executing program 9 (id=6606): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) 24.248769147s ago: executing program 9 (id=6607): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 24.232004588s ago: executing program 7 (id=6608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10d70500231a0500180012800e00010069703665727370616e00000004000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 11.83541ms ago: executing program 37 (id=6608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10d70500231a0500180012800e00010069703665727370616e00000004000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 0s ago: executing program 38 (id=6556): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1, @ANYRESHEX], 0x0) kernel console output (not intermixed with test programs): pt directory, running e2fsck is recommended [ 186.241541][T10351] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 186.250099][T10351] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.5117: corrupted in-inode xattr [ 186.263205][T10351] EXT4-fs (loop5): Remounting filesystem read-only [ 186.272156][T10351] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.5117: couldn't read orphan inode 15 (err -117) [ 186.274108][T10365] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.291766][T10351] EXT4-fs (loop5): Remounting filesystem read-only [ 186.298911][T10351] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 186.306096][T10365] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 186.329630][ T1002] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 186.337231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.345568][T10351] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 186.380374][ T1022] EXT4-fs (loop5): unmounting filesystem. [ 186.389154][T10373] xt_hashlimit: max too large, truncated to 1048576 [ 186.403117][T10373] xt_bpf: check failed: parse error [ 186.464138][T10385] __nla_validate_parse: 7 callbacks suppressed [ 186.464157][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5135'. [ 186.496154][T10389] netlink: 'syz.0.5138': attribute type 7 has an invalid length. [ 186.504230][T10389] netlink: 'syz.0.5138': attribute type 5 has an invalid length. [ 186.517085][ T1002] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 186.526050][T10389] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5138'. [ 186.539269][ T1002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 186.569138][ T1002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 186.608115][ T1002] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.618389][T10407] loop4: detected capacity change from 0 to 256 [ 186.640639][ T1002] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 186.659549][ T1002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.667891][T10407] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 186.694348][ T1002] usb 7-1: config 0 descriptor?? [ 186.712171][ T1002] usb 7-1: MIDIStreaming interface descriptor not found [ 186.753848][ T1002] snd-usb-audio: probe of 7-1:0.0 failed with error -12 [ 186.793692][ T1341] udevd[1341]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.896275][ T1002] usb 7-1: USB disconnect, device number 75 [ 186.910357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.985670][T10461] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5173'. [ 187.033250][T10470] xt_TPROXY: Can be used only with -p tcp or -p udp [ 187.085942][T10480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5184'. [ 187.138247][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5187'. [ 187.148702][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5187'. [ 187.190420][T10495] loop4: detected capacity change from 0 to 256 [ 187.221837][T10495] FAT-fs (loop4): Directory bread(block 64) failed [ 187.249309][T10495] FAT-fs (loop4): Directory bread(block 65) failed [ 187.273561][T10495] FAT-fs (loop4): Directory bread(block 66) failed [ 187.292964][T10495] FAT-fs (loop4): Directory bread(block 67) failed [ 187.294902][T10511] netlink: 'syz.1.5198': attribute type 1 has an invalid length. [ 187.307521][T10495] FAT-fs (loop4): Directory bread(block 68) failed [ 187.314722][T10511] netlink: 'syz.1.5198': attribute type 2 has an invalid length. [ 187.319449][T10495] FAT-fs (loop4): Directory bread(block 69) failed [ 187.329196][T10513] netlink: 'syz.0.5199': attribute type 7 has an invalid length. [ 187.329364][T10495] FAT-fs (loop4): Directory bread(block 70) failed [ 187.337156][T10513] netlink: 'syz.0.5199': attribute type 8 has an invalid length. [ 187.345536][T10495] FAT-fs (loop4): Directory bread(block 71) failed [ 187.361157][T10495] FAT-fs (loop4): Directory bread(block 72) failed [ 187.377250][T10495] FAT-fs (loop4): Directory bread(block 73) failed [ 187.384752][T10518] tc_dump_action: action bad kind [ 187.639916][T10565] loop1: detected capacity change from 0 to 1024 [ 187.677721][T10565] EXT4-fs: Ignoring removed orlov option [ 187.723544][T10565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 187.769273][ T1023] EXT4-fs (loop1): unmounting filesystem. [ 188.048979][T10628] xt_TPROXY: Can be used only with -p tcp or -p udp [ 188.357191][T10680] loop0: detected capacity change from 0 to 256 [ 188.395514][T10680] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 188.414932][T10691] loop4: detected capacity change from 0 to 256 [ 188.434443][T10691] FAT-fs (loop4): Directory bread(block 64) failed [ 188.462850][T10691] FAT-fs (loop4): Directory bread(block 65) failed [ 188.484674][T10691] FAT-fs (loop4): Directory bread(block 66) failed [ 188.492268][T10691] FAT-fs (loop4): Directory bread(block 67) failed [ 188.499019][T10691] FAT-fs (loop4): Directory bread(block 68) failed [ 190.669926][T10691] FAT-fs (loop4): Directory bread(block 69) failed [ 190.685177][T10691] FAT-fs (loop4): Directory bread(block 70) failed [ 191.255930][T10691] FAT-fs (loop4): Directory bread(block 71) failed [ 209.240715][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P10690 } 2227 jiffies s: 6813 root: 0x0/T [ 209.252476][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 219.173040][T10690] syz.5.5286: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 219.185255][T10690] CPU: 0 PID: 10690 Comm: syz.5.5286 Not tainted syzkaller #0 [ 219.192727][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.202837][T10690] Call Trace: [ 219.206125][T10690] [ 219.209067][T10690] __dump_stack+0x21/0x24 [ 219.213411][T10690] dump_stack_lvl+0xee/0x150 [ 219.218008][T10690] ? __cfi_dump_stack_lvl+0x8/0x8 [ 219.223044][T10690] ? pr_cont_kernfs_name+0x133/0x160 [ 219.228362][T10690] dump_stack+0x15/0x24 [ 219.232542][T10690] warn_alloc+0x1b0/0x1d0 [ 219.236899][T10690] ? __cfi_warn_alloc+0x10/0x10 [ 219.241795][T10690] ? __kasan_check_read+0x11/0x20 [ 219.246828][T10690] __alloc_pages_slowpath+0x29da/0x2c00 [ 219.252389][T10690] ? __zone_watermark_ok+0x8a/0x3f0 [ 219.257612][T10690] ? get_page_from_freelist+0x2cf0/0x2cf0 [ 219.263356][T10690] ? kasan_set_track+0x60/0x70 [ 219.268127][T10690] ? kasan_save_free_info+0x31/0x50 [ 219.273342][T10690] ? ____kasan_slab_free+0x132/0x180 [ 219.278646][T10690] ? __kasan_slab_free+0x11/0x20 [ 219.283604][T10690] __alloc_pages+0x2db/0x450 [ 219.288216][T10690] ? do_syscall_64+0x4c/0xa0 [ 219.292822][T10690] ? __cfi___alloc_pages+0x10/0x10 [ 219.297951][T10690] alloc_slab_page+0x6e/0xf0 [ 219.302563][T10690] new_slab+0x30e/0x3d0 [ 219.306767][T10690] ___slab_alloc+0x6bd/0xb20 [ 219.311369][T10690] ? skb_clone+0x1f5/0x380 [ 219.315796][T10690] ? kmem_cache_free+0x12d/0x300 [ 219.320768][T10690] ? ____kasan_slab_free+0x13d/0x180 [ 219.326079][T10690] ? __kasan_slab_free+0x11/0x20 [ 219.331039][T10690] __slab_alloc+0x5e/0xa0 [ 219.335430][T10690] ? skb_clone+0x1f5/0x380 [ 219.339869][T10690] ? skb_clone+0x1f5/0x380 [ 219.344332][T10690] kmem_cache_alloc+0x1b0/0x330 [ 219.349208][T10690] ? skb_clone+0x1f5/0x380 [ 219.353646][T10690] skb_clone+0x1f5/0x380 [ 219.358007][T10690] bpf_clone_redirect+0xa7/0x3c0 [ 219.362951][T10690] bpf_prog_208b094576c80b22+0x56/0x5b [ 219.368431][T10690] ? kasan_set_track+0x60/0x70 [ 219.373297][T10690] ? kasan_set_track+0x4b/0x70 [ 219.378067][T10690] ? kasan_save_alloc_info+0x25/0x30 [ 219.383393][T10690] ? __kasan_slab_alloc+0x72/0x80 [ 219.388533][T10690] ? slab_post_alloc_hook+0x4f/0x2d0 [ 219.393890][T10690] ? kmem_cache_alloc+0x16e/0x330 [ 219.398955][T10690] ? build_skb+0x2a/0x220 [ 219.403327][T10690] ? irqentry_exit+0x37/0x40 [ 219.407932][T10690] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 219.408323][ C1] sched: RT throttling activated [ 219.418705][T10690] ? irqentry_exit+0x37/0x40 [ 219.423322][T10690] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 219.429147][T10690] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 219.435317][T10690] ? __kasan_check_read+0x11/0x20 [ 219.440348][T10690] ? bpf_test_timer_continue+0x147/0x4a0 [ 219.445996][T10690] bpf_test_run+0x349/0x8d0 [ 219.450513][T10690] ? __kasan_slab_alloc+0x72/0x80 [ 219.455588][T10690] ? convert___skb_to_skb+0x5b0/0x5b0 [ 219.460974][T10690] ? __cfi_eth_type_trans+0x10/0x10 [ 219.466182][T10690] ? convert___skb_to_skb+0x40/0x5b0 [ 219.471570][T10690] bpf_prog_test_run_skb+0xaec/0x1290 [ 219.476959][T10690] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 219.482782][T10690] bpf_prog_test_run+0x3e3/0x630 [ 219.487730][T10690] ? bpf_prog_query+0x270/0x270 [ 219.492586][T10690] ? selinux_bpf+0xce/0xf0 [ 219.497003][T10690] ? security_bpf+0x93/0xb0 [ 219.501513][T10690] __sys_bpf+0x56d/0x780 [ 219.505793][T10690] ? bpf_link_show_fdinfo+0x320/0x320 [ 219.511179][T10690] ? fpregs_restore_userregs+0x128/0x260 [ 219.516823][T10690] __x64_sys_bpf+0x7c/0x90 [ 219.521253][T10690] x64_sys_call+0x488/0x9a0 [ 219.525770][T10690] do_syscall_64+0x4c/0xa0 [ 219.530192][T10690] ? clear_bhb_loop+0x30/0x80 [ 219.534877][T10690] ? clear_bhb_loop+0x30/0x80 [ 219.539568][T10690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.545504][T10690] RIP: 0033:0x7f7a66d8eec9 [ 219.549927][T10690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.569537][T10690] RSP: 002b:00007f7a67be2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.577962][T10690] RAX: ffffffffffffffda RBX: 00007f7a66fe5fa0 RCX: 00007f7a66d8eec9 [ 219.585939][T10690] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 219.594011][T10690] RBP: 00007f7a66e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 219.601986][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.610058][T10690] R13: 00007f7a66fe6038 R14: 00007f7a66fe5fa0 R15: 00007fff5c29ac28 [ 219.618052][T10690] [ 219.621113][T10690] Mem-Info: [ 219.624269][T10690] active_anon:5119 inactive_anon:8 isolated_anon:0 [ 219.624269][T10690] active_file:13519 inactive_file:13109 isolated_file:0 [ 219.624269][T10690] unevictable:0 dirty:224 writeback:1 [ 219.624269][T10690] slab_reclaimable:7932 slab_unreclaimable:1574588 [ 219.624269][T10690] mapped:29086 shmem:227 pagetables:531 [ 219.624269][T10690] sec_pagetables:0 bounce:0 [ 219.624269][T10690] kernel_misc_reclaimable:0 [ 219.624269][T10690] free:10797 free_pcp:5466 free_cma:0 [ 219.669047][T10690] Node 0 active_anon:20476kB inactive_anon:32kB active_file:54076kB inactive_file:52436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116344kB dirty:896kB writeback:4kB shmem:908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5124kB pagetables:2124kB sec_pagetables:0kB all_unreclaimable? no [ 219.701157][T10690] DMA32 free:27440kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974192kB mlocked:0kB bounce:0kB free_pcp:9136kB local_pcp:7892kB free_cma:0kB [ 219.729252][T10690] lowmem_reserve[]: 0 3932 3932 3932 [ 219.734592][T10690] Normal free:15748kB boost:95476kB min:137912kB low:148520kB high:159128kB reserved_highatomic:0KB active_anon:20476kB inactive_anon:32kB active_file:53704kB inactive_file:52740kB unevictable:0kB writepending:900kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:12728kB local_pcp:12680kB free_cma:0kB [ 219.764868][T10690] lowmem_reserve[]: 0 0 0 0 [ 219.769398][T10690] DMA32: 4*4kB (UM) 2*8kB (UM) 3*16kB (UM) 3*32kB (M) 4*64kB (UM) 3*128kB (M) 4*256kB (UM) 4*512kB (UM) 3*1024kB (M) 2*2048kB (M) 4*4096kB (M) = 27440kB [ 219.784934][T10690] Normal: 693*4kB (UME) 456*8kB (UME) 215*16kB (ME) 92*32kB (UME) 46*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 15748kB [ 219.799225][T10690] 26844 total pagecache pages [ 219.803939][T10690] 15 pages in swap cache [ 219.808180][T10690] Free swap = 124728kB [ 219.812377][T10690] Total swap = 124996kB [ 219.816538][T10690] 2097051 pages RAM [ 219.820480][T10690] 0 pages HighMem/MovableOnly [ 219.825158][T10690] 346839 pages reserved [ 219.829332][T10690] 0 pages cma reserved [ 219.833400][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 219.841440][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 219.851978][T10690] node 0: slabs: 43366, objs: 520392, free: 0 [ 219.858289][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 219.866291][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 219.876818][T10690] node 0: slabs: 43366, objs: 520392, free: 0 [ 219.883080][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 219.891083][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 219.901603][T10690] node 0: slabs: 43366, objs: 520392, free: 0 [ 219.907878][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 219.915909][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 219.926556][T10690] node 0: slabs: 43366, objs: 520392, free: 0 [ 219.932877][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 219.940879][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 219.951428][T10690] node 0: slabs: 43366, objs: 520392, free: 0 [ 219.957691][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 219.965699][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 219.976223][T10690] node 0: slabs: 43366, objs: 520392, free: 0 [ 219.982496][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 219.990597][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 220.001142][T10690] node 0: slabs: 43366, objs: 520392, free: 0 [ 220.007436][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 220.015436][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 220.025960][T10690] node 0: slabs: 43366, objs: 520392, free: 0 [ 220.032223][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 