last executing test programs: 30.885581697s ago: executing program 2 (id=2160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) 30.827696532s ago: executing program 2 (id=2151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pivot_root(0x0, 0x0) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 30.791377135s ago: executing program 2 (id=2152): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 30.778813866s ago: executing program 2 (id=2153): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10) 30.771276787s ago: executing program 2 (id=2154): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 30.759172578s ago: executing program 2 (id=2155): ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x420e, r1, 0x201, &(0x7f0000000000)) 9.081268737s ago: executing program 0 (id=2435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5366}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 9.081055346s ago: executing program 1 (id=2436): unshare(0x2040400) r0 = io_uring_setup(0x4cc4, &(0x7f00000001c0)) r1 = epoll_create1(0x0) dup3(r1, r0, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0xfffffff8) 9.080884647s ago: executing program 3 (id=2437): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 9.080765366s ago: executing program 4 (id=2438): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7.468059696s ago: executing program 0 (id=2439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000100), 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080)="a5", 0x1, 0x20008845, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) 7.467885366s ago: executing program 1 (id=2440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.467567486s ago: executing program 3 (id=2441): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x0, 0x0, 0x0) 7.467452396s ago: executing program 4 (id=2442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGBITSW(r1, 0x80044501, &(0x7f0000000300)=""/243) 5.758759693s ago: executing program 0 (id=2443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[@ANYRESOCT], 0xfdef) 5.758584743s ago: executing program 1 (id=2444): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@user_xattr}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) 5.758435903s ago: executing program 3 (id=2445): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x34651}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 5.758325813s ago: executing program 4 (id=2446): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0xde, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 3.942854569s ago: executing program 0 (id=2447): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c8d}], 0x1, 0x2000, 0x0, 0x3) 3.94245513s ago: executing program 1 (id=2448): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000740)="9e3b22e0a8caa3a0", 0x8, 0x0, 0x0, 0x0) 3.94219412s ago: executing program 3 (id=2449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh]}}}}}}}, 0x0) 3.942000619s ago: executing program 4 (id=2450): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) 2.025409455s ago: executing program 0 (id=2451): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 2.025264445s ago: executing program 1 (id=2452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.025018215s ago: executing program 3 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.024801595s ago: executing program 4 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 469.889µs ago: executing program 0 (id=2455): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xffffffff, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 300.679µs ago: executing program 1 (id=2456): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0486c000000000000109022400011100000009040000010300000009210000000122050009058103"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000004c0)={0x20, 0x7, 0x5, {0x5, 0x8, "f55148"}}, 0x0, 0x0, 0x0}, 0x0) 112.869µs ago: executing program 3 (id=2457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r1, &(0x7f00000031c0), 0x12) 0s ago: executing program 4 (id=2458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) kernel console output (not intermixed with test programs): ame="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.636781][ T4968] fs-verity: sha256 using implementation "sha256-avx2" [ 146.654757][ T30] audit: type=1400 audit(1728939162.009:1586): avc: denied { open } for pid=4967 comm="syz.4.1880" path="/348/file1/file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.665706][ T4968] fs-verity (loop4, inode 16): fs-verity keyring is empty, rejecting signed file! [ 146.684571][ T1778] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 146.693400][ T30] audit: type=1400 audit(1728939162.009:1587): avc: denied { ioctl } for pid=4967 comm="syz.4.1880" path="/348/file1/file3" dev="loop4" ino=16 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.714210][ T1778] EXT4-fs (loop1): Remounting filesystem read-only [ 146.746049][ T30] audit: type=1400 audit(1728939162.009:1588): avc: denied { write } for pid=4967 comm="syz.4.1880" name="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.789396][ T2081] udevd[2081]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 146.813013][ T30] audit: type=1400 audit(1728939162.189:1589): avc: denied { read } for pid=4975 comm="syz.4.1884" name="event0" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 146.837833][ T26] pantherlord 0003:0F30:0111.0044: item fetching failed at offset 6/7 [ 146.845954][ T26] pantherlord 0003:0F30:0111.0044: parse failed [ 146.853034][ T26] pantherlord: probe of 0003:0F30:0111.0044 failed with error -22 [ 146.858560][ T6] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 146.862076][ T30] audit: type=1400 audit(1728939162.199:1590): avc: denied { open } for pid=4975 comm="syz.4.1884" path="/dev/input/event0" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 146.898101][ T30] audit: type=1400 audit(1728939162.279:1591): avc: denied { create } for pid=4978 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.038991][ T1200] usb 4-1: USB disconnect, device number 25 [ 147.136306][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 147.256356][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.316308][ T804] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 147.329242][ T26] usb 1-1: USB disconnect, device number 27 [ 147.426337][ T6] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 147.435179][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.443103][ T6] usb 3-1: Product: syz [ 147.446976][ T6] usb 3-1: Manufacturer: syz [ 147.451392][ T6] usb 3-1: SerialNumber: syz [ 147.456336][ T6] usb 3-1: config 0 descriptor?? [ 147.556303][ T804] usb 5-1: Using ep0 maxpacket: 16 [ 147.676383][ T804] usb 5-1: config 137 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.687271][ T804] usb 5-1: config 137 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.700072][ T804] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.708848][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.816330][ T1211] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 147.936283][ T26] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 147.976438][ T6] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 147.982601][ T6] usb 3-1: No valid video chain found. [ 147.988595][ T6] usb 3-1: USB disconnect, device number 27 [ 148.176358][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.187174][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.196725][ T1211] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 148.205540][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.213831][ T1211] usb 4-1: config 0 descriptor?? [ 148.296451][ T26] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xAE, skipping [ 148.307036][ T26] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 148.476379][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.485249][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.493050][ T26] usb 1-1: Product: syz [ 148.497220][ T26] usb 1-1: Manufacturer: syz [ 148.501606][ T26] usb 1-1: SerialNumber: syz [ 148.526337][ T4995] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.696849][ T1211] keytouch 0003:0926:3333.0045: fixing up Keytouch IEC report descriptor [ 148.705921][ T1211] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0045/input/input37 [ 148.747308][ T4995] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.790539][ T1211] keytouch 0003:0926:3333.0045: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 148.901666][ T1211] usb 4-1: USB disconnect, device number 26 [ 149.406566][ T4995] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 149.422844][ T5002] loop3: detected