220.040226][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 220.050779][T10690] node 0: slabs: 43366, objs: 520392, free: 0 [ 220.057063][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 220.065068][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 220.075592][T10690] node 0: slabs: 43366, objs: 520392, free: 0 [ 224.497345][T10690] slab_out_of_memory: 842247 callbacks suppressed [ 224.497366][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 224.511899][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 224.522435][T10690] node 0: slabs: 44808, objs: 537696, free: 0 [ 224.528718][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 224.536724][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 224.547771][T10690] node 0: slabs: 44808, objs: 537696, free: 0 [ 224.554062][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 224.562149][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 224.572692][T10690] node 0: slabs: 44808, objs: 537696, free: 0 [ 224.578956][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 224.586964][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 224.597502][T10690] node 0: slabs: 44808, objs: 537696, free: 0 [ 224.603779][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 224.611783][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 224.622313][T10690] node 0: slabs: 44808, objs: 537696, free: 0 [ 224.628609][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 224.636685][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 224.647321][T10690] node 0: slabs: 44808, objs: 537696, free: 0 [ 224.653585][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 224.661676][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 224.672205][T10690] node 0: slabs: 44808, objs: 537696, free: 0 [ 224.678479][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 224.686517][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 224.697220][T10690] node 0: slabs: 44808, objs: 537696, free: 0 [ 224.703493][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 224.711497][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 224.722019][T10690] node 0: slabs: 44808, objs: 537696, free: 0 [ 224.728279][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 224.736280][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 224.746852][T10690] node 0: slabs: 44808, objs: 537696, free: 0 [ 228.495851][T10690] warn_alloc: 1619756 callbacks suppressed [ 228.495872][T10690] syz.5.5286: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 228.513927][T10690] CPU: 0 PID: 10690 Comm: syz.5.5286 Not tainted syzkaller #0 [ 228.521394][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.531460][T10690] Call Trace: [ 228.534749][T10690] [ 228.537685][T10690] __dump_stack+0x21/0x24 [ 228.542039][T10690] dump_stack_lvl+0xee/0x150 [ 228.546635][T10690] ? __cfi_dump_stack_lvl+0x8/0x8 [ 228.551674][T10690] ? pr_cont_kernfs_name+0x133/0x160 [ 228.556979][T10690] dump_stack+0x15/0x24 [ 228.561149][T10690] warn_alloc+0x1b0/0x1d0 [ 228.565503][T10690] ? __cfi_warn_alloc+0x10/0x10 [ 228.570368][T10690] ? __kasan_check_read+0x11/0x20 [ 228.575406][T10690] __alloc_pages_slowpath+0x29da/0x2c00 [ 228.580986][T10690] ? __zone_watermark_ok+0x8a/0x3f0 [ 228.586210][T10690] ? get_page_from_freelist+0x2cf0/0x2cf0 [ 228.591952][T10690] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 228.597779][T10690] __alloc_pages+0x2db/0x450 [ 228.602382][T10690] ? __cfi___alloc_pages+0x10/0x10 [ 228.607524][T10690] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 228.613373][T10690] ? __cfi____ratelimit+0x10/0x10 [ 228.618418][T10690] alloc_slab_page+0x6e/0xf0 [ 228.623113][T10690] new_slab+0x30e/0x3d0 [ 228.627289][T10690] ___slab_alloc+0x6bd/0xb20 [ 228.631890][T10690] ? skb_clone+0x1f5/0x380 [ 228.636440][T10690] ? skb_clone+0x1f5/0x380 [ 228.640871][T10690] __slab_alloc+0x5e/0xa0 [ 228.645220][T10690] ? skb_clone+0x1f5/0x380 [ 228.649644][T10690] ? skb_clone+0x1f5/0x380 [ 228.654073][T10690] kmem_cache_alloc+0x1b0/0x330 [ 228.658951][T10690] ? skb_clone+0x1f5/0x380 [ 228.663396][T10690] skb_clone+0x1f5/0x380 [ 228.667662][T10690] bpf_clone_redirect+0xa7/0x3c0 [ 228.672617][T10690] bpf_prog_208b094576c80b22+0x56/0x5b [ 228.678083][T10690] ? kasan_set_track+0x60/0x70 [ 228.682864][T10690] ? kasan_set_track+0x4b/0x70 [ 228.687668][T10690] ? kasan_save_alloc_info+0x25/0x30 [ 228.692973][T10690] ? __kasan_slab_alloc+0x72/0x80 [ 228.698007][T10690] ? slab_post_alloc_hook+0x4f/0x2d0 [ 228.703310][T10690] ? kmem_cache_alloc+0x16e/0x330 [ 228.708347][T10690] ? build_skb+0x2a/0x220 [ 228.712699][T10690] ? irqentry_exit+0x37/0x40 [ 228.717305][T10690] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 228.723133][T10690] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 228.729334][T10690] ? bpf_test_timer_continue+0x147/0x4a0 [ 228.735002][T10690] ? __kasan_check_read+0x11/0x20 [ 228.740057][T10690] ? bpf_test_timer_continue+0x147/0x4a0 [ 228.745724][T10690] bpf_test_run+0x349/0x8d0 [ 228.750271][T10690] ? __kasan_slab_alloc+0x72/0x80 [ 228.755306][T10690] ? convert___skb_to_skb+0x5b0/0x5b0 [ 228.760779][T10690] ? __cfi_eth_type_trans+0x10/0x10 [ 228.766166][T10690] ? convert___skb_to_skb+0x40/0x5b0 [ 228.771461][T10690] bpf_prog_test_run_skb+0xaec/0x1290 [ 228.776854][T10690] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 228.782695][T10690] bpf_prog_test_run+0x3e3/0x630 [ 228.787643][T10690] ? bpf_prog_query+0x270/0x270 [ 228.792504][T10690] ? selinux_bpf+0xce/0xf0 [ 228.797014][T10690] ? security_bpf+0x93/0xb0 [ 228.801526][T10690] __sys_bpf+0x56d/0x780 [ 228.805774][T10690] ? bpf_link_show_fdinfo+0x320/0x320 [ 228.811156][T10690] ? fpregs_restore_userregs+0x128/0x260 [ 228.816797][T10690] __x64_sys_bpf+0x7c/0x90 [ 228.821230][T10690] x64_sys_call+0x488/0x9a0 [ 228.825741][T10690] do_syscall_64+0x4c/0xa0 [ 228.830165][T10690] ? clear_bhb_loop+0x30/0x80 [ 228.834856][T10690] ? clear_bhb_loop+0x30/0x80 [ 228.839551][T10690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.845453][T10690] RIP: 0033:0x7f7a66d8eec9 [ 228.849935][T10690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.869634][T10690] RSP: 002b:00007f7a67be2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.878147][T10690] RAX: ffffffffffffffda RBX: 00007f7a66fe5fa0 RCX: 00007f7a66d8eec9 [ 228.886126][T10690] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 228.894102][T10690] RBP: 00007f7a66e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 228.902086][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.910065][T10690] R13: 00007f7a66fe6038 R14: 00007f7a66fe5fa0 R15: 00007fff5c29ac28 [ 228.918055][T10690] [ 228.921126][T10690] Mem-Info: [ 228.924446][T10690] active_anon:5119 inactive_anon:8 isolated_anon:0 [ 228.924446][T10690] active_file:13719 inactive_file:12709 isolated_file:0 [ 228.924446][T10690] unevictable:0 dirty:224 writeback:1 [ 228.924446][T10690] slab_reclaimable:7932 slab_unreclaimable:1572267 [ 228.924446][T10690] mapped:29086 shmem:227 pagetables:531 [ 228.924446][T10690] sec_pagetables:0 bounce:0 [ 228.924446][T10690] kernel_misc_reclaimable:0 [ 228.924446][T10690] free:18668 free_pcp:1 free_cma:0 [ 228.968966][T10690] Node 0 active_anon:20476kB inactive_anon:32kB active_file:54876kB inactive_file:50836kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116344kB dirty:896kB writeback:4kB shmem:908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5124kB pagetables:2124kB sec_pagetables:0kB all_unreclaimable? no [ 229.001098][T10690] DMA32 free:36576kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.028616][T10690] lowmem_reserve[]: 0 3932 3932 3932 [ 229.033940][T10690] Normal free:38096kB boost:95476kB min:137912kB low:148520kB high:159128kB reserved_highatomic:0KB active_anon:20476kB inactive_anon:32kB active_file:54712kB inactive_file:51228kB unevictable:0kB writepending:900kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 229.063474][T10690] lowmem_reserve[]: 0 0 0 0 [ 229.068030][T10690] DMA32: 8*4kB (UM) 4*8kB (UM) 6*16kB (UM) 12*32kB (UM) 9*64kB (UM) 9*128kB (UM) 6*256kB (UM) 8*512kB (UM) 8*1024kB (UM) 2*2048kB (M) 4*4096kB (M) = 36576kB [ 229.083908][T10690] Normal: 870*4kB (UME) 515*8kB (UME) 290*16kB (UME) 126*32kB (UME) 58*64kB (UM) 57*128kB (UM) 15*256kB (UM) 4*512kB (M) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 38288kB [ 229.100569][T10690] 26669 total pagecache pages [ 229.105261][T10690] 15 pages in swap cache [ 229.109503][T10690] Free swap = 124728kB [ 229.113679][T10690] Total swap = 124996kB [ 229.117833][T10690] 2097051 pages RAM [ 229.121654][T10690] 0 pages HighMem/MovableOnly [ 229.126329][T10690] 346839 pages reserved [ 229.130498][T10690] 0 pages cma reserved [ 229.624799][T10690] slab_out_of_memory: 777491 callbacks suppressed [ 229.624825][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 229.639276][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 229.649796][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 229.656078][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 229.664076][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 229.674634][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 229.680910][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 229.688907][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 229.699422][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 229.705767][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 229.713776][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 229.724301][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 229.730580][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 229.738574][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 229.749127][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 229.755392][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 229.763396][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 229.773912][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 229.780196][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 229.788208][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 229.798730][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 229.805006][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 229.813031][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 229.823576][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 229.829850][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 229.837828][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 229.848354][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 229.854615][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 229.862607][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 229.873120][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 234.293222][T10690] slab_out_of_memory: 911762 callbacks suppressed [ 234.293244][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 234.307699][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 234.318665][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 234.324952][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 234.332953][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 234.343564][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 234.349885][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 234.357998][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 234.368527][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 234.374897][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 234.382936][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 234.393497][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 234.399798][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 234.407835][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 234.418356][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 234.424633][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 234.432627][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 234.443246][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 234.449507][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 234.457619][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 234.468180][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 234.474567][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 234.482572][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 234.493095][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 234.499386][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 234.507409][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 234.517934][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 234.524201][T10690] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 234.532238][T10690] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 234.542763][T10690] node 0: slabs: 47281, objs: 567372, free: 0 [ 237.825697][T10690] warn_alloc: 1382151 callbacks suppressed [ 237.825718][T10690] syz.5.5286: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 237.843701][T10690] CPU: 0 PID: 10690 Comm: syz.5.5286 Not tainted syzkaller #0 [ 237.851253][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.861321][T10690] Call Trace: [ 237.864609][T10690] [ 237.867551][T10690] __dump_stack+0x21/0x24 [ 237.871895][T10690] dump_stack_lvl+0xee/0x150 [ 237.876494][T10690] ? __cfi_dump_stack_lvl+0x8/0x8 [ 237.881531][T10690] ? pr_cont_kernfs_name+0x133/0x160 [ 237.886838][T10690] dump_stack+0x15/0x24 [ 237.891010][T10690] warn_alloc+0x1b0/0x1d0 [ 237.895358][T10690] ? __cfi_warn_alloc+0x10/0x10 [ 237.900228][T10690] ? __kasan_check_read+0x11/0x20 [ 237.905268][T10690] __alloc_pages_slowpath+0x29da/0x2c00 [ 237.910914][T10690] ? __zone_watermark_ok+0x8a/0x3f0 [ 237.916140][T10690] ? get_page_from_freelist+0x2cf0/0x2cf0 [ 237.921884][T10690] __alloc_pages+0x2db/0x450 [ 237.926493][T10690] ? __cfi___alloc_pages+0x10/0x10 [ 237.931714][T10690] ? _raw_spin_unlock_irqrestore+0x55/0x80 [ 237.937535][T10690] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 237.943353][T10690] ? __cfi____ratelimit+0x10/0x10 [ 237.948396][T10690] alloc_slab_page+0x6e/0xf0 [ 237.953009][T10690] new_slab+0x30e/0x3d0 [ 237.957187][T10690] ? slab_out_of_memory+0x41/0x110 [ 237.962319][T10690] ___slab_alloc+0x6bd/0xb20 [ 237.966924][T10690] ? skb_clone+0x1f5/0x380 [ 237.971356][T10690] ? skb_clone+0x1f5/0x380 [ 237.975872][T10690] __slab_alloc+0x5e/0xa0 [ 237.980216][T10690] ? skb_clone+0x1f5/0x380 [ 237.984648][T10690] ? skb_clone+0x1f5/0x380 [ 237.989074][T10690] kmem_cache_alloc+0x1b0/0x330 [ 237.993940][T10690] ? skb_clone+0x1f5/0x380 [ 237.998381][T10690] skb_clone+0x1f5/0x380 [ 238.002631][T10690] bpf_clone_redirect+0xa7/0x3c0 [ 238.007579][T10690] bpf_prog_208b094576c80b22+0x56/0x5b [ 238.013069][T10690] ? kasan_set_track+0x60/0x70 [ 238.017845][T10690] ? kasan_set_track+0x4b/0x70 [ 238.022630][T10690] ? kasan_save_alloc_info+0x25/0x30 [ 238.027937][T10690] ? __kasan_slab_alloc+0x72/0x80 [ 238.032973][T10690] ? slab_post_alloc_hook+0x4f/0x2d0 [ 238.038274][T10690] ? kmem_cache_alloc+0x16e/0x330 [ 238.043322][T10690] ? build_skb+0x2a/0x220 [ 238.047673][T10690] ? irqentry_exit+0x37/0x40 [ 238.052292][T10690] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 238.058153][T10690] ? irqentry_exit+0x37/0x40 [ 238.062886][T10690] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 238.068734][T10690] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 238.074933][T10690] ? __kasan_check_read+0x11/0x20 [ 238.079984][T10690] ? bpf_test_timer_continue+0x147/0x4a0 [ 238.085671][T10690] bpf_test_run+0x349/0x8d0 [ 238.090308][T10690] ? __kasan_slab_alloc+0x72/0x80 [ 238.095403][T10690] ? convert___skb_to_skb+0x5b0/0x5b0 [ 238.100830][T10690] ? __cfi_eth_type_trans+0x10/0x10 [ 238.106104][T10690] ? convert___skb_to_skb+0x40/0x5b0 [ 238.111509][T10690] bpf_prog_test_run_skb+0xaec/0x1290 [ 238.116934][T10690] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 238.122785][T10690] bpf_prog_test_run+0x3e3/0x630 [ 238.127761][T10690] ? bpf_prog_query+0x270/0x270 [ 238.132655][T10690] ? selinux_bpf+0xce/0xf0 [ 238.137106][T10690] ? security_bpf+0x93/0xb0 [ 238.141753][T10690] __sys_bpf+0x56d/0x780 [ 238.146037][T10690] ? bpf_link_show_fdinfo+0x320/0x320 [ 238.151481][T10690] ? fpregs_restore_userregs+0x128/0x260 [ 238.157154][T10690] __x64_sys_bpf+0x7c/0x90 [ 238.158658][T10691] FAT-fs (loop4): Directory bread(block 72) failed [ 238.161610][T10690] x64_sys_call+0x488/0x9a0 [ 238.161640][T10690] do_syscall_64+0x4c/0xa0 [ 238.177093][T10690] ? clear_bhb_loop+0x30/0x80 [ 238.181814][T10690] ? clear_bhb_loop+0x30/0x80 [ 238.186534][T10690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.192475][T10690] RIP: 0033:0x7f7a66d8eec9 [ 238.196924][T10690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.209249][T10691] FAT-fs (loop4): Directory bread(block 73) failed [ 238.216657][T10690] RSP: 002b:00007f7a67be2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.216687][T10690] RAX: ffffffffffffffda RBX: 00007f7a66fe5fa0 RCX: 00007f7a66d8eec9 [ 238.216703][T10690] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 238.216717][T10690] RBP: 00007f7a66e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 238.216729][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.216741][T10690] R13: 00007f7a66fe6038 R14: 00007f7a66fe5fa0 R15: 00007fff5c29ac28 [ 238.216763][T10690] [ 238.268903][T10691] FAT-fs (loop4): Directory bread(block 74) failed [ 238.271695][T10690] Mem-Info: [ 238.284361][T10690] active_anon:4650 inactive_anon:455 isolated_anon:0 [ 238.284361][T10690] active_file:14985 inactive_file:9569 isolated_file:0 [ 238.284361][T10690] unevictable:0 dirty:208 writeback:18 [ 238.284361][T10690] slab_reclaimable:7911 slab_unreclaimable:1500308 [ 238.284361][T10690] mapped:29087 shmem:227 pagetables:488 [ 238.284361][T10690] sec_pagetables:0 bounce:0 [ 238.284361][T10690] kernel_misc_reclaimable:0 [ 238.284361][T10690] free:87013 free_pcp:5683 free_cma:0 [ 238.329497][T10690] Node 0 active_anon:18600kB inactive_anon:1820kB active_file:59940kB inactive_file:38276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116348kB dirty:832kB writeback:72kB shmem:908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5060kB pagetables:1952kB sec_pagetables:0kB all_unreclaimable? no [ 238.362040][T10690] DMA32 free:27216kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 238.389561][T10690] lowmem_reserve[]: 0 3932 3932 3932 [ 238.394890][T10690] Normal free:320836kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:18600kB inactive_anon:1820kB active_file:59924kB inactive_file:38248kB unevictable:0kB writepending:904kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:22732kB local_pcp:0kB free_cma:0kB [ 238.424384][T10690] lowmem_reserve[]: 0 0 0 0 [ 238.428929][T10690] DMA32: 6*4kB (M) 4*8kB (UM) 3*16kB (UM) 7*32kB (M) 6*64kB (UM) 5*128kB (M) 6*256kB (UM) 6*512kB (M) 7*1024kB (UM) 3*2048kB (UM) 2*4096kB (M) = 27464kB [ 238.444636][T10690] Normal: 2608*4kB (UME) 799*8kB (UME) 249*16kB (ME) 198*32kB (UME) 107*64kB (UM) 43*128kB (UM) 34*256kB (U) 40*512kB (U) 106*1024kB (U) 60*2048kB (U) 5*4096kB (U) = 320584kB [ 238.462094][T10690] 24755 total pagecache pages [ 238.466771][T10690] 9 pages in swap cache [ 238.470945][T10690] Free swap = 124728kB [ 238.475108][T10690] Total swap = 124996kB [ 238.479274][T10690] 2097051 pages RAM [ 238.483075][T10690] 0 pages HighMem/MovableOnly [ 238.487766][T10690] 346839 pages reserved [ 238.491915][T10690] 0 pages cma reserved [ 238.515242][T10691] FAT-fs (loop4): Directory bread(block 75) failed [ 238.600627][T10691] FAT-fs (loop4): Directory bread(block 76) failed [ 238.640946][T10691] FAT-fs (loop4): Directory bread(block 77) failed [ 238.676734][T10691] FAT-fs (loop4): Directory bread(block 78) failed [ 238.714490][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 238.714514][ T28] audit: type=1400 audit(2000000060.393:448): avc: denied { execmem } for pid=10696 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 238.739204][T10691] FAT-fs (loop4): Directory bread(block 79) failed [ 238.814184][T10691] FAT-fs (loop4): Directory bread(block 80) failed [ 238.820796][T10691] FAT-fs (loop4): Directory bread(block 81) failed [ 239.441644][ T28] audit: type=1400 audit(2000000061.166:449): avc: denied { mount } for pid=10686 comm="syz.4.5285" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 239.540774][ T28] audit: type=1400 audit(2000000061.176:450): avc: denied { unmount } for pid=1021 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 239.646638][ T28] audit: type=1400 audit(2000000061.337:451): avc: denied { mounton } for pid=10698 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 239.748964][ T28] audit: type=1400 audit(2000000061.337:452): avc: denied { module_request } for pid=10698 comm="syz-executor" kmod="netdev-nr8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 240.303288][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.342307][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.380075][T10698] device bridge_slave_0 entered promiscuous mode [ 240.592016][T10698] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.599431][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.607229][T10698] device bridge_slave_1 entered promiscuous mode [ 240.706226][T10699] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.713312][T10699] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.721105][T10699] device bridge_slave_0 entered promiscuous mode [ 240.758177][T10699] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.765330][T10699] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.773165][T10699] device bridge_slave_1 entered promiscuous mode [ 240.995736][T10713] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.002849][T10713] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.010986][T10713] device bridge_slave_0 entered promiscuous mode [ 241.045982][T10711] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.053464][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.061553][T10711] device bridge_slave_0 entered promiscuous mode [ 241.068368][T10713] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.076002][T10713] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.083816][T10713] device bridge_slave_1 entered promiscuous mode [ 241.118741][T10711] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.126320][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.134023][T10711] device bridge_slave_1 entered promiscuous mode [ 241.152750][T10712] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.160315][T10712] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.168112][T10712] device bridge_slave_0 entered promiscuous mode [ 241.222016][T10712] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.229234][T10712] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.237183][T10712] device bridge_slave_1 entered promiscuous mode [ 241.353111][ T28] audit: type=1400 audit(2000000063.225:453): avc: denied { create } for pid=10698 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.374867][ T28] audit: type=1400 audit(2000000063.247:454): avc: denied { write } for pid=10698 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.397219][ T28] audit: type=1400 audit(2000000063.247:455): avc: denied { read } for pid=10698 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.710938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.718643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.790686][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.799468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.809980][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.817079][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.825025][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.833700][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.843449][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.850506][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.858519][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.973410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.981231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.989612][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.999194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.007919][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.017044][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.025633][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.032730][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.040656][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.049292][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.057847][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.064905][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.072706][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.081548][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.090297][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.098624][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.107264][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.115807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.124340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.133003][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.141888][T10698] device veth0_vlan entered promiscuous mode [ 242.169746][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.177572][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.185584][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.195873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.204146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.212115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.221395][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.230091][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.237168][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.245394][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.253993][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.262955][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.270023][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.307879][T10698] device veth1_macvtap entered promiscuous mode [ 242.315938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.323994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.334126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.342555][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.353090][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.361904][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.370399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.379090][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.443835][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.453310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.462402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.471026][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.479636][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.490734][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.533805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.543393][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.550958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.561146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.569618][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.578287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.588254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.596777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.605814][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.612896][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.627368][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.635952][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.644281][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.651386][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.665582][T10713] device veth0_vlan entered promiscuous mode [ 242.692380][ T28] audit: type=1400 audit(2000000064.652:456): avc: denied { mounton } for pid=10698 comm="syz-executor" path="/root/syzkaller.QJUOod/syz-tmp" dev="sda1" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 242.721016][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.732912][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.744049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.752392][ T28] audit: type=1400 audit(2000000064.652:457): avc: denied { mount } for pid=10698 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.775546][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.783586][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.805542][T10699] device veth0_vlan entered promiscuous mode [ 242.840944][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.848518][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.877201][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.885150][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.893914][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.903785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.913869][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.920961][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.929294][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.938994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.947835][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.954925][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.963218][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.972639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.981352][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.990106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.998562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.006856][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.081303][T10713] device veth1_macvtap entered promiscuous mode [ 243.092010][T10699] device veth1_macvtap entered promiscuous mode [ 243.100052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.113683][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.147608][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.163451][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.187371][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.220590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.239063][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.270691][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.303733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.321718][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.353764][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.387420][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.404506][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.441818][T10711] device veth0_vlan entered promiscuous mode [ 243.468439][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.499613][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.515651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.544039][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.560082][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.587814][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.598217][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.606939][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.620148][T10712] device veth0_vlan entered promiscuous mode [ 243.653225][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.679746][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.687540][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.696284][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.704707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.714657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.752276][T10712] device veth1_macvtap entered promiscuous mode [ 243.760825][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.769084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.777729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.787982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.796730][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.814798][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.847872][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.888997][T10711] device veth1_macvtap entered promiscuous mode [ 243.899135][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 243.899150][ T28] audit: type=1326 audit(2000000065.951:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefef98eec9 code=0x7ffc0000 [ 243.959254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.967013][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.989492][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.001757][ T28] audit: type=1326 audit(2000000065.994:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fefef98eec9 code=0x7ffc0000 [ 244.075178][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.083678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.096658][ T28] audit: type=1326 audit(2000000065.994:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefef98eec9 code=0x7ffc0000 [ 244.125848][ T28] audit: type=1400 audit(2000000066.197:469): avc: denied { create } for pid=10793 comm="syz.7.5290" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 244.152098][ T28] audit: type=1400 audit(2000000066.197:470): avc: denied { map } for pid=10793 comm="syz.7.5290" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 244.179317][ T28] audit: type=1400 audit(2000000066.197:471): avc: denied { read write } for pid=10793 comm="syz.7.5290" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 244.205488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.221575][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.236745][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.245392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.253934][ T28] audit: type=1326 audit(2000000066.262:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab998eec9 code=0x7ffc0000 [ 244.293884][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5315'. [ 244.306865][ T28] audit: type=1326 audit(2000000066.262:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7ffab998eec9 code=0x7ffc0000 [ 244.321305][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5315'. [ 244.356785][ T28] audit: type=1326 audit(2000000066.262:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab998eec9 code=0x7ffc0000 [ 244.405751][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5292'. [ 244.411239][ T28] audit: type=1400 audit(2000000066.423:475): avc: denied { write } for pid=10809 comm="syz.8.5318" name="netlink" dev="proc" ino=4026532354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 244.620387][T10849] netlink: 'syz.8.5335': attribute type 46 has an invalid length. [ 244.628776][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5335'. [ 244.657485][T10849] netlink: 'syz.8.5335': attribute type 46 has an invalid length. [ 244.675747][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5335'. [ 244.835571][ T762] device bridge_slave_1 left promiscuous mode [ 244.841778][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.879198][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.908371][ T762] device veth1_macvtap left promiscuous mode [ 244.925113][ T762] device veth0_vlan left promiscuous mode [ 245.015773][T10907] xt_hashlimit: overflow, try lower: 0/0 [ 245.162777][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5370'. [ 245.372321][T10956] netlink: 'syz.3.5384': attribute type 24 has an invalid length. [ 245.385294][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5384'. [ 245.506603][T10976] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 245.607361][T10994] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 245.728687][T11015] x_tables: unsorted underflow at hook 1 [ 245.924448][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5429'. [ 245.973342][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5431'. [ 246.133262][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5438'. [ 246.168342][ T762] device bridge_slave_1 left promiscuous mode [ 246.183350][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.209068][ T762] device bridge_slave_1 left promiscuous mode [ 246.234229][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.259512][ T762] device bridge_slave_0 left promiscuous mode [ 246.272339][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.297691][ T762] device bridge_slave_1 left promiscuous mode [ 246.304402][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.316549][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.324877][ T762] device bridge_slave_1 left promiscuous mode [ 246.331371][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.339291][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.348653][ T762] device veth1_macvtap left promiscuous mode [ 246.355362][ T762] device veth1_macvtap left promiscuous mode [ 246.368385][ T762] device veth0_vlan left promiscuous mode [ 246.383005][ T762] device veth1_macvtap left promiscuous mode [ 246.389171][ T762] device veth0_vlan left promiscuous mode [ 246.395542][ T762] device veth1_macvtap left promiscuous mode [ 246.401769][ T762] device veth0_vlan left promiscuous mode [ 246.965651][T11101] tc_dump_action: action bad kind [ 247.068601][T11121] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.142402][T11133] netlink: 'syz.2.5475': attribute type 9 has an invalid length. [ 247.275624][T11157] device vti0 entered promiscuous mode [ 247.295809][ T1002] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 247.325750][T11164] loop2: detected capacity change from 0 to 16 [ 247.350543][T11164] erofs: (device loop2): mounted with root inode @ nid 36. [ 247.364899][T11164] syz.2.5491: attempt to access beyond end of device [ 247.364899][T11164] loop2: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 247.472301][ T1002] usb 8-1: Using ep0 maxpacket: 8 [ 247.478883][ T1002] usb 8-1: unable to get BOS descriptor or descriptor too short [ 247.501880][ T1002] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 247.515332][ T1002] usb 8-1: config 1 has no interface number 1 [ 247.515369][ T1002] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 247.516869][ T1002] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.546000][ T1002] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.546031][ T1002] usb 8-1: Product: syz [ 247.546047][ T1002] usb 8-1: Manufacturer: syz [ 247.546061][ T1002] usb 8-1: SerialNumber: syz [ 247.560982][T11117] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 247.751633][ T1002] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 247.764578][ T1002] usb 8-1: 2:1 : invalid channels 0 [ 247.765643][T11229] binder: 11228:11229 ioctl c0306201 200000000180 returned -14 [ 247.787445][ T1002] usb 8-1: USB disconnect, device number 2 [ 247.806914][T11233] netlink: 'syz.2.5523': attribute type 11 has an invalid length. [ 247.942344][T11259] loop2: detected capacity change from 0 to 256 [ 247.950921][T11259] exfat: Deprecated parameter 'namecase' [ 247.963931][T11261] xt_socket: unknown flags 0x58 [ 247.991115][T11259] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 247.996714][T10922] udevd[10922]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 248.037496][T11269] ÿ: renamed from bond_slave_0 [ 248.122924][T11279] loop2: detected capacity change from 0 to 2048 [ 248.174873][T11279] loop2: p1 < > p4 [ 248.179665][T11279] loop2: p4 start 268435456 is beyond EOD, truncated [ 248.206227][ T103] loop2: p1 < > p4 [ 248.217829][ T103] loop2: p4 start 268435456 is beyond EOD, truncated [ 248.460742][ T1597] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 248.485255][T11351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.647360][ T1597] usb 3-1: Using ep0 maxpacket: 16 [ 248.654678][ T1597] usb 3-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 248.680323][ T1597] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.689502][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 248.689518][ T28] audit: type=1400 audit(2000000071.092:504): avc: denied { read } for pid=11385 comm="syz.3.5601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.729620][ T1597] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.746441][ T1597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.750151][ T28] audit: type=1400 audit(2000000071.167:505): avc: denied { create } for pid=11392 comm="syz.8.5603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 248.761925][ T1597] usb 3-1: Product: syz [ 248.775479][ T28] audit: type=1400 audit(2000000071.189:506): avc: denied { read } for pid=11392 comm="syz.8.5603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 248.791888][ T1597] usb 3-1: Manufacturer: syz [ 248.820571][ T1597] usb 3-1: SerialNumber: syz [ 248.874823][ T28] audit: type=1400 audit(2000000071.221:507): avc: denied { write } for pid=11398 comm="syz.9.5605" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 248.923430][T11417] netlink: 'syz.8.5616': attribute type 3 has an invalid length. [ 248.932400][ T28] audit: type=1400 audit(2000000071.221:508): avc: denied { open } for pid=11398 comm="syz.9.5605" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 248.947522][T11417] netlink: 'syz.8.5616': attribute type 3 has an invalid length. [ 248.970656][ T28] audit: type=1400 audit(2000000071.296:509): avc: denied { read } for pid=11411 comm="syz.9.5613" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.004622][ T28] audit: type=1400 audit(2000000071.296:510): avc: denied { open } for pid=11411 comm="syz.9.5613" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.038859][ T28] audit: type=1400 audit(2000000071.339:511): avc: denied { ioctl } for pid=11411 comm="syz.9.5613" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.066348][ T1597] usb 3-1: 0:2 : does not exist [ 249.066379][ T28] audit: type=1400 audit(2000000071.392:512): avc: denied { read } for pid=11422 comm="syz.9.5618" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 249.071512][ T28] audit: type=1400 audit(2000000071.392:513): avc: denied { open } for pid=11422 comm="syz.9.5618" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 249.128330][ T1597] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 249.142380][T11435] __nla_validate_parse: 60 callbacks suppressed [ 249.142438][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5624'. [ 249.160997][T11435] device veth1 entered promiscuous mode [ 249.168658][T11435] netlink: 'syz.3.5624': attribute type 8 has an invalid length. [ 249.177667][T11435] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 249.179426][ T1597] usb 3-1: USB disconnect, device number 2 [ 249.273290][T11445] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5629'. [ 249.321999][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5633'. [ 249.409651][T11470] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 249.613846][T11511] IPv6: sit1: Disabled Multicast RS [ 249.760720][T11541] netlink: 'syz.9.5676': attribute type 6 has an invalid length. [ 249.852452][T11558] netlink: 'syz.2.5686': attribute type 29 has an invalid length. [ 249.865304][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5686'. [ 249.878421][T11558] netlink: 'syz.2.5686': attribute type 29 has an invalid length. [ 249.936577][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5686'. [ 250.135989][T11613] loop2: detected capacity change from 0 to 128 [ 250.186672][T11621] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.299995][T11644] Zero length message leads to an empty skb [ 250.332170][T11647] loop8: detected capacity change from 0 to 256 [ 250.446372][ T1597] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 250.481708][T11675] xt_ecn: cannot match TCP bits for non-tcp packets [ 250.543714][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5747'. [ 250.632885][ T1597] usb 4-1: Using ep0 maxpacket: 8 [ 250.651733][ T1597] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 250.675259][ T1597] usb 4-1: config 179 has no interface number 0 [ 250.688954][ T1597] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 250.726080][ T1597] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 250.750420][T11722] loop7: detected capacity change from 0 to 128 [ 250.755295][ T1597] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 250.793771][ T1597] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 250.796125][T11722] FAT-fs (loop7): Directory bread(block 414) failed [ 250.824872][ T1597] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 250.833863][T11722] FAT-fs (loop7): Directory bread(block 415) failed [ 250.845358][T11722] FAT-fs (loop7): Directory bread(block 416) failed [ 250.871797][ T1597] usb 4-1: config 179 interface 65 has no altsetting 0 [ 250.878889][T11722] FAT-fs (loop7): Directory bread(block 417) failed [ 250.896479][ T1597] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 250.907061][T11722] FAT-fs (loop7): Directory bread(block 418) failed [ 250.920090][ T1597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.924097][T11722] FAT-fs (loop7): Directory bread(block 419) failed [ 250.945448][ T1597] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input17 [ 250.959052][T11722] FAT-fs (loop7): Directory bread(block 420) failed [ 250.982696][T11722] FAT-fs (loop7): Directory bread(block 421) failed [ 251.057729][T11722] FAT-fs (loop7): Directory bread(block 414) failed [ 251.074229][T11722] FAT-fs (loop7): Directory bread(block 415) failed [ 251.137809][T11770] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 251.213507][T11784] loop9: detected capacity change from 0 to 128 [ 251.220484][T11784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.227852][T11784] EXT4-fs (loop9): Test dummy encryption mode enabled [ 251.263942][T11791] xt_CT: No such helper "syz0" [ 251.271128][T11784] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 251.299154][T11784] EXT4-fs (loop9): re-mounted. Quota mode: none. [ 251.308938][T11784] ext4 filesystem being remounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.334258][ T59] usb 4-1: USB disconnect, device number 2 [ 251.334300][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 251.387697][T10711] EXT4-fs (loop9): unmounting filesystem. [ 251.391514][ T59] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 251.553376][T11840] netlink: 'syz.8.5823': attribute type 5 has an invalid length. [ 251.823371][T11895] device vcan0 entered promiscuous mode [ 251.843727][T11898] xt_l2tp: invalid flags combination: 4 [ 251.846836][T11895] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 251.875600][T11904] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 251.913537][T11910] netlink: 'syz.3.5859': attribute type 3 has an invalid length. [ 252.020456][T11931] syz.3.5867 (11931): /proc/11927/oom_adj is deprecated, please use /proc/11927/oom_score_adj instead. [ 252.422573][ T1002] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 252.474314][T12015] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 252.564007][T12023] loop3: detected capacity change from 0 to 512 [ 252.592754][T12023] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 252.602001][T12023] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.605945][ T1002] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 252.621711][ T1002] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.630166][ T1002] usb 8-1: Product: syz [ 252.634451][ T1002] usb 8-1: Manufacturer: syz [ 252.639135][ T1002] usb 8-1: SerialNumber: syz [ 252.645226][T10713] EXT4-fs (loop3): unmounting filesystem. [ 252.689108][T12031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5916'. [ 252.711980][T12033] loop3: detected capacity change from 0 to 128 [ 252.727338][T12033] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 252.743447][T12033] FAT-fs (loop3): Filesystem has been set read-only [ 252.840326][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5925'. [ 252.853570][T12052] loop8: detected capacity change from 0 to 512 [ 252.864663][T12050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5925'. [ 252.874557][T12050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5925'. [ 252.902984][T12052] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.5926: invalid block [ 252.918378][T12052] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.5926: invalid indirect mapped block 10 (level 1) [ 252.933362][T12052] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.5926: invalid indirect mapped block 8 (level 1) [ 252.953325][T12052] EXT4-fs (loop8): 1 truncate cleaned up [ 252.959665][T12052] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 252.993502][T12069] loop9: detected capacity change from 0 to 16 [ 253.001888][T10698] EXT4-fs (loop8): unmounting filesystem. [ 253.002847][T12069] erofs: (device loop9): mounted with root inode @ nid 36. [ 253.050615][T12075] netlink: 'syz.3.5938': attribute type 11 has an invalid length. [ 253.058817][T12075] netem: change failed [ 253.076510][T12079] loop8: detected capacity change from 0 to 512 [ 253.093449][T12079] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 253.100393][T12081] loop3: detected capacity change from 0 to 512 [ 253.121246][T12081] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 253.131247][T12079] EXT4-fs (loop8): 1 truncate cleaned up [ 253.136933][T12079] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 253.150897][T12081] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 253.170126][T12081] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #11: comm syz.3.5940: corrupted inode contents [ 253.172283][T10698] EXT4-fs (loop8): unmounting filesystem. [ 253.186702][T12081] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #11: comm syz.3.5940: mark_inode_dirty error [ 253.205149][T12081] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5940: invalid indirect mapped block 1 (level 1) [ 253.225096][T12081] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #11: comm syz.3.5940: corrupted inode contents [ 253.247473][T12081] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 253.257833][T12081] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #11: comm syz.3.5940: corrupted inode contents [ 253.260960][T12096] loop8: detected capacity change from 0 to 512 [ 253.281360][T12081] EXT4-fs error (device loop3): ext4_truncate:4314: inode #11: comm syz.3.5940: mark_inode_dirty error [ 253.296800][T12081] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 253.306290][T12096] EXT4-fs (loop8): Test dummy encryption mode enabled [ 253.313229][T12081] EXT4-fs (loop3): 1 truncate cleaned up [ 253.319122][T12096] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 253.329277][T12081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 253.352124][T10713] EXT4-fs (loop3): unmounting filesystem. [ 253.359098][T12096] EXT4-fs (loop8): 1 truncate cleaned up [ 253.365398][T12096] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 253.375947][T12096] EXT4-fs warning (device loop8): __ext4fs_dirhash:270: inode #12: comm syz.8.5946: Siphash requires key [ 253.403476][T10698] EXT4-fs (loop8): unmounting filesystem. [ 253.454218][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 253.454234][ T28] audit: type=1400 audit(2000000076.209:580): avc: denied { getopt } for pid=12112 comm="syz.2.5955" laddr=::1 lport=43876 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.609569][T12144] loop2: detected capacity change from 0 to 256 [ 253.629402][T12144] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 253.671102][T12148] loop9: detected capacity change from 0 to 512 [ 256.342051][ T28] audit: type=1400 audit(2000000079.309:581): avc: denied { connect } for pid=12150 comm="syz.2.5972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.356872][ T59] usb 8-1: USB disconnect, device number 3 [ 256.392793][T12148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.422848][ T28] audit: type=1400 audit(2000000079.394:582): avc: denied { sqpoll } for pid=12161 comm="syz.8.5976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 256.438425][T12159] loop7: detected capacity change from 0 to 1024 [ 256.462385][T12148] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 256.468854][ T3349] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 256.472090][T12148] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.497892][T12159] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 256.506557][T12159] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.508217][T10711] EXT4-fs (loop9): unmounting filesystem. [ 256.550490][T10699] EXT4-fs (loop7): unmounting filesystem. [ 256.640226][T12188] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 256.670417][T12186] loop2: detected capacity change from 0 to 4096 [ 256.686747][T12186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 256.712845][T12193] tipc: Started in network mode [ 256.727336][T12186] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz.2.5985: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 256.746764][T12193] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 256.746901][T12193] tipc: Enabled bearer , priority 10 [ 256.765847][T12186] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.5985: directory missing '..' [ 256.778706][ T28] audit: type=1400 audit(2000000079.759:583): avc: denied { mounton } for pid=12194 comm="syz.7.5989" path="/116/file0" dev="tmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 256.814000][ T1597] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 256.837170][T10712] EXT4-fs (loop2): unmounting filesystem. [ 256.867667][ T28] audit: type=1400 audit(2000000079.866:584): avc: denied { setopt } for pid=12206 comm="syz.7.5995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.889654][T12208] loop9: detected capacity change from 0 to 256 [ 256.900055][ T28] audit: type=1400 audit(2000000079.866:585): avc: denied { read } for pid=12204 comm="syz.2.5994" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 256.972752][T12213] loop7: detected capacity change from 0 to 4096 [ 257.002101][T12213] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 257.024742][T12224] loop2: detected capacity change from 0 to 256 [ 257.036244][T12224] FAT-fs (loop2): Directory bread(block 64) failed [ 257.037286][ T1597] usb 4-1: Using ep0 maxpacket: 16 [ 257.043044][T12224] FAT-fs (loop2): Directory bread(block 65) failed [ 257.054765][T12224] FAT-fs (loop2): Directory bread(block 66) failed [ 257.062334][T12224] FAT-fs (loop2): Directory bread(block 67) failed [ 257.064738][T10699] EXT4-fs (loop7): unmounting filesystem. [ 257.069014][T12224] FAT-fs (loop2): Directory bread(block 68) failed [ 257.080660][ T1597] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 257.081629][T12224] FAT-fs (loop2): Directory bread(block 69) failed [ 257.096379][T12224] FAT-fs (loop2): Directory bread(block 70) failed [ 257.102617][ T1597] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.103021][T12224] FAT-fs (loop2): Directory bread(block 71) failed [ 257.119813][T12224] FAT-fs (loop2): Directory bread(block 72) failed [ 257.126422][T12224] FAT-fs (loop2): Directory bread(block 73) failed [ 257.129928][ T1597] usb 4-1: config 0 has no interface number 0 [ 257.176623][ T1597] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 257.192026][ T1597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.219349][ T1597] usb 4-1: Product: syz [ 257.230821][ T28] audit: type=1400 audit(2000000080.252:586): avc: denied { connect } for pid=12235 comm="syz.8.6009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.261103][ T1597] usb 4-1: Manufacturer: syz [ 257.270666][ T1597] usb 4-1: SerialNumber: syz [ 257.281979][ T1597] usb 4-1: config 0 descriptor?? [ 257.297020][ T1597] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 257.326024][ T28] audit: type=1400 audit(2000000080.349:587): avc: denied { create } for pid=12247 comm="syz.2.6015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.330970][ T1597] usb 4-1: No valid video chain found. [ 257.371772][ T28] audit: type=1400 audit(2000000080.381:588): avc: denied { setopt } for pid=12247 comm="syz.2.6015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.455214][T12267] loop8: detected capacity change from 0 to 1024 [ 257.462169][T12267] EXT4-fs: Ignoring removed nobh option [ 257.468120][T12267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.477994][ T1597] usb 4-1: USB disconnect, device number 3 [ 257.510759][T12267] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 257.521156][T12267] EXT4-fs error (device loop8): __ext4_remount:6612: comm syz.8.6023: Abort forced by user [ 257.532092][T12267] EXT4-fs (loop8): Remounting filesystem read-only [ 257.538829][T12267] EXT4-fs (loop8): re-mounted. Quota mode: none. [ 257.555081][T10698] EXT4-fs (loop8): unmounting filesystem. [ 257.600313][T12286] __nla_validate_parse: 1 callbacks suppressed [ 257.600335][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6031'. [ 257.639626][ T28] audit: type=1326 audit(2000000080.692:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.7.