capacity change from 0 to 512 [ 149.436502][ T5002] EXT4-fs (loop3): Test dummy encryption mode enabled [ 149.446424][ T2128] udevd[2128]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 149.456437][ T5002] EXT4-fs (loop3): Test dummy encryption mode enabled [ 149.477733][ T5002] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.487405][ T2128] udevd[2128]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 149.503709][ T5002] EXT4-fs (loop3): 1 truncate cleaned up [ 149.509281][ T5002] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback. [ 149.531381][ T5002] EXT4-fs (loop3): Test dummy encryption mode enabled [ 149.538093][ T5002] EXT4-fs (loop3): journaled quota format not specified [ 149.646505][ T26] cdc_ncm 1-1:1.0: bind() failure [ 149.666323][ T26] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 149.686416][ T26] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 149.693579][ T26] usb 1-1: USB disconnect, device number 28 [ 149.806319][ T939] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 149.847581][ T5048] loop2: detected capacity change from 0 to 2048 [ 149.890911][ T2081] udevd[2081]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 149.903492][ T5048] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.919057][ T2081] udevd[2081]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 149.919907][ T804] usbhid 5-1:137.0: can't add hid device: -71 [ 149.936722][ T804] usbhid: probe of 5-1:137.0 failed with error -71 [ 149.944378][ T804] usb 5-1: USB disconnect, device number 27 [ 149.969261][ T2081] udevd[2081]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 150.166357][ T939] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 150.174356][ T939] usb 4-1: config 0 has no interface number 1 [ 150.176679][ T5065] loop0: detected capacity change from 0 to 512 [ 150.180543][ T939] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 150.196065][ T939] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 150.198712][ T2081] udevd[2081]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 150.206942][ T5065] EXT4-fs (loop0): bad s_want_extra_isize: 11962 [ 150.286409][ T939] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 150.295539][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.308155][ T2081] udevd[2081]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 150.311247][ T939] usb 4-1: SerialNumber: syz [ 150.321240][ T804] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 150.324679][ T939] usb 4-1: config 0 descriptor?? [ 150.454922][ T5081] loop0: detected capacity change from 0 to 40427 [ 150.536314][ T60] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 150.545067][ T5081] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.566609][ T5081] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.616445][ T804] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 150.626280][ T1211] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 150.626371][ T939] usb 4-1: Found UVC 0.00 device (0002:0000) [ 150.640502][ T939] usb 4-1: No valid video chain found. [ 150.648703][ T939] usb 4-1: USB disconnect, device number 27 [ 150.776291][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 150.896335][ T60] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 150.904250][ T60] usb 2-1: config 0 has no interface number 0 [ 151.026639][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.037509][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.066384][ T60] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 151.075274][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.083069][ T60] usb 2-1: Product: syz [ 151.087069][ T60] usb 2-1: Manufacturer: syz [ 151.091458][ T60] usb 2-1: SerialNumber: syz [ 151.096712][ T60] usb 2-1: config 0 descriptor?? [ 151.115779][ T3941] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 151.136048][ T3941] EXT4-fs (loop3): Remounting filesystem read-only [ 151.143092][ T60] smsc95xx v2.0.0 [ 151.156438][ T1211] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 151.165417][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 151.173205][ T1211] usb 3-1: Product: syz [ 151.177879][ T1211] usb 3-1: config 0 descriptor?? [ 151.356354][ T804] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 151.365231][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.456294][ T939] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 151.486330][ T1200] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 151.656985][ T1211] konepure 0003:1E7D:2DB4.0046: item fetching failed at offset 10/11 [ 151.665016][ T1211] konepure 0003:1E7D:2DB4.0046: parse failed [ 151.670917][ T1211] konepure: probe of 0003:1E7D:2DB4.0046 failed with error -22 [ 151.736315][ T1200] usb 1-1: Using ep0 maxpacket: 8 [ 151.816387][ T939] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xAE, skipping [ 151.826797][ T939] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 151.856386][ T804] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 151.863123][ T1200] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.872987][ T804] usb 5-1: No valid video chain found. [ 151.878502][ T26] usb 3-1: USB disconnect, device number 28 [ 151.986363][ T939] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.995275][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.003138][ T939] usb 4-1: Product: syz [ 152.007225][ T939] usb 4-1: Manufacturer: syz [ 152.011608][ T939] usb 4-1: SerialNumber: syz [ 152.036345][ T5090] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 152.060703][ T804] usb 5-1: USB disconnect, device number 28 [ 152.066523][ T1200] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 152.075255][ T1200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.083563][ T1200] usb 1-1: Product: syz [ 152.087980][ T1200] usb 1-1: Manufacturer: syz [ 152.092380][ T1200] usb 1-1: SerialNumber: syz [ 152.097336][ T1200] usb 1-1: config 0 descriptor?? [ 152.226322][ T60] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 152.236893][ T60] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 152.256358][ T60] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 152.257523][ T5090] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 152.267065][ T60] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 152.281228][ T60] usb 2-1: USB disconnect, device number 33 [ 152.356367][ T1200] usb 1-1: Found UVC 0.00 device syz (8086:0b03) [ 152.362527][ T1200] usb 1-1: No valid video chain found. [ 152.557479][ T804] usb 1-1: USB disconnect, device number 29 [ 152.586592][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 152.586608][ T30] audit: type=1400 audit(1728939167.969:1635): avc: denied { setopt } for pid=5108 comm="syz.4.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.626319][ T30] audit: type=1326 audit(1728939167.999:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9adde2ff9 code=0x7ffc0000 [ 152.651816][ T30] audit: type=1326 audit(1728939167.999:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9adde2ff9 code=0x7ffc0000 [ 152.675907][ T30] audit: type=1326 audit(1728939167.999:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9adde2ff9 code=0x7ffc0000 [ 152.699516][ T30] audit: type=1326 audit(1728939167.999:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9adde2ff9 code=0x7ffc0000 [ 152.732979][ T30] audit: type=1326 audit(1728939167.999:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9adde2ff9 code=0x7ffc0000 [ 152.757583][ T30] audit: type=1326 audit(1728939167.999:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fe9adde2ff9 code=0x7ffc0000 [ 152.781157][ T30] audit: type=1326 audit(1728939167.999:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9adde2ff9 code=0x7ffc0000 [ 152.804598][ T30] audit: type=1326 audit(1728939168.109:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d93dff9 code=0x7ffc0000 [ 152.828591][ T30] audit: type=1326 audit(1728939168.109:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d93dff9 code=0x7ffc0000 [ 152.840693][ T5124] loop4: detected capacity change from 0 to 16 [ 152.916965][ T5124] erofs: (device loop4): mounted with root inode @ nid 36. [ 152.920713][ T2081] udevd[2081]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 152.933428][ T5090] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 152.944315][ T1200] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 152.952202][ T1158] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 152.962032][ T1158] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 152.970444][ T1158] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 153.042425][ T5131] syz.4.1950[5131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.042496][ T5131] syz.4.1950[5131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.151025][ T5153] loop4: detected capacity change from 0 to 512 [ 153.176358][ T939] cdc_ncm 4-1:1.0: bind() failure [ 153.186614][ T5153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 153.196299][ T1200] usb 3-1: Using ep0 maxpacket: 16 [ 153.203772][ T2081] udevd[2081]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 153.217373][ T939] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 153.230795][ T5153] EXT4-fs (loop4): 1 truncate cleaned up [ 153.236362][ T939] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 153.248455][ T939] usb 4-1: USB disconnect, device number 28 [ 153.254899][ T5153] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,auto_da_alloc,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 153.281868][ T2081] udevd[2081]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 153.316366][ T1200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.327172][ T1200] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.339859][ T1200] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 153.357116][ T1200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.375851][ T1200] usb 3-1: config 0 descriptor?? [ 153.401366][ T5158] loop0: detected capacity change from 0 to 40427 [ 153.486769][ T5158] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 153.494367][ T5158] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 153.503038][ T5158] F2FS-fs (loop0): invalid crc value [ 153.509542][ T5158] F2FS-fs (loop0): Found nat_bits in checkpoint [ 153.531342][ T5158] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 153.538248][ T5158] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 153.555245][ T5158] attempt to access beyond end of device [ 153.555245][ T5158] loop0: rw=2049, want=45224, limit=40427 [ 153.674724][ T5172] loop0: detected capacity change from 0 to 256 [ 153.685308][ T5174] tipc: Enabled bearer , priority 10 [ 153.696870][ T60] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 153.713453][ T5172] FAT-fs (loop0): Directory bread(block 64) failed [ 153.719824][ T5172] FAT-fs (loop0): Directory bread(block 65) failed [ 153.726123][ T5172] FAT-fs (loop0): Directory bread(block 66) failed [ 153.732527][ T5172] FAT-fs (loop0): Directory bread(block 67) failed [ 153.738939][ T5172] FAT-fs (loop0): Directory bread(block 68) failed [ 153.745236][ T5172] FAT-fs (loop0): Directory bread(block 69) failed [ 153.751665][ T5172] FAT-fs (loop0): Directory bread(block 70) failed [ 153.758022][ T5172] FAT-fs (loop0): Directory bread(block 71) failed [ 153.764269][ T5172] FAT-fs (loop0): Directory bread(block 72) failed [ 153.772834][ T5172] FAT-fs (loop0): Directory bread(block 73) failed [ 153.826965][ T5118] syz.2.1944[5118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.827053][ T5118] syz.2.1944[5118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.866477][ T1200] hid (null): report_id 17819 is invalid [ 153.884235][ T1200] kye 0003:0458:5015.0047: report_id 17819 is invalid [ 153.891586][ T1200] kye 0003:0458:5015.0047: item 0 2 1 8 parsing failed [ 153.898400][ T1200] kye 0003:0458:5015.0047: parse failed [ 153.903744][ T1200] kye: probe of 0003:0458:5015.0047 failed with error -22 [ 154.056298][ T1200] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 154.069423][ T804] usb 3-1: USB disconnect, device number 29 [ 154.076357][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.087095][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.096601][ T60] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 154.105471][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.113793][ T60] usb 5-1: config 0 descriptor?? [ 154.416353][ T1200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.427098][ T1200] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.439720][ T1200] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.448555][ T1200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.456896][ T1200] usb 2-1: config 0 descriptor?? [ 154.553122][ T5186] loop3: detected capacity change from 0 to 512 [ 154.586933][ T60] keytouch 0003:0926:3333.0048: fixing up Keytouch IEC report descriptor [ 154.597173][ T60] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0048/input/input38 [ 154.618298][ T5195] xt_hashlimit: size too large, truncated to 1048576 [ 154.630404][ T5186] EXT4-fs (loop3): bad s_want_extra_isize: 11962 [ 154.687135][ T60] keytouch 0003:0926:3333.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 154.745961][ T5204] loop3: detected capacity change from 0 to 512 [ 154.758188][ T5206] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 154.768378][ T5204] EXT4-fs (loop3): Test dummy encryption mode enabled [ 154.776214][ T2081] udevd[2081]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 154.779771][ T5204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.806364][ T804] tipc: Node number set to 2886997057 [ 154.806659][ T60] usb 5-1: USB disconnect, device number 29 [ 154.837060][ T5204] EXT4-fs (loop3): 1 truncate cleaned up [ 154.844787][ T5204] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 154.872504][ T2081] udevd[2081]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 154.900925][ T5204] ------------[ cut here ]------------ [ 154.913939][ T5204] WARNING: CPU: 0 PID: 5204 at fs/crypto/fname.c:542 fscrypt_fname_siphash+0xbf/0xf0 [ 154.927385][ T1200] plantronics 0003:047F:FFFF.0049: No inputs registered, leaving [ 154.942534][ T5204] Modules linked in: [ 154.948843][ T1200] plantronics 0003:047F:FFFF.0049: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 154.949523][ T5204] CPU: 1 PID: 5204 Comm: syz.3.1982 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 154.970764][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 154.980758][ T5204] RIP: 0010:fscrypt_fname_siphash+0xbf/0xf0 [ 154.986610][ T5204] Code: b6 04 28 84 c0 75 3a 41 8b 34 24 49 83 c6 48 4c 89 ff 4c 89 f2 e8 f1 37 b8 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 91 4e a0 ff <0f> 0b eb a8 89 d9 80 e1 07 38 c1 7c 8a 48 89 df e8 fc 9f e2 ff eb [ 155.006078][ T5204] RSP: 0018:ffffc90000cf7448 EFLAGS: 00010283 [ 155.011993][ T5204] RAX: ffffffff81d008ef RBX: 0000000000000000 RCX: 0000000000040000 [ 155.019807][ T5204] RDX: ffffc90001ed5000 RSI: 0000000000000085 RDI: 0000000000000086 [ 155.028062][ T5204] RBP: ffffc90000cf7470 R08: ffffffff81d00892 R09: ffffffff81e48959 [ 155.035889][ T5204] R10: 0000000000000007 R11: ffff888114f862c0 R12: ffffc90000cf75a0 [ 155.044058][ T5204] R13: dffffc0000000000 R14: ffff888126fc7320 R15: ffff888126f90158 [ 155.073152][ T5204] FS: 00007f285cb866c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 155.086959][ T5204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.093526][ T5204] CR2: 00007fffb76c80d8 CR3: 000000012efd3000 CR4: 00000000003506b0 [ 155.101430][ T5204] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.114870][ T5204] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.130125][ T1200] usb 2-1: USB disconnect, device number 34 [ 155.142249][ T5204] Call Trace: [ 155.148892][ T5204] [ 155.151705][ T5204] ? show_regs+0x58/0x60 [ 155.155751][ T5204] ? __warn+0x160/0x2f0 [ 155.159775][ T5204] ? fscrypt_fname_siphash+0xbf/0xf0 [ 155.164862][ T5204] ? report_bug+0x3d9/0x5b0 [ 155.169263][ T5204] ? fscrypt_fname_siphash+0xbf/0xf0 [ 155.174538][ T5234] input: syz0 as /devices/virtual/input/input40 [ 155.180533][ T5204] ? handle_bug+0x41/0x70 [ 155.184755][ T5204] ? exc_invalid_op+0x1b/0x50 [ 155.189412][ T5204] ? asm_exc_invalid_op+0x1b/0x20 [ 155.194276][ T5204] ? __ext4fs_dirhash+0x289/0x14c0 [ 155.199997][ T5204] ? fscrypt_fname_siphash+0x62/0xf0 [ 155.205164][ T5204] ? fscrypt_fname_siphash+0xbf/0xf0 [ 155.213593][ T5204] ? fscrypt_fname_siphash+0xbf/0xf0 [ 155.218857][ T5204] ? fscrypt_fname_siphash+0xbf/0xf0 [ 155.224011][ T5204] __ext4fs_dirhash+0xdd2/0x14c0 [ 155.228844][ T5204] ? ext4fs_dirhash+0x320/0x320 [ 155.233446][ T5204] ext4fs_dirhash+0x1b8/0x320 [ 155.237997][ T5204] ? ext4_sync_file+0xa50/0xa50 [ 155.242666][ T5204] htree_dirblock_to_tree+0x723/0x10d0 [ 155.248211][ T5204] ? ext4_htree_fill_tree+0x13e0/0x13e0 [ 155.253569][ T5204] ? ____kasan_kmalloc+0xed/0x110 [ 155.259004][ T5204] ? kmem_cache_alloc_trace+0x115/0x210 [ 155.264363][ T5204] ? ext4_readdir+0x52e/0x38d0 [ 155.269136][ T5204] ? iterate_dir+0x265/0x600 [ 155.273535][ T5204] ? __se_sys_getdents64+0x1c1/0x460 [ 155.278676][ T5204] ? __x64_sys_getdents64+0x7b/0x90 [ 155.283752][ T5204] ? x64_sys_call+0x5ae/0x9a0 [ 155.288252][ T5204] ext4_htree_fill_tree+0x73d/0x13e0 [ 155.293330][ T5204] ? ext4_handle_dirty_dirblock+0x6d0/0x6d0 [ 155.299215][ T5204] ? __kasan_kmalloc+0x9/0x10 [ 155.303701][ T5204] ? ext4_readdir+0x52e/0x38d0 [ 155.308383][ T5204] ext4_readdir+0x2ec3/0x38d0 [ 155.312888][ T5204] ? down_read_killable+0x1035/0x1b10 [ 155.318034][ T5204] ? debug_smp_processor_id+0x17/0x20 [ 155.323291][ T5204] ? kasan_quarantine_put+0x34/0x1a0 [ 155.328409][ T5204] ? down_read_interruptible+0x1bf0/0x1bf0 [ 155.334065][ T5204] ? ____kasan_slab_free+0x131/0x160 [ 155.339130][ T5204] ? ext4_dir_llseek+0x540/0x540 [ 155.365789][ T5204] ? __kasan_slab_free+0x11/0x20 [ 155.370610][ T5204] ? slab_free_freelist_hook+0xbd/0x190 [ 155.376063][ T5204] ? __kasan_check_read+0x11/0x20 [ 155.380927][ T5204] ? security_file_permission+0x86/0xb0 [ 155.386781][ T5204] iterate_dir+0x265/0x600 [ 155.391009][ T5204] ? ext4_dir_llseek+0x540/0x540 [ 155.395784][ T5204] __se_sys_getdents64+0x1c1/0x460 [ 155.400864][ T5204] ? __x64_sys_getdents64+0x90/0x90 [ 155.405908][ T5204] ? filldir+0x680/0x680 [ 155.410027][ T5204] ? __kasan_check_write+0x14/0x20 [ 155.414986][ T5204] ? switch_fpu_return+0x15f/0x2e0 [ 155.416273][ T939] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 155.419882][ T5204] __x64_sys_getdents64+0x7b/0x90 [ 155.432187][ T5204] x64_sys_call+0x5ae/0x9a0 [ 155.436456][ T5204] do_syscall_64+0x3b/0xb0 [ 155.440713][ T5204] ? clear_bhb_loop+0x35/0x90 [ 155.445274][ T5204] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.452762][ T5204] RIP: 0033:0x7f285df0cff9 [ 155.461536][ T5204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.481419][ T5204] RSP: 002b:00007f285cb86038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 155.491854][ T5204] RAX: ffffffffffffffda RBX: 00007f285e0c4f80 RCX: 00007f285df0cff9 [ 155.499801][ T5204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 155.507940][ T5204] RBP: 00007f285df7f296 R08: 0000000000000000 R09: 0000000000000000 [ 155.515764][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.523690][ T5204] R13: 0000000000000000 R14: 00007f285e0c4f80 R15: 00007ffd26bc8718 [ 155.531532][ T5204] [ 155.534406][ T5204] ---[ end trace fec52175d06cfd75 ]--- [ 155.540043][ T5204] ------------[ cut here ]------------ [ 155.545542][ T5204] WARNING: CPU: 0 PID: 5204 at fs/crypto/fname.c:542 fscrypt_fname_siphash+0xbf/0xf0 [ 155.554886][ T5204] Modules linked in: [ 155.562217][ T5204] CPU: 0 PID: 5204 Comm: syz.3.1982 Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 155.579058][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.591244][ T5204] RIP: 0010:fscrypt_fname_siphash+0xbf/0xf0 [ 155.592908][ T5241] loop4: detected capacity change from 0 to 512 [ 155.597054][ T5204] Code: b6 04 28 84 c0 75 3a 41 8b 34 24 49 83 c6 48 4c 89 ff 4c 89 f2 e8 f1 37 b8 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 91 4e a0 ff <0f> 0b eb a8 89 d9 80 e1 07 38 c1 7c 8a 48 89 df e8 fc 9f e2 ff eb [ 155.623682][ T5204] RSP: 0018:ffffc90000cf7448 EFLAGS: 00010246 [ 155.629619][ T5204] RAX: ffffffff81d008ef RBX: 0000000000000000 RCX: 0000000000040000 [ 155.637548][ T5204] RDX: ffffc90001ed5000 RSI: 000000000003ffff RDI: 0000000000040000 [ 155.645355][ T5204] RBP: ffffc90000cf7470 R08: ffffffff81d00892 R09: ffffffff81e48959 [ 155.653242][ T5204] R10: 0000000000000007 R11: ffff888114f862c0 R12: ffffc90000cf75a0 [ 155.667147][ T5241] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 155.667147][ T5241] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 155.667147][ T5241] [ 155.686284][ T939] usb 3-1: Using ep0 maxpacket: 16 [ 155.686599][ T2081] udevd[2081]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 155.704270][ T5204] R13: dffffc0000000000 R14: ffff888126fc7320 R15: ffff888126f90158 [ 155.714656][ T5204] FS: 00007f285cb866c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 155.725094][ T5204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.732051][ T5204] CR2: 00007f984d921160 CR3: 000000012efd3000 CR4: 00000000003506b0 [ 155.750057][ T5204] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.760146][ T5204] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.769154][ T5241] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noacl,,errors=continue. Quota mode: writeback. [ 155.788209][ T5204] Call Trace: [ 155.791354][ T5204] [ 155.794174][ T5241] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038 (0x7fffffff) [ 155.829296][ T5204] ? show_regs+0x58/0x60 [ 155.833377][ T5204] ? __warn+0x160/0x2f0 [ 155.848573][ T2081] udevd[2081]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 155.862450][ T5204] ? fscrypt_fname_siphash+0xbf/0xf0 [ 155.883396][ T5204] ? report_bug+0x3d9/0x5b0 [ 155.890493][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 155.902705][ T5204] ? fscrypt_fname_siphash+0xbf/0xf0 [ 155.908269][ T5204] ? handle_bug+0x41/0x70 [ 155.912820][ T5204] ? exc_invalid_op+0x1b/0x50 [ 155.918175][ T5204] ? asm_exc_invalid_op+0x1b/0x20 [ 155.933311][ T5204] ? __ext4fs_dirhash+0x289/0x14c0 [ 155.946832][ T2081] udevd[2081]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 155.959441][ T5204] ? fscrypt_fname_siphash+0x62/0xf0 [ 155.966399][ T939] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 155.973548][ T5204] ? fscrypt_fname_siphash+0xbf/0xf0 [ 155.983483][ T939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.983585][ T5204] ? fscrypt_fname_siphash+0xbf/0xf0 [ 155.997563][ T5204] ? fscrypt_fname_siphash+0xbf/0xf0 [ 156.002818][ T5204] __ext4fs_dirhash+0xdd2/0x14c0 [ 156.007648][ T939] usb 3-1: Product: syz [ 156.009190][ T5256] Invalid ELF header magic: != ELF [ 156.013814][ T939] usb 3-1: Manufacturer: syz [ 156.016796][ T5204] ? ext4fs_dirhash+0x320/0x320 [ 156.024270][ T939] usb 3-1: SerialNumber: syz [ 156.025757][ T5204] ext4fs_dirhash+0x1b8/0x320 [ 156.041093][ T5204] ? ext4_sync_file+0xa50/0xa50 [ 156.041274][ T939] r8152-cfgselector 3-1: config 0 descriptor?? [ 156.052680][ T5204] htree_dirblock_to_tree+0x723/0x10d0 [ 156.059851][ T5252] loop4: detected capacity change from 0 to 8192 [ 156.066942][ T5204] ? ext4_htree_fill_tree+0x13e0/0x13e0 [ 156.078698][ T5204] ? ____kasan_kmalloc+0xed/0x110 [ 156.087349][ T5204] ? kmem_cache_alloc_trace+0x115/0x210 [ 156.092885][ T5204] ? ext4_readdir+0x52e/0x38d0 [ 156.099405][ T5204] ? __x64_sys_getdents64+0x7b/0x90 [ 156.104459][ T5204] ? x64_sys_call+0x5ae/0x9a0 [ 156.114033][ T5204] ext4_htree_fill_tree+0x73d/0x13e0 [ 156.120299][ T5204] ? ext4_handle_dirty_dirblock+0x6d0/0x6d0 [ 156.126169][ T5204] ? __kasan_kmalloc+0x9/0x10 [ 156.130841][ T5204] ? ext4_readdir+0x52e/0x38d0 [ 156.135530][ T5204] ext4_readdir+0x2ec3/0x38d0 [ 156.141954][ T5204] ? down_read_killable+0x1035/0x1b10 [ 156.149260][ T2128] udevd[2128]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 156.164333][ T5204] ? debug_smp_processor_id+0x17/0x20 [ 156.170583][ T2128] udevd[2128]: symlink '../../loop4' '/dev/disk/by-uuid/1DE1-D756.tmp-b7:4' failed: Read-only file system [ 156.181816][ T5204] ? kasan_quarantine_put+0x34/0x1a0 [ 156.187303][ T5204] ? down_read_interruptible+0x1bf0/0x1bf0 [ 156.194321][ T5204] ? ____kasan_slab_free+0x131/0x160 [ 156.199494][ T5204] ? ext4_dir_llseek+0x540/0x540 [ 156.204471][ T5204] ? __kasan_slab_free+0x11/0x20 [ 156.209488][ T5204] ? slab_free_freelist_hook+0xbd/0x190 [ 156.232733][ T5204] ? __kasan_check_read+0x11/0x20 [ 156.244819][ T5204] ? security_file_permission+0x86/0xb0 [ 156.250338][ T5204] iterate_dir+0x265/0x600 [ 156.254563][ T5204] ? ext4_dir_llseek+0x540/0x540 [ 156.259555][ T5204] __se_sys_getdents64+0x1c1/0x460 [ 156.264542][ T5204] ? __x64_sys_getdents64+0x90/0x90 [ 156.269564][ T5204] ? filldir+0x680/0x680 [ 156.273627][ T5204] ? __kasan_check_write+0x14/0x20 [ 156.279528][ T5204] ? switch_fpu_return+0x15f/0x2e0 [ 156.284738][ T5204] __x64_sys_getdents64+0x7b/0x90 [ 156.290133][ T5268] loop4: detected capacity change from 0 to 16 [ 156.290366][ T5270] loop1: detected capacity change from 0 to 16 [ 156.302185][ T5204] x64_sys_call+0x5ae/0x9a0 [ 156.306546][ T5204] do_syscall_64+0x3b/0xb0 [ 156.310684][ T5204] ? clear_bhb_loop+0x35/0x90 [ 156.315188][ T5204] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.320966][ T5204] RIP: 0033:0x7f285df0cff9 [ 156.325169][ T5204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.330210][ T5268] erofs: (device loop4): mounted with root inode @ nid 36. [ 156.344723][ T5204] RSP: 002b:00007f285cb86038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 156.364637][ T5270] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.364732][ T5268] attempt to access beyond end of device [ 156.364732][ T5268] loop4: rw=0, want=14546590696, limit=16 [ 156.373025][ T5204] RAX: ffffffffffffffda RBX: 00007f285e0c4f80 RCX: 00007f285df0cff9 [ 156.390924][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 156.399995][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 156.402717][ T5204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 156.409339][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 156.417034][ T5204] RBP: 00007f285df7f296 R08: 0000000000000000 R09: 0000000000000000 [ 156.425615][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 156.433494][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.442577][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 156.450467][ T1778] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 156.458976][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 156.468963][ T5204] R13: 0000000000000000 R14: 00007f285e0c4f80 R15: 00007ffd26bc8718 [ 156.475762][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 156.483451][ T1778] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 156.492303][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 156.500470][ T5204] [ 156.509385][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 156.512340][ T1778] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 156.521086][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 156.530550][ T5204] ---[ end trace fec52175d06cfd76 ]--- [ 156.538258][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 156.546355][ T939] r8152-cfgselector 3-1: Unknown version 0x0000 [ 156.552407][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 156.568002][ T939] r8152-cfgselector 3-1: bad CDC descriptors [ 156.568542][ T5268] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 156.583284][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 156.592161][ T939] r8152-cfgselector 3-1: Unknown version 0x0000 [ 156.592246][ T5268] attempt to access beyond end of device [ 156.592246][ T5268] loop4: rw=524288, want=312, limit=16 [ 156.600028][ T939] r8152-cfgselector 3-1: USB disconnect, device number 30 [ 156.610143][ T5268] attempt to access beyond end of device [ 156.610143][ T5268] loop4: rw=524288, want=1049280, limit=16 [ 156.633534][ T5268] attempt to access beyond end of device [ 156.633534][ T5268] loop4: rw=524288, want=6536, limit=16 [ 156.644707][ T5268] attempt to access beyond end of device [ 156.644707][ T5268] loop4: rw=524288, want=34359736344, limit=16 [ 156.657050][ T5268] attempt to access beyond end of device [ 156.657050][ T5268] loop4: rw=524288, want=736, limit=16 [ 156.669928][ T5268] attempt to access beyond end of device [ 156.669928][ T5268] loop4: rw=524288, want=536576872, limit=16 [ 156.681718][ T5268] attempt to access beyond end of device [ 156.681718][ T5268] loop4: rw=524288, want=13478624040, limit=16 [ 156.693491][ T5268] attempt to access beyond end of device [ 156.693491][ T5268] loop4: rw=524288, want=13716630384, limit=16 [ 156.705907][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 156.714985][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 156.723927][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 156.739816][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 156.748777][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 156.757921][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 156.767069][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 156.776103][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 156.785362][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 156.794423][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 156.803365][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 156.812156][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 156.821130][ T5268] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 156.830265][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 156.839440][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 156.845633][ T5285] loop3: detected capacity change from 0 to 512 [ 156.848576][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 156.864612][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 156.873691][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 156.882978][ T5285] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 156.882978][ T5285] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 156.882978][ T5285] [ 156.885052][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 156.909609][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 156.918529][ T5268] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 156.927753][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 156.928747][ T5285] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noacl,,errors=continue. Quota mode: writeback. [ 156.936657][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 156.948939][ T5285] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038 (0x7fffffff) [ 156.957631][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 156.983552][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 156.995304][ T5268] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 157.026309][ T1211] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 157.104667][ T5301] loop2: detected capacity change from 0 to 512 [ 157.137246][ T5301] EXT4-fs (loop2): Test dummy encryption mode enabled [ 157.143944][ T5301] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.155833][ T5301] EXT4-fs (loop2): 1 truncate cleaned up [ 157.161591][ T5301] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 157.184437][ T5301] ------------[ cut here ]------------ [ 157.187762][ T5296] loop4: detected capacity change from 0 to 40427 [ 157.189856][ T5301] WARNING: CPU: 0 PID: 5301 at fs/crypto/fname.c:542 fscrypt_fname_siphash+0xbf/0xf0 [ 157.204349][ T5296] F2FS-fs (loop4): Invalid segment/section count (458776 != 24 * 1) [ 157.205298][ T5301] Modules linked in: [ 157.213178][ T5296] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 157.216868][ T5301] CPU: 0 PID: 5301 Comm: syz.2.2024 Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 157.225556][ T5296] F2FS-fs (loop4): invalid crc value [ 157.235936][ T5301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.235949][ T5301] RIP: 0010:fscrypt_fname_siphash+0xbf/0xf0 [ 157.242339][ T5296] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.250957][ T5301] Code: b6 04 28 84 c0 75 3a 41 8b 34 24 49 83 c6 48 4c 89 ff 4c 89 f2 e8 f1 37 b8 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 91 4e a0 ff <0f> 0b eb a8 89 d9 80 e1 07 38 c1 7c 8a 48 89 df e8 fc 9f e2 ff eb [ 157.282250][ T5301] RSP: 0018:ffffc90000da7448 EFLAGS: 00010283 [ 157.283939][ T5296] F2FS-fs (loop4): recover fsync data on readonly fs [ 157.288052][ T5301] RAX: ffffffff81d008ef RBX: 0000000000000000 RCX: 0000000000040000 [ 157.288069][ T5301] RDX: ffffc900014d0000 RSI: 0000000000000085 RDI: 0000000000000086 [ 157.288082][ T5301] RBP: ffffc90000da7470 R08: ffffffff81d00892 R09: ffffffff81e48959 [ 157.294815][ T5296] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 157.302382][ T5301] R10: 0000000000000007 R11: ffff888113eb13c0 R12: ffffc90000da75a0 [ 157.302399][ T5301] R13: dffffc0000000000 R14: ffff888126fc73e8 R15: ffff8881093d2468 [ 157.310360][ T5296] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 157.318022][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 157.330557][ T5301] FS: 00007fe9aca5c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 157.342909][ T5296] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0 [ 157.348084][ T60] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 157.353281][ T5301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.382952][ T5301] CR2: 00007f984d921160 CR3: 0000000133f67000 CR4: 00000000003506a0 [ 157.390757][ T5301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.398621][ T5301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.406426][ T5301] Call Trace: [ 157.409840][ T5301] [ 157.412585][ T5301] ? show_regs+0x58/0x60 [ 157.416800][ T5301] ? __warn+0x160/0x2f0 [ 157.420804][ T5301] ? fscrypt_fname_siphash+0xbf/0xf0 [ 157.425892][ T5301] ? report_bug+0x3d9/0x5b0 [ 157.430506][ T5301] ? fscrypt_fname_siphash+0xbf/0xf0 [ 157.435612][ T5301] ? handle_bug+0x41/0x70 [ 157.439861][ T5301] ? exc_invalid_op+0x1b/0x50 [ 157.444291][ T5301] ? asm_exc_invalid_op+0x1b/0x20 [ 157.449187][ T5301] ? __ext4fs_dirhash+0x289/0x14c0 [ 157.454098][ T5301] ? fscrypt_fname_siphash+0x62/0xf0 [ 157.459353][ T1211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.469245][ T5301] ? fscrypt_fname_siphash+0xbf/0xf0 [ 157.474366][ T5301] ? fscrypt_fname_siphash+0xbf/0xf0 [ 157.479736][ T5301] ? fscrypt_fname_siphash+0xbf/0xf0 [ 157.484836][ T5301] __ext4fs_dirhash+0xdd2/0x14c0 [ 157.489650][ T5301] ? ext4fs_dirhash+0x320/0x320 [ 157.494298][ T5301] ext4fs_dirhash+0x1b8/0x320 [ 157.498885][ T5301] ? ext4_sync_file+0xa50/0xa50 [ 157.503495][ T5301] htree_dirblock_to_tree+0x723/0x10d0 [ 157.508826][ T5301] ? ext4_htree_fill_tree+0x13e0/0x13e0 [ 157.514168][ T5301] ? ____kasan_kmalloc+0xed/0x110 [ 157.519172][ T5301] ? kmem_cache_alloc_trace+0x115/0x210 [ 157.524687][ T5301] ? ext4_readdir+0x52e/0x38d0 [ 157.529428][ T5301] ? iterate_dir+0x265/0x600 [ 157.533846][ T5301] ? __se_sys_getdents64+0x1c1/0x460 [ 157.539055][ T5301] ? __x64_sys_getdents64+0x7b/0x90 [ 157.544122][ T5301] ? x64_sys_call+0x5ae/0x9a0 [ 157.544901][ T551] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.548646][ T5301] ext4_htree_fill_tree+0x73d/0x13e0 [ 157.548675][ T5301] ? ext4_handle_dirty_dirblock+0x6d0/0x6d0 [ 157.565720][ T5301] ? __kasan_kmalloc+0x9/0x10 [ 157.570325][ T5301] ? ext4_readdir+0x52e/0x38d0 [ 157.574934][ T5301] ext4_readdir+0x2ec3/0x38d0 [ 157.579507][ T5301] ? down_read_killable+0x1035/0x1b10 [ 157.584654][ T5301] ? debug_smp_processor_id+0x17/0x20 [ 157.589962][ T5301] ? kasan_quarantine_put+0x34/0x1a0 [ 157.595053][ T5301] ? down_read_interruptible+0x1bf0/0x1bf0 [ 157.600724][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 157.600765][ T5301] ? ____kasan_slab_free+0x131/0x160 [ 157.610802][ T5301] ? ext4_dir_llseek+0x540/0x540 [ 157.615588][ T5301] ? __kasan_slab_free+0x11/0x20 [ 157.620383][ T5301] ? slab_free_freelist_hook+0xbd/0x190 [ 157.625762][ T5301] ? __kasan_check_read+0x11/0x20 [ 157.630609][ T5301] ? security_file_permission+0x86/0xb0 [ 157.635993][ T5301] iterate_dir+0x265/0x600 [ 157.640332][ T5301] ? ext4_dir_llseek+0x540/0x540 [ 157.645121][ T5301] __se_sys_getdents64+0x1c1/0x460 [ 157.650272][ T5301] ? __x64_sys_getdents64+0x90/0x90 [ 157.655228][ T5301] ? filldir+0x680/0x680 [ 157.656386][ T1211] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 157.659362][ T5301] ? __kasan_check_write+0x14/0x20 [ 157.668352][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.673366][ T5301] ? switch_fpu_return+0x15f/0x2e0 [ 157.681067][ T1211] usb 2-1: Product: syz [ 157.685926][ T5301] __x64_sys_getdents64+0x7b/0x90 [ 157.689918][ T1211] usb 2-1: Manufacturer: syz [ 157.699166][ T5301] x64_sys_call+0x5ae/0x9a0 [ 157.699336][ T1211] usb 2-1: SerialNumber: syz [ 157.703484][ T5301] do_syscall_64+0x3b/0xb0 [ 157.703505][ T5301] ? clear_bhb_loop+0x35/0x90 [ 157.717108][ T60] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 157.717163][ T1211] usb 2-1: config 0 descriptor?? [ 157.725240][ T60] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 157.725260][ T60] usb 4-1: config 135 has no interface number 0 [ 157.725286][ T60] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.730262][ T5301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.764928][ T5301] RIP: 0033:0x7fe9adde2ff9 [ 157.769178][ T5301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.788690][ T5301] RSP: 002b:00007fe9aca5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 157.797036][ T5301] RAX: ffffffffffffffda RBX: 00007fe9adf9af80 RCX: 00007fe9adde2ff9 [ 157.804830][ T5301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 157.812666][ T5301] RBP: 00007fe9ade55296 R08: 0000000000000000 R09: 0000000000000000 [ 157.820557][ T5301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.828496][ T5301] R13: 0000000000000000 R14: 00007fe9adf9af80 R15: 00007fffb76c7d48 [ 157.838886][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 157.838899][ T30] audit: type=1326 audit(1728939174.223:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.0.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f22b11ff9 code=0x7ffc0000 [ 157.839289][ T5301] [ 157.868066][ T30] audit: type=1326 audit(1728939174.233:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.0.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f0f22b11ff9 code=0x7ffc0000 [ 157.871142][ T5301] ---[ end trace fec52175d06cfd77 ]--- [ 157.899470][ T5301] ------------[ cut here ]------------ [ 157.904757][ T5301] WARNING: CPU: 0 PID: 5301 at fs/crypto/fname.c:542 fscrypt_fname_siphash+0xbf/0xf0 [ 157.906399][ T60] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 157.914371][ T5301] Modules linked in: [ 157.924752][ T30] audit: type=1326 audit(1728939174.233:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.0.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f22b11ff9 code=0x7ffc0000 [ 157.926769][ T5301] CPU: 0 PID: 5301 Comm: syz.2.2024 Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 157.953307][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.971020][ T30] audit: type=1326 audit(1728939174.273:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.0.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f22b11ff9 code=0x7ffc0000 [ 157.973664][ T5301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.994371][ T60] usb 4-1: Product: syz [ 158.004990][ T5301] RIP: 0010:fscrypt_fname_siphash+0xbf/0xf0 [ 158.008276][ T60] usb 4-1: Manufacturer: syz [ 158.013942][ T5301] Code: b6 04 28 84 c0 75 3a 41 8b 34 24 49 83 c6 48 4c 89 ff 4c 89 f2 e8 f1 37 b8 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 91 4e a0 ff <0f> 0b eb a8 89 d9 80 e1 07 38 c1 7c 8a 48 89 df e8 fc 9f e2 ff eb [ 158.018721][ T60] usb 4-1: SerialNumber: syz [ 158.038368][ T5301] RSP: 0018:ffffc90000da7448 EFLAGS: 00010246 [ 158.042234][ T5315] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 158.048394][ T5301] RAX: ffffffff81d008ef RBX: 0000000000000000 RCX: 0000000000040000 [ 158.064885][ T39] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 158.064931][ T5301] RDX: ffffc900014d0000 RSI: 000000000003ffff RDI: 0000000000040000 [ 158.081894][ T5301] RBP: ffffc90000da7470 R08: ffffffff81d00892 R09: ffffffff81e48959 [ 158.089714][ T5301] R10: 0000000000000007 R11: ffff888113eb13c0 R12: ffffc90000da75a0 [ 158.097863][ T5301] R13: dffffc0000000000 R14: ffff888126fc73e8 R15: ffff8881093d2468 [ 158.105795][ T5301] FS: 00007fe9aca5c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 158.114936][ T5301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.116815][ T60] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 158.121403][ T5301] CR2: 0000001b30e1dff8 CR3: 0000000133f67000 CR4: 00000000003506b0 [ 158.121423][ T5301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.121436][ T5301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.121450][ T5301] Call Trace: [ 158.121455][ T5301] [ 158.121462][ T5301] ? show_regs+0x58/0x60 [ 158.121486][ T5301] ? __warn+0x160/0x2f0 [ 158.121502][ T5301] ? fscrypt_fname_siphash+0xbf/0xf0 [ 158.121524][ T5301] ? report_bug+0x3d9/0x5b0 [ 158.121544][ T5301] ? fscrypt_fname_siphash+0xbf/0xf0 [ 158.121564][ T5301] ? handle_bug+0x41/0x70 [ 158.121580][ T5301] ? exc_invalid_op+0x1b/0x50 [ 158.121597][ T5301] ? asm_exc_invalid_op+0x1b/0x20 [ 158.121615][ T5301] ? __ext4fs_dirhash+0x289/0x14c0 [ 158.121632][ T5301] ? fscrypt_fname_siphash+0x62/0xf0 [ 158.121649][ T5301] ? fscrypt_fname_siphash+0xbf/0xf0 [ 158.121668][ T5301] ? fscrypt_fname_siphash+0xbf/0xf0 [ 158.121687][ T5301] ? fscrypt_fname_siphash+0xbf/0xf0 [ 158.121707][ T5301] __ext4fs_dirhash+0xdd2/0x14c0 [ 158.121730][ T5301] ? ext4fs_dirhash+0x320/0x320 [ 158.121753][ T5301] ext4fs_dirhash+0x1b8/0x320 [ 158.121770][ T5301] ? ext4_sync_file+0xa50/0xa50 [ 158.121790][ T5301] htree_dirblock_to_tree+0x723/0x10d0 [ 158.121815][ T5301] ? ext4_htree_fill_tree+0x13e0/0x13e0 [ 158.121834][ T5301] ? ____kasan_kmalloc+0xed/0x110 [ 158.121852][ T5301] ? kmem_cache_alloc_trace+0x115/0x210 [ 158.121872][ T5301] ? ext4_readdir+0x52e/0x38d0 [ 158.121891][ T5301] ? __x64_sys_getdents64+0x7b/0x90 [ 158.121909][ T5301] ? x64_sys_call+0x5ae/0x9a0 [ 158.121928][ T5301] ext4_htree_fill_tree+0x73d/0x13e0 [ 158.121951][ T5301] ? ext4_handle_dirty_dirblock+0x6d0/0x6d0 [ 158.121975][ T5301] ? __kasan_kmalloc+0x9/0x10 [ 158.121991][ T5301] ? ext4_readdir+0x52e/0x38d0 [ 158.143747][ T60] usb 4-1: No valid video chain found. [ 158.151658][ T60] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 158.154877][ T5301] ext4_readdir+0x2ec3/0x38d0 [ 158.311538][ T5301] ? down_read_killable+0x1035/0x1b10 [ 158.316758][ T5301] ? debug_smp_processor_id+0x17/0x20 [ 158.321940][ T5301] ? kasan_quarantine_put+0x34/0x1a0 [ 158.327169][ T1211] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 158.333245][ T1211] usb 2-1: No valid video chain found. [ 158.338559][ T5301] ? down_read_interruptible+0x1bf0/0x1bf0 [ 158.344156][ T5301] ? ____kasan_slab_free+0x131/0x160 [ 158.351568][ T1211] usb 2-1: USB disconnect, device number 35 [ 158.357790][ T5301] ? ext4_dir_llseek+0x540/0x540 [ 158.360554][ T39] usb 4-1: USB disconnect, device number 29 [ 158.362546][ T5301] ? __kasan_slab_free+0x11/0x20 [ 158.373322][ T5301] ? slab_free_freelist_hook+0xbd/0x190 [ 