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3af8eec9 code=0x7ffc0000 [ 257.660207][T12294] loop8: detected capacity change from 0 to 256 [ 257.670250][T12292] loop7: detected capacity change from 0 to 1024 [ 257.680730][ T1002] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 257.688818][T12294] exfat: Deprecated parameter 'utf8' [ 257.692642][T12292] EXT4-fs: Ignoring removed bh option [ 257.703198][T12294] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 257.722658][T12292] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 257.753463][T10699] EXT4-fs (loop7): unmounting filesystem. [ 257.792722][ T3349] tipc: Node number set to 10070698 [ 257.809001][T12304] loop9: detected capacity change from 0 to 16 [ 257.829901][T12304] erofs: (device loop9): mounted with root inode @ nid 36. [ 257.854730][T12312] loop9: detected capacity change from 0 to 256 [ 257.867021][ T1002] usb 3-1: Using ep0 maxpacket: 16 [ 257.873422][ T1002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.884871][ T1002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.895635][ T1002] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 257.905000][ T1002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.914134][ T1002] usb 3-1: config 0 descriptor?? [ 257.973609][T12317] loop9: detected capacity change from 0 to 512 [ 257.999410][T12321] loop3: detected capacity change from 0 to 256 [ 258.018952][T12321] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 258.038043][T12321] FAT-fs (loop3): Directory bread(block 64) failed [ 258.049648][T12321] FAT-fs (loop3): Directory bread(block 65) failed [ 258.056582][T12321] FAT-fs (loop3): Directory bread(block 66) failed [ 258.063419][T12321] FAT-fs (loop3): Directory bread(block 67) failed [ 258.070426][T12321] FAT-fs (loop3): Directory bread(block 68) failed [ 258.072136][ T3349] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 258.085101][T12321] FAT-fs (loop3): Directory bread(block 69) failed [ 258.092160][T12321] FAT-fs (loop3): Directory bread(block 70) failed [ 258.098855][T12321] FAT-fs (loop3): Directory bread(block 71) failed [ 258.105965][T12321] FAT-fs (loop3): Directory bread(block 72) failed [ 258.113476][T12321] FAT-fs (loop3): Directory bread(block 73) failed [ 258.127144][T12321] syz.3.6047: attempt to access beyond end of device [ 258.127144][T12321] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 258.165140][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 258.165158][ T28] audit: type=1400 audit(2000000081.250:615): avc: denied { mounton } for pid=12332 comm="syz.3.6053" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 258.186178][T12335] loop9: detected capacity change from 0 to 128 [ 258.217067][T12335] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 258.228061][T12335] FAT-fs (loop9): Filesystem has been set read-only [ 258.245376][T10711] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 258.260343][ T3349] usb 8-1: Using ep0 maxpacket: 16 [ 258.270877][ T3349] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.290291][T12343] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 258.293641][ T3349] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.316375][ T1002] pantherlord 0003:0F30:0111.0001: unknown main item tag 0x1 [ 258.321921][T12347] loop9: detected capacity change from 0 to 16 [ 258.333112][ T1002] pantherlord 0003:0F30:0111.0001: unknown main item tag 0x2 [ 258.350100][ T1002] pantherlord 0003:0F30:0111.0001: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.2-1/input0 [ 258.356354][T12347] erofs: (device loop9): mounted with root inode @ nid 36. [ 258.362220][ T3349] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.388653][ T1002] pantherlord 0003:0F30:0111.0001: no output reports found [ 258.399083][ T3349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.409777][ T3349] usb 8-1: config 0 descriptor?? [ 258.503988][ T1093] usb 3-1: USB disconnect, device number 3 [ 258.624718][T12363] loop9: detected capacity change from 0 to 256 [ 258.641970][T12363] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.762136][ T59] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 258.786760][T12376] futex_wake_op: syz.9.6073 tries to shift op by -1; fix this program [ 258.802061][ T3349] microsoft 0003:045E:07DA.0002: invalid report_count 267647988 [ 258.810344][ T3349] microsoft 0003:045E:07DA.0002: item 0 4 1 9 parsing failed [ 258.817952][ T3349] microsoft 0003:045E:07DA.0002: parse failed [ 258.824654][ T3349] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 258.836852][T12380] loop9: detected capacity change from 0 to 256 [ 258.923911][ T28] audit: type=1326 audit(2000000082.076:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.8.6082" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefef98eec9 code=0x0 [ 258.936915][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6083'. [ 258.948588][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 258.972661][ T59] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 258.981925][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.011721][ T59] usb 4-1: config 0 descriptor?? [ 259.020819][ T28] audit: type=1400 audit(2000000082.173:617): avc: denied { ioctl } for pid=12397 comm="syz.9.6084" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 259.023965][ T1597] usb 8-1: USB disconnect, device number 4 [ 259.068229][T12404] loop2: detected capacity change from 0 to 256 [ 259.075481][T12404] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.248696][T12420] loop9: detected capacity change from 0 to 128 [ 259.264100][T12420] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.277859][T12420] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 259.312739][ T8] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 259.338475][ T28] audit: type=1400 audit(2000000082.516:618): avc: denied { setopt } for pid=12421 comm="syz.2.6096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.342129][T12424] loop9: detected capacity change from 0 to 512 [ 259.384729][T12424] EXT4-fs: Ignoring removed oldalloc option [ 259.399464][ T59] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 259.410801][ T59] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 259.420043][ T28] audit: type=1400 audit(2000000082.602:619): avc: denied { remount } for pid=12432 comm="syz.2.6100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 259.422293][ T59] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 259.441196][T12433] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 259.448563][ T59] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 259.457652][T12424] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.6095: corrupted in-inode xattr [ 259.463967][ T59] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 259.476221][T12424] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.6095: couldn't read orphan inode 15 (err -117) [ 259.483280][ T59] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 259.504323][T12424] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 259.504402][ T28] audit: type=1400 audit(2000000082.698:620): avc: denied { unmount } for pid=10712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 259.519669][T12435] loop2: detected capacity change from 0 to 256 [ 259.543565][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6095'. [ 259.543711][ T28] audit: type=1400 audit(2000000082.741:621): avc: denied { nlmsg_read } for pid=12423 comm="syz.9.6095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.589661][ T59] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 259.603477][T10711] EXT4-fs (loop9): unmounting filesystem. [ 259.623923][ T59] logitech 0003:046D:CA03.0003: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0 [ 259.658547][ T59] logitech 0003:046D:CA03.0003: no inputs found [ 259.675457][ T59] usb 4-1: USB disconnect, device number 4 [ 259.706464][T12454] tipc: Enabling of bearer rejected, failed to enable media [ 259.720798][T12456] loop8: detected capacity change from 0 to 128 [ 259.726111][T12450] fido_id[12450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 259.759416][T12460] netlink: 'syz.9.6113': attribute type 11 has an invalid length. [ 259.767516][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6113'. [ 260.002869][ T28] audit: type=1400 audit(2000000083.234:622): avc: denied { mount } for pid=12487 comm="syz.9.6126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 260.073887][ T28] audit: type=1400 audit(2000000083.234:623): avc: denied { remount } for pid=12487 comm="syz.9.6126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 260.100915][T12495] loop3: detected capacity change from 0 to 256 [ 260.130080][T12500] loop9: detected capacity change from 0 to 256 [ 260.136312][ T28] audit: type=1400 audit(2000000083.234:624): avc: denied { unmount } for pid=10711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 260.152567][T12495] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 260.208518][T12468] loop7: detected capacity change from 0 to 40427 [ 260.216068][T12500] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 260.222120][T12506] loop2: detected capacity change from 0 to 1024 [ 260.241253][T12468] F2FS-fs (loop7): Invalid log sectorsize (131081) [ 260.253911][T12468] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 260.317102][T12506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 260.413195][T10712] EXT4-fs (loop2): unmounting filesystem. [ 260.503838][T12545] loop3: detected capacity change from 0 to 256 [ 260.598577][ T3349] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 260.605148][T12555] loop7: detected capacity change from 0 to 512 [ 260.631791][T12557] loop3: detected capacity change from 0 to 1024 [ 260.638169][T12555] EXT4-fs: Ignoring removed nobh option [ 260.650375][T12555] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 260.656077][T12557] EXT4-fs: Ignoring removed orlov option [ 260.674372][T12562] loop2: detected capacity change from 0 to 256 [ 260.686337][T12562] FAT-fs (loop2): Directory bread(block 1285) failed [ 260.694559][T12555] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6156: iget: bad i_size value: 38620345925642 [ 260.712485][T12555] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6156: couldn't read orphan inode 15 (err -117) [ 260.713003][T12557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 260.725071][T12555] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 260.743183][T12562] FAT-fs (loop2): Directory bread(block 1285) failed [ 260.766841][T12562] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 260.773851][T12557] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.777316][T10699] EXT4-fs (loop7): unmounting filesystem. [ 260.784612][ T3349] usb 10-1: Using ep0 maxpacket: 16 [ 260.823343][T12576] FAT-fs (loop2): Directory bread(block 1285) failed [ 260.830122][T12576] FAT-fs (loop2): Directory bread(block 1285) failed [ 260.841621][ T3349] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.882505][T12576] FAT-fs (loop2): Directory bread(block 1285) failed [ 260.899598][ T3349] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.914827][T12583] xt_hashlimit: size too large, truncated to 1048576 [ 260.922374][T10713] EXT4-fs (loop3): unmounting filesystem. [ 260.935713][ T3349] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.980503][ T3349] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.998787][ T3349] usb 10-1: Product: syz [ 261.003425][ T3349] usb 10-1: Manufacturer: syz [ 261.008136][ T3349] usb 10-1: SerialNumber: syz [ 261.060073][T12596] loop2: detected capacity change from 0 to 512 [ 261.131880][T12596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.161231][T12596] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.268999][T10712] EXT4-fs (loop2): unmounting filesystem. [ 261.362903][T12628] xt_hashlimit: size too large, truncated to 1048576 [ 261.403563][ T3349] usb 10-1: cannot find UAC_HEADER [ 261.410684][ T3349] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 261.433050][T11218] udevd[11218]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 261.553937][T12650] loop7: detected capacity change from 0 to 256 [ 261.571236][T12650] exfat: Deprecated parameter 'utf8' [ 261.587218][T10725] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 261.593132][ T3349] usb 10-1: USB disconnect, device number 2 [ 261.605317][T12650] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 261.638239][T12655] loop2: detected capacity change from 0 to 128 [ 261.765062][T10725] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.780863][T10725] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 261.794065][T10725] usb 9-1: config 0 interface 0 has no altsetting 0 [ 261.807999][T10725] usb 9-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 261.814793][T12666] loop3: detected capacity change from 0 to 1024 [ 261.817511][T10725] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.824086][T12666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.846333][T10725] usb 9-1: config 0 descriptor?? [ 261.856562][T12666] EXT4-fs: test_dummy_encryption requires encrypt feature [ 262.116410][T12695] loop3: detected capacity change from 0 to 256 [ 262.127943][ T3349] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 262.233588][T10725] a4tech 0003:09DA:000A.0004: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.8-1/input0 [ 262.305893][ T3349] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 262.316906][ T3349] usb 3-1: config 0 interface 0 has no altsetting 0 [ 262.323518][ T3349] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 262.332718][ T3349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.341579][ T3349] usb 3-1: config 0 descriptor?? [ 262.351576][T12673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.405858][T12709] loop3: detected capacity change from 0 to 256 [ 262.413947][T12709] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.427647][ T1002] usb 9-1: USB disconnect, device number 3 [ 262.561925][T12730] loop3: detected capacity change from 0 to 256 [ 262.568988][T12730] exfat: Deprecated parameter 'utf8' [ 262.574407][T12730] exfat: Deprecated parameter 'namecase' [ 262.581112][T12730] exfat: Deprecated parameter 'namecase' [ 262.589798][T12730] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 262.672278][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 262.744511][ T3349] hid (null): unknown global tag 0xe [ 262.756357][ T3349] hid (null): bogus close delimiter [ 262.765993][ T3349] hid (null): unknown global tag 0xe [ 262.775763][T12752] loop3: detected capacity change from 0 to 1024 [ 262.786637][ T3349] uclogic 0003:28BD:0078.0005: interface is invalid, ignoring [ 262.794745][T12752] EXT4-fs: Ignoring removed nobh option [ 262.801514][T12752] EXT4-fs: Ignoring removed nobh option [ 262.819058][T12752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 262.842392][T12752] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.6248: Allocating blocks 497-513 which overlap fs metadata [ 262.857008][T12752] EXT4-fs (loop3): Remounting filesystem read-only [ 262.863776][T12752] EXT4-fs (loop3): pa ffff8881221bfc78: logic 256, phys. 385, len 8 [ 262.872027][T12752] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 262.882258][T12752] EXT4-fs (loop3): Remounting filesystem read-only [ 262.898891][T10713] EXT4-fs (loop3): unmounting filesystem. [ 262.929018][ T3349] usb 3-1: USB disconnect, device number 4 [ 263.050206][T12780] netlink: 1 bytes leftover after parsing attributes in process `syz.9.6261'. [ 263.071740][T12783] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6262'. [ 263.099100][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6264'. [ 263.144080][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 263.144098][ T28] audit: type=1400 audit(2000000086.603:633): avc: denied { bind } for pid=12792 comm="syz.3.6267" lport=240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.176321][ T28] audit: type=1400 audit(2000000086.635:634): avc: denied { node_bind } for pid=12792 comm="syz.3.6267" saddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 263.199844][ T1597] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 263.213357][ T28] audit: type=1400 audit(2000000086.635:635): avc: denied { name_bind } for pid=12792 comm="syz.3.6267" src=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 263.248651][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6274'. [ 263.348306][T12821] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.387180][ T1597] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.404427][ T1597] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.425356][ T1597] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.464295][ T1597] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.471872][T12840] loop9: detected capacity change from 0 to 256 [ 263.479512][ T1597] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.496392][ T1597] usb 9-1: config 0 descriptor?? [ 263.515747][T11218] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.641932][T12858] device vti0 entered promiscuous mode [ 263.713712][T12870] loop9: detected capacity change from 0 to 16 [ 263.733476][T12870] erofs: (device loop9): mounted with root inode @ nid 36. [ 263.756417][T12870] syz.9.6304: attempt to access beyond end of device [ 263.756417][T12870] loop9: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 263.842871][T12890] loop3: detected capacity change from 0 to 512 [ 263.857242][T12890] EXT4-fs: Ignoring removed bh option [ 263.872649][T12890] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.878673][ T1597] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 263.897154][ T1597] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 263.899019][T12890] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 263.905009][ T1597] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 263.922059][ T1597] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 263.935575][T12890] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 263.935598][ T1597] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 263.953020][ T1597] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 263.960545][T12890] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 263.960966][ T1597] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 263.978608][T12890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 263.983742][ T1597] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 264.002052][T12890] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 264.011320][ T1597] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 264.030820][ T1597] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 264.049205][T10713] EXT4-fs (loop3): unmounting filesystem. [ 264.066471][ T1597] usb 9-1: USB disconnect, device number 4 [ 264.145406][T12926] fido_id[12926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 264.208552][T12939] netlink: 'syz.9.6337': attribute type 11 has an invalid length. [ 264.231443][T12941] binder: 12940:12941 ioctl c0306201 200000000180 returned -14 [ 264.253405][ T28] audit: type=1400 audit(2000000087.793:636): avc: denied { block_suspend } for pid=12944 comm="syz.9.6340" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 264.303844][ T28] audit: type=1400 audit(2000000087.847:637): avc: denied { mount } for pid=12952 comm="syz.9.6345" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 264.348199][ T28] audit: type=1400 audit(2000000087.879:638): avc: denied { remount } for pid=12952 comm="syz.9.6345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 264.380722][ T28] audit: type=1400 audit(2000000087.879:639): avc: denied { unmount } for pid=10711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 264.421585][T12966] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6351'. [ 264.436268][ T28] audit: type=1400 audit(2000000087.986:640): avc: denied { write } for pid=12968 comm="syz.9.6353" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 264.514091][ T28] audit: type=1400 audit(2000000088.061:641): avc: denied { execute } for pid=12980 comm="syz.9.6359" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.569398][ T28] audit: type=1400 audit(2000000088.094:642): avc: denied { execute_no_trans } for pid=12980 comm="syz.9.6359" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.607884][T12744] Bluetooth: hci0: command 0x1003 tx timeout [ 264.614244][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 264.774890][T12985] loop9: detected capacity change from 0 to 40427 [ 264.803036][ T3349] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 264.841446][T12985] F2FS-fs (loop9): Found nat_bits in checkpoint [ 264.900695][T12973] loop2: detected capacity change from 0 to 40427 [ 264.917310][T12973] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 264.932530][T12973] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 264.951654][T12985] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 264.956515][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6378'. [ 264.991192][ T3349] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.012031][ T3349] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.024936][T10711] syz-executor: attempt to access beyond end of device [ 265.024936][T10711] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.046459][ T3349] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 265.078840][T12973] F2FS-fs (loop2): Found nat_bits in checkpoint [ 265.110882][ T3349] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.127575][ T3349] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 265.152169][ T3349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.169956][T12973] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 265.177246][ T3349] usb 4-1: config 0 descriptor?? [ 265.182373][T12973] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 265.362388][ T1597] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 265.519249][T13083] loop9: detected capacity change from 0 to 256 [ 265.539689][ T1597] usb 9-1: Using ep0 maxpacket: 8 [ 265.547595][ T1597] usb 9-1: unable to get BOS descriptor or descriptor too short [ 265.557741][T13083] exfat: Deprecated parameter 'namecase' [ 265.566327][ T1597] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 265.572334][T13083] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 265.578866][ T1597] usb 9-1: config 1 has no interface number 1 [ 265.602721][ T3349] lenovo 0003:17EF:60A3.0007: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 265.611503][ T1597] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 265.655439][ T1597] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.674480][ T1597] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.690619][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6415'. [ 265.700508][ T1597] usb 9-1: Product: syz [ 265.709458][ T1597] usb 9-1: Manufacturer: syz [ 265.715271][ T1597] usb 9-1: SerialNumber: syz [ 265.724964][T13040] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 265.725160][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6415'. [ 265.743058][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6415'. [ 265.754910][ T1002] usb 4-1: USB disconnect, device number 5 [ 265.759729][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6415'. [ 265.772819][T13102] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 265.947497][ T1597] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 265.959949][ T1597] usb 9-1: 2:1 : invalid channels 0 [ 265.986589][ T1597] usb 9-1: USB disconnect, device number 5 [ 266.076172][T13155] loop2: detected capacity change from 0 to 512 [ 266.107716][T13155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 266.128764][T13155] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.6439: bad orphan inode 131083 [ 266.148883][T13155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 266.178033][T10712] EXT4-fs (loop2): unmounting filesystem. [ 266.276980][T13159] loop7: detected capacity change from 0 to 40427 [ 266.288957][T13159] F2FS-fs (loop7): invalid crc value [ 266.296285][T13171] tipc: Invalid UDP bearer configuration [ 266.296311][T13171] tipc: Enabling of bearer rejected, failed to enable media [ 266.314254][T13159] F2FS-fs (loop7): Found nat_bits in checkpoint [ 266.318769][T13176] loop2: detected capacity change from 0 to 256 [ 266.339357][T13176] FAT-fs (loop2): Directory bread(block 64) failed [ 266.357181][T13176] FAT-fs (loop2): Directory bread(block 65) failed [ 266.370607][T13176] FAT-fs (loop2): Directory bread(block 66) failed [ 266.384392][T13159] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 266.384781][T13180] loop3: detected capacity change from 0 to 256 [ 266.398598][T13176] FAT-fs (loop2): Directory bread(block 67) failed [ 266.405198][T13176] FAT-fs (loop2): Directory bread(block 68) failed [ 266.412229][T13176] FAT-fs (loop2): Directory bread(block 69) failed [ 266.420913][T13176] FAT-fs (loop2): Directory bread(block 70) failed [ 266.440281][T13176] FAT-fs (loop2): Directory bread(block 71) failed [ 266.447344][T10699] syz-executor: attempt to access beyond end of device [ 266.447344][T10699] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 266.467472][T13176] FAT-fs (loop2): Directory bread(block 72) failed [ 266.476697][T13180] FAT-fs (loop3): Directory bread(block 64) failed [ 266.484041][T13180] FAT-fs (loop3): Directory bread(block 65) failed [ 266.490696][T13176] FAT-fs (loop2): Directory bread(block 73) failed [ 266.500039][T13180] FAT-fs (loop3): Directory bread(block 66) failed [ 266.510034][T13180] FAT-fs (loop3): Directory bread(block 67) failed [ 266.517296][T13180] FAT-fs (loop3): Directory bread(block 68) failed [ 266.538760][T13180] FAT-fs (loop3): Directory bread(block 69) failed [ 266.555492][T13180] FAT-fs (loop3): Directory bread(block 70) failed [ 266.562170][T13180] FAT-fs (loop3): Directory bread(block 71) failed [ 266.606772][T13193] tc_dump_action: action bad kind [ 266.611971][T13180] FAT-fs (loop3): Directory bread(block 72) failed [ 266.614000][T13195] loop9: detected capacity change from 0 to 256 [ 266.625358][T13180] FAT-fs (loop3): Directory bread(block 73) failed [ 266.685207][T13195] exfat: Deprecated parameter 'namecase' [ 266.711214][T13195] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 266.786044][T13215] device veth1 entered promiscuous mode [ 266.829581][T13215] netlink: 'syz.7.6468': attribute type 8 has an invalid length. [ 266.848624][T13215] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 266.850773][T13227] netlink: 'syz.8.6483': attribute type 29 has an invalid length. [ 267.049679][T13250] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 267.265362][T13272] loop7: detected capacity change from 0 to 512 [ 267.292690][T13272] EXT4-fs: Ignoring removed oldalloc option [ 267.309865][T13272] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 267.318672][T13276] loop3: detected capacity change from 0 to 2048 [ 267.340888][T13272] EXT4-fs (loop7): 1 truncate cleaned up [ 267.351981][T13272] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 267.386170][T13276] loop3: p1 < > p4 [ 267.395518][T10699] EXT4-fs (loop7): unmounting filesystem. [ 267.406204][T13276] loop3: p4 start 268435456 is beyond EOD, truncated [ 267.436713][ T103] loop3: p1 < > p4 [ 267.441495][ T103] loop3: p4 start 268435456 is beyond EOD, truncated [ 267.556528][T13247] loop8: detected capacity change from 0 to 40427 [ 267.558302][T13294] IPv6: sit1: Disabled Multicast RS [ 267.582808][T13247] F2FS-fs (loop8): heap/no_heap options were deprecated [ 267.600680][T13247] F2FS-fs (loop8): fault_injection options not supported [ 267.628338][T13247] F2FS-fs (loop8): fault_type options not supported [ 267.645738][T13247] F2FS-fs (loop8): invalid crc value [ 267.666296][T13247] F2FS-fs (loop8): Found nat_bits in checkpoint [ 267.711661][ T3349] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 267.753732][T13247] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 267.797645][T13327] netlink: 'syz.2.6522': attribute type 6 has an invalid length. [ 267.805830][T10698] syz-executor: attempt to access beyond end of device [ 267.805830][T10698] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 267.898209][ T3349] usb 4-1: Using ep0 maxpacket: 16 [ 267.909155][ T3349] usb 4-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 267.930870][ T3349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.983725][ T3349] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.005459][ T3349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.030830][ T3349] usb 4-1: Product: syz [ 268.038231][ T3349] usb 4-1: Manufacturer: syz [ 268.047041][T13363] netlink: 'syz.7.6538': attribute type 29 has an invalid length. [ 268.066000][ T3349] usb 4-1: SerialNumber: syz [ 268.082230][T13363] __nla_validate_parse: 57 callbacks suppressed [ 