158.378763][ T5301] ? __kasan_check_read+0x11/0x20 [ 158.383601][ T5301] ? security_file_permission+0x86/0xb0 [ 158.389029][ T5301] iterate_dir+0x265/0x600 [ 158.393169][ T5301] ? ext4_dir_llseek+0x540/0x540 [ 158.397998][ T5301] __se_sys_getdents64+0x1c1/0x460 [ 158.402892][ T5301] ? __x64_sys_getdents64+0x90/0x90 [ 158.408221][ T5301] ? filldir+0x680/0x680 [ 158.412282][ T5301] ? __kasan_check_write+0x14/0x20 [ 158.417338][ T5301] ? switch_fpu_return+0x15f/0x2e0 [ 158.422248][ T5301] __x64_sys_getdents64+0x7b/0x90 [ 158.427062][ T5301] x64_sys_call+0x5ae/0x9a0 [ 158.431371][ T5301] do_syscall_64+0x3b/0xb0 [ 158.435702][ T5301] ? clear_bhb_loop+0x35/0x90 [ 158.436326][ T60] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 158.440188][ T5301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.453298][ T5301] RIP: 0033:0x7fe9adde2ff9 [ 158.457560][ T5301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.477033][ T5301] RSP: 002b:00007fe9aca5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 158.485190][ T5301] RAX: ffffffffffffffda RBX: 00007fe9adf9af80 RCX: 00007fe9adde2ff9 [ 158.493046][ T5301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 158.500875][ T5301] RBP: 00007fe9ade55296 R08: 0000000000000000 R09: 0000000000000000 [ 158.508660][ T5301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.516480][ T5301] R13: 0000000000000000 R14: 00007fe9adf9af80 R15: 00007fffb76c7d48 [ 158.524248][ T5301] [ 158.527160][ T5301] ---[ end trace fec52175d06cfd78 ]--- [ 158.594059][ T5320] loop2: detected capacity change from 0 to 256 [ 158.662778][ T5320] FAT-fs (loop2): Directory bread(block 64) failed [ 158.669151][ T5320] FAT-fs (loop2): Directory bread(block 65) failed [ 158.675501][ T5320] FAT-fs (loop2): Directory bread(block 66) failed [ 158.681783][ T5320] FAT-fs (loop2): Directory bread(block 67) failed [ 158.688186][ T5320] FAT-fs (loop2): Directory bread(block 68) failed [ 158.694440][ T5320] FAT-fs (loop2): Directory bread(block 69) failed [ 158.696347][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 158.700955][ T5320] FAT-fs (loop2): Directory bread(block 70) failed [ 158.712174][ T5320] FAT-fs (loop2): Directory bread(block 71) failed [ 158.718432][ T5320] FAT-fs (loop2): Directory bread(block 72) failed [ 158.724730][ T5320] FAT-fs (loop2): Directory bread(block 73) failed [ 158.814960][ T30] audit: type=1400 audit(1728939175.193:1734): avc: denied { watch } for pid=5329 comm="syz.2.2034" path="/289" dev="tmpfs" ino=1530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 158.816401][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 158.845799][ T30] audit: type=1400 audit(1728939175.223:1735): avc: denied { mount } for pid=5329 comm="syz.2.2034" name="/" dev="incremental-fs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 158.845863][ T60] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.887667][ T30] audit: type=1400 audit(1728939175.253:1736): avc: denied { setattr } for pid=5329 comm="syz.2.2034" name="/" dev="incremental-fs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.892689][ T60] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 158.910542][ T30] audit: type=1400 audit(1728939175.263:1737): avc: denied { unmount } for pid=1966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 158.919791][ T60] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 158.949395][ T60] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 158.958969][ T60] usb 1-1: config 1 interface 0 has no altsetting 0 [ 158.965350][ T60] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 158.974273][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.016969][ T60] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 159.236824][ T60] scsi host1: usb-storage 1-1:1.0 [ 159.457965][ T60] usb 1-1: USB disconnect, device number 30 [ 159.586292][ T939] Bluetooth: hci0: command 0x1003 tx timeout [ 159.592138][ T47] Bluetooth: hci0: sending frame failed (-49) [ 159.976495][ T30] audit: type=1400 audit(1728939176.363:1738): avc: denied { ioctl } for pid=5336 comm="syz.1.2036" path="socket:[35608]" dev="sockfs" ino=35608 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.011323][ T5344] loop0: detected capacity change from 0 to 512 [ 160.030319][ T5343] loop3: detected capacity change from 0 to 512 [ 160.043968][ T5344] EXT4-fs (loop0): Test dummy encryption mode enabled [ 160.051119][ T5344] EXT4-fs (loop0): Test dummy encryption mode enabled [ 160.057736][ T5344] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.074528][ T30] audit: type=1400 audit(1728939176.453:1739): avc: denied { audit_write } for pid=5351 comm="syz.1.2043" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 160.097480][ T2081] udevd[2081]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 160.101064][ T2128] udevd[2128]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 160.122611][ T5343] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2039: inode #1: comm syz.3.2039: iget: illegal inode # [ 160.137047][ T5344] EXT4-fs (loop0): 1 truncate cleaned up [ 160.142506][ T5344] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback. [ 160.160105][ T5343] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2039: error while reading EA inode 1 err=-117 [ 160.164529][ T2081] udevd[2081]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 160.183563][ T5343] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2039: inode #1: comm syz.3.2039: iget: illegal inode # [ 160.196905][ T5343] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2039: error while reading EA inode 1 err=-117 [ 160.197053][ T5344] EXT4-fs (loop0): Test dummy encryption mode enabled [ 160.215673][ T5344] EXT4-fs (loop0): journaled quota format not specified [ 160.215707][ T5343] EXT4-fs (loop3): 1 orphan inode deleted [ 160.228361][ T5343] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 160.259081][ T2081] udevd[2081]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 160.295382][ T2081] udevd[2081]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 160.308928][ T5364] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 160.319106][ T1200] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 160.357181][ T5366] loop1: detected capacity change from 0 to 1024 [ 160.411955][ T5366] EXT4-fs (loop1): Ignoring removed oldalloc option [ 160.418821][ T5366] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.433709][ T2081] udevd[2081]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 160.437359][ T5366] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 160.471871][ T2081] udevd[2081]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 160.539410][ T2081] udevd[2081]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 160.550844][ T939] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 160.703927][ T5396] syz.1.2061[5396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.703992][ T5396] syz.1.2061[5396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.716398][ T1200] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 160.738269][ T1200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.749052][ T1200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.758558][ T1200] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 160.771335][ T804] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 160.778899][ T1200] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 160.787123][ T5401] xt_hashlimit: size too large, truncated to 1048576 [ 160.787926][ T1200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.802728][ T1200] usb 3-1: config 0 descriptor?? [ 160.916335][ T939] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 160.924316][ T939] usb 1-1: config 0 has no interface number 1 [ 160.930471][ T939] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 160.940120][ T939] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 161.026444][ T939] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 161.035327][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.043112][ T939] usb 1-1: SerialNumber: syz [ 161.048471][ T939] usb 1-1: config 0 descriptor?? [ 161.156393][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.167124][ T6] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 161.174477][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.184034][ T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.196617][ T804] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 161.205425][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.213734][ T804] usb 4-1: config 0 descriptor?? [ 161.297126][ T1200] hid-rmi 0003:17EF:6085.004A: unknown main item tag 0x0 [ 161.303987][ T1200] hid-rmi 0003:17EF:6085.004A: unknown main item