268.082246][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6538'. [ 268.099375][T13363] netlink: 'syz.7.6538': attribute type 29 has an invalid length. [ 268.135056][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6538'. [ 268.278020][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 268.278038][ T28] audit: type=1400 audit(2000000092.099:667): avc: denied { read write } for pid=13390 comm="syz.8.6556" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 268.312105][ T3349] usb 4-1: 0:2 : does not exist [ 268.330913][ T3349] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 268.338602][T13393] loop2: detected capacity change from 0 to 1024 [ 268.346378][T13393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.354520][ T28] audit: type=1400 audit(2000000092.141:668): avc: denied { open } for pid=13390 comm="syz.8.6556" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 268.383314][ T3349] usb 4-1: USB disconnect, device number 6 [ 268.402547][T13403] netlink: 'syz.9.6558': attribute type 9 has an invalid length. [ 268.411009][T13393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 268.448011][T10712] EXT4-fs (loop2): unmounting filesystem. [ 268.537501][T13394] loop7: detected capacity change from 0 to 40427 [ 268.553035][T13394] F2FS-fs (loop7): invalid crc value [ 268.580578][T11218] udevd[11218]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 268.596619][T13394] F2FS-fs (loop7): Found nat_bits in checkpoint [ 268.608791][ T19] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 268.675759][T13394] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 268.731598][T13440] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.794594][ T19] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.805136][ T19] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.816298][ T19] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.827737][ T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.846811][ T19] usb 9-1: Product: syz [ 268.854460][ T19] usb 9-1: Manufacturer: syz [ 268.866000][ T19] usb 9-1: SerialNumber: syz [ 268.947704][T13464] loop9: detected capacity change from 0 to 256 [ 268.996630][ T28] audit: type=1326 audit(2000000092.871:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.3.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab998eec9 code=0x7ffc0000 [ 269.028821][ T28] audit: type=1326 audit(2000000092.903:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.3.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffab998eec9 code=0x7ffc0000 [ 269.064743][ T19] usb 9-1: 0:2 : does not exist [ 269.079894][ T19] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 269.091143][ T28] audit: type=1326 audit(2000000092.903:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.3.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab998eec9 code=0x7ffc0000 [ 269.112236][T13483] xt_ecn: cannot match TCP bits for non-tcp packets [ 269.133622][ T19] usb 9-1: USB disconnect, device number 6 [ 269.158975][T13490] netlink: 'syz.3.6599': attribute type 2 has an invalid length. [ 269.293444][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6608'. [ 281.306620][T11218] udevd[11218]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 289.298877][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P13492 } 2149 jiffies s: 9733 root: 0x0/T [ 289.310623][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 349.262576][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P13492 } 8581 jiffies s: 9733 root: 0x0/T [ 349.274344][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 362.494953][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 362.502039][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13492 [ 362.509442][ C0] (detected by 0, t=10003 jiffies, g=45617, q=1254 ncpus=2) [ 362.516841][ C0] task:syz.3.6600 state:R running task stack:25408 pid:13492 ppid:10713 flags:0x00004000 [ 362.528067][ C0] Call Trace: [ 362.531445][ C0] [ 362.534390][ C0] __schedule+0xb8f/0x14e0 [ 362.538840][ C0] ? release_firmware_map_entry+0x194/0x194 [ 362.544751][ C0] ? release_firmware_map_entry+0x194/0x194 [ 362.550699][ C0] ? __kasan_check_read+0x11/0x20 [ 362.555748][ C0] preempt_schedule_irq+0xbb/0x110 [ 362.560896][ C0] ? irqentry_exit+0x37/0x40 [ 362.565514][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 362.571351][ C0] ? irqentry_exit+0x37/0x40 [ 362.575979][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 362.581851][ C0] ? irqentry_exit+0x37/0x40 [ 362.586505][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 362.592338][ C0] ? bpf_ringbuf_query+0x4d/0x130 [ 362.597404][ C0] ? __kasan_check_read+0x11/0x20 [ 362.602568][ C0] ? bpf_redirect+0xd2/0x120 [ 362.607175][ C0] ? bpf_test_run+0x327/0x8d0 [ 362.611875][ C0] ? __kasan_slab_alloc+0x72/0x80 [ 362.616921][ C0] ? convert___skb_to_skb+0x5b0/0x5b0 [ 362.622325][ C0] ? __cfi_eth_type_trans+0x10/0x10 [ 362.627554][ C0] ? convert___skb_to_skb+0x40/0x5b0 [ 362.632870][ C0] ? bpf_prog_test_run_skb+0xaec/0x1290 [ 362.638545][ C0] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 362.644384][ C0] ? bpf_prog_test_run+0x3e3/0x630 [ 362.649524][ C0] ? bpf_prog_query+0x270/0x270 [ 362.654394][ C0] ? selinux_bpf+0xce/0xf0 [ 362.658843][ C0] ? security_bpf+0x93/0xb0 [ 362.663369][ C0] ? __sys_bpf+0x56d/0x780 [ 362.667807][ C0] ? bpf_link_show_fdinfo+0x320/0x320 [ 362.673203][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 362.678956][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 362.683669][ C0] ? x64_sys_call+0x488/0x9a0 [ 362.688372][ C0] ? do_syscall_64+0x4c/0xa0 [ 362.693075][ C0] ? clear_bhb_loop+0x30/0x80 [ 362.697861][ C0] ? clear_bhb_loop+0x30/0x80 [ 362.702568][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.708665][ C0] [ 401.706922][ T29] INFO: task syz.9.6607:13504 blocked for more than 129 seconds. [ 401.714708][ T29] Not tainted syzkaller #0 [ 401.720067][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.278079][ T29] task:syz.9.6607 state:D stack:26208 pid:13504 ppid:10711 flags:0x00004004 [ 403.287636][ T29] Call Trace: [ 407.208980][ T29] [ 407.211977][ T29] __schedule+0xb87/0x14e0 [ 407.242540][ T29] ? __kasan_check_write+0x14/0x20 [ 407.247863][ T29] ? release_firmware_map_entry+0x194/0x194 [ 407.444282][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 407.450386][ T29] ? prepare_to_wait_event+0x40b/0x440 [ 407.455890][ T29] schedule+0xbd/0x170 [ 407.469407][ T29] synchronize_rcu_expedited+0x70e/0x810 [ 407.475132][ T29] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 410.346007][ T29] ? kasan_save_stack+0x4c/0x60 [ 410.351340][ T29] ? kasan_save_stack+0x3a/0x60 [ 410.356233][ T29] ? __kasan_record_aux_stack+0xb6/0xc0 [ 411.277478][ T29] ? kasan_record_aux_stack+0xe/0x10 [ 411.283196][ T29] ? task_work_add+0x79/0x330 [ 411.287907][ T29] ? fput+0xe1/0x1a0 [ 412.043679][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P13492 } 15315 jiffies s: 9733 root: 0x0/T [ 412.055493][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 414.733067][ T29] ? filp_close+0x111/0x160 [ 414.737643][ T29] ? __close_range+0x51e/0x6f0 [ 414.742687][ T29] ? __x64_sys_close_range+0x7a/0x90 [ 415.442989][ T29] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 415.448727][ T29] ? locks_remove_file+0x320/0xf90 [ 415.453913][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 416.080828][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 156s! [ 416.089773][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 154s! [ 416.098852][ C0] Showing busy workqueues and worker pools: [ 416.104746][ C0] workqueue events: flags=0x0 [ 416.109545][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 416.109592][ C0] pending: psi_avgs_work, kfree_rcu_monitor [ 416.109645][ C0] workqueue events_unbound: flags=0x2 [ 416.129029][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/512 refcnt=3 [ 416.129070][ C0] pending: toggle_allocation_gate [ 416.129101][ C0] workqueue events_power_efficient: flags=0x80 [ 416.147827][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 416.147872][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, gc_worker [ 416.148007][ C0] workqueue mm_percpu_wq: flags=0x8 [ 416.174612][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.174658][ C0] pending: vmstat_update [ 416.174701][ C0] workqueue kblockd: flags=0x18 [ 416.191856][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 416.191901][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 416.192049][ C0] workqueue dm_bufio_cache: flags=0x8 [ 416.216133][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.216191][ C0] pending: work_fn [ 416.216232][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 416.233668][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 416.233716][ C0] pending: addrconf_verify_work [ 416.233743][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 416.233797][ C0] workqueue wg-kex-wg0: flags=0x24 [ 416.260809][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.260861][ C0] pending: wg_packet_handshake_receive_worker [ 416.260896][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 416.280431][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 416.280490][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 416.280543][ C0] workqueue wg-kex-wg1: flags=0x24 [ 416.300811][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.300869][ C0] pending: wg_packet_handshake_receive_worker [ 416.300907][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 416.320409][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 416.320471][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 416.320543][ C0] workqueue wg-kex-wg2: flags=0x24 [ 416.343009][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.343066][ C0] pending: wg_packet_handshake_receive_worker [ 416.343104][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 416.362632][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 416.362680][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 416.362745][ C0] workqueue wg-kex-wg0: flags=0x24 [ 416.385229][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.385281][ C0] pending: wg_packet_handshake_receive_worker [ 416.385315][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 416.404663][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 416.404706][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 416.404755][ C0] workqueue wg-kex-wg1: flags=0x24 [ 416.424973][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.425023][ C0] pending: wg_packet_handshake_receive_worker [ 416.425057][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 416.444600][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 416.444644][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 416.444707][ C0] workqueue wg-kex-wg2: flags=0x24 [ 416.467173][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.467219][ C0] pending: wg_packet_handshake_receive_worker [ 416.467253][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 416.486599][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 416.486645][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 416.486711][ C0] workqueue wg-kex-wg0: flags=0x24 [ 416.509180][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.509230][ C0] pending: wg_packet_handshake_receive_worker [ 416.509263][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 416.528727][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 416.528773][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 416.528820][ C0] workqueue wg-kex-wg1: flags=0x24 [ 416.548956][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.549007][ C0] pending: wg_packet_handshake_receive_worker [ 416.549042][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 416.568381][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 416.568426][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 416.568491][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 416.591175][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 416.591221][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 416.591283][ C0] workqueue wg-kex-wg2: flags=0x24 [ 416.613691][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.613741][ C0] pending: wg_packet_handshake_receive_worker [ 416.613775][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 416.633293][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 416.633339][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 416.633404][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 416.656037][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 416.656082][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 416.656147][ C0] workqueue wg-kex-wg0: flags=0x24 [ 416.678721][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.678771][ C0] pending: wg_packet_handshake_receive_worker [ 416.678803][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 416.698150][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 416.698195][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 416.698241][ C0] workqueue wg-kex-wg1: flags=0x24 [ 416.718398][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.718464][ C0] pending: wg_packet_handshake_receive_worker [ 416.718501][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 416.737861][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 416.737910][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 416.737974][ C0] workqueue wg-kex-wg2: flags=0x24 [ 416.760415][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 416.760473][ C0] pending: wg_packet_handshake_receive_worker [ 416.760521][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 416.780017][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 416.780071][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 418.276852][ T29] ? __cfi_locks_remove_file+0x10/0x10 [ 418.282478][ T29] synchronize_rcu+0x93/0x3a0 [ 418.287188][ T29] ? __cfi_synchronize_rcu+0x10/0x10 [ 418.337260][ T29] ? __fsnotify_parent+0x614/0x6e0 [ 418.342451][ T29] ? __kasan_check_write+0x14/0x20 [ 418.347605][ T29] ? mutex_unlock+0x89/0x220 [ 418.352269][ T29] ? __cfi_mutex_unlock+0x10/0x10 [ 424.593635][ T29] vhost_vsock_dev_release+0x186/0x420 [ 424.599183][ T29] ? __cfi_vhost_vsock_dev_release+0x10/0x10 [ 425.932862][ T29] __fput+0x1fc/0x8f0 [ 425.936934][ T29] ____fput+0x15/0x20 [ 425.940943][ T29] task_work_run+0x1db/0x240