tag 0x0 [ 161.310953][ T1200] hid-rmi 0003:17EF:6085.004A: unknown main item tag 0x0 [ 161.317748][ T1200] hid-rmi 0003:17EF:6085.004A: unknown main item tag 0x0 [ 161.324545][ T1200] hid-rmi 0003:17EF:6085.004A: unknown main item tag 0x0 [ 161.326335][ T939] usb 1-1: Found UVC 0.00 device (0002:0000) [ 161.332056][ T1200] hid-rmi 0003:17EF:6085.004A: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.2-1/input0 [ 161.339837][ T939] usb 1-1: No valid video chain found. [ 161.358531][ T939] usb 1-1: USB disconnect, device number 31 [ 161.426292][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 161.508257][ T1200] usb 3-1: USB disconnect, device number 31 [ 161.576363][ T6] usb 2-1: config 0 has no interfaces? [ 161.666286][ T939] Bluetooth: hci0: command 0x1001 tx timeout [ 161.672116][ T47] Bluetooth: hci0: sending frame failed (-49) [ 161.687130][ T804] gt683r_led 0003:1770:FF00.004B: item fetching failed at offset 1/5 [ 161.695243][ T804] gt683r_led 0003:1770:FF00.004B: hid parsing failed [ 161.701739][ T804] gt683r_led: probe of 0003:1770:FF00.004B failed with error -22 [ 161.746381][ T6] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 161.755235][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.763071][ T6] usb 2-1: Product: syz [ 161.767033][ T6] usb 2-1: Manufacturer: syz [ 161.771450][ T6] usb 2-1: SerialNumber: syz [ 161.776597][ T6] r8152-cfgselector 2-1: config 0 descriptor?? [ 161.803463][ T3162] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 161.823913][ T3162] EXT4-fs (loop0): Remounting filesystem read-only [ 161.891768][ T939] usb 4-1: USB disconnect, device number 30 [ 161.934127][ T5413] loop0: detected capacity change from 0 to 8192 [ 162.034567][ T2128] udevd[2128]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 162.046384][ T6] r8152-cfgselector 2-1: Unknown version 0x0000 [ 162.053979][ T2128] udevd[2128]: symlink '../../loop0' '/dev/disk/by-uuid/1DE1-D756.tmp-b7:0' failed: Read-only file system [ 162.209600][ T5435] loop0: detected capacity change from 0 to 512 [ 162.248077][ T6] r8152-cfgselector 2-1: USB disconnect, device number 36 [ 162.277652][ T5442] loop2: detected capacity change from 0 to 16 [ 162.284238][ T5435] EXT4-fs (loop0): Ignoring removed oldalloc option [ 162.290772][ T5435] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.301753][ T5442] erofs: (device loop2): mounted with root inode @ nid 36. [ 162.310843][ T5435] EXT4-fs (loop0): 1 truncate cleaned up [ 162.316420][ T5435] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 162.350655][ T1966] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 162.358994][ T1966] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 162.367358][ T1966] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 162.395941][ T3162] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 162.440713][ T5451] loop3: detected capacity change from 0 to 256 [ 162.761752][ T312] Bluetooth: hci1: Frame reassembly failed (-84) [ 162.776357][ T939] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 162.791779][ T5494] xt_hashlimit: size too large, truncated to 1048576 [ 162.964485][ T5505] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 162.987124][ T804] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 162.992642][ T5507] loop2: detected capacity change from 0 to 1024 [ 163.056313][ T939] usb 4-1: Using ep0 maxpacket: 16 [ 163.086679][ T5507] EXT4-fs (loop2): Ignoring removed oldalloc option [ 163.093118][ T5507] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.107545][ T5507] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 163.196762][ T939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.366389][ T939] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 163.375241][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.383051][ T939] usb 4-1: Product: syz [ 163.387042][ T939] usb 4-1: Manufacturer: syz [ 163.391455][ T939] usb 4-1: SerialNumber: syz [ 163.396461][ T939] usb 4-1: config 0 descriptor?? [ 163.406367][ T804] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 163.746302][ T60] Bluetooth: hci0: command 0x1009 tx timeout [ 163.926586][ T939] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 163.932750][ T939] usb 4-1: No valid video chain found. [ 163.938614][ T939] usb 4-1: USB disconnect, device number 31 [ 164.786283][ T804] Bluetooth: hci1: command 0x1003 tx timeout [ 164.792115][ T1959] Bluetooth: hci1: sending frame failed (-49) [ 166.866322][ T6] Bluetooth: hci1: command 0x1001 tx timeout [ 166.872204][ T1959] Bluetooth: hci1: sending frame failed (-49) [ 167.561409][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 167.561424][ T30] audit: type=1400 audit(1728939183.943:1799): avc: denied { execmem } for pid=5516 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 167.586582][ T30] audit: type=1400 audit(1728939183.953:1800): avc: denied { mounton } for pid=5517 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 167.617980][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.624808][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.631960][ T5517] device bridge_slave_0 entered promiscuous mode [ 167.638511][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.645329][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.652501][ T5517] device bridge_slave_1 entered promiscuous mode [ 167.688846][ T5310] bridge0: port 3(syz_tun) entered disabled state [ 167.695883][ T5310] device syz_tun left promiscuous mode [ 167.701671][ T5310] bridge0: port 3(syz_tun) entered disabled state [ 167.721875][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.728721][ T5517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.735786][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.742610][ T5517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.760768][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.768055][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.775251][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.782641][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.791144][ T312] tipc: Disabling bearer [ 167.796346][ T312] tipc: Left network mode [ 167.797495][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.808589][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.815409][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.823968][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.831962][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.838788][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.855196][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.864213][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.877645][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.891205][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.899068][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.906586][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.914500][ T5517] device veth0_vlan entered promiscuous mode [ 167.925929][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.934890][ T5517] device veth1_macvtap entered promiscuous mode [ 167.945398][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.955121][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.968851][ T30] audit: type=1400 audit(1728939184.353:1801): avc: denied { mounton } for pid=5517 comm="syz-executor" path="/root/syzkaller.m2Os17/syz-tmp" dev="sda1" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 167.993351][ T30] audit: type=1400 audit(1728939184.353:1802): avc: denied { mount } for pid=5517 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.023746][ T30] audit: type=1400 audit(1728939184.353:1803): avc: denied { mounton } for pid=5517 comm="syz-executor" path="/root/syzkaller.m2Os17/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 168.051766][ T5523] syz.3.2114[5523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.051775][ T30] audit: type=1400 audit(1728939184.353:1804): avc: denied { mounton } for pid=5517 comm="syz-executor" path="/root/syzkaller.m2Os17/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 168.051809][ T30] audit: type=1400 audit(1728939184.373:1805): avc: denied { mounton } for pid=5517 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 168.093801][ T5523] syz.3.2114[5523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.114028][ T30] audit: type=1400 audit(1728939184.373:1806): avc: denied { mounton } for pid=5517 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 168.149073][ T5529] binder: 5528:5529 ioctl 4018620d 0 returned -22 [ 168.157431][ T30] audit: type=1400 audit(1728939184.503:1807): avc: denied { read } for pid=5526 comm="syz.2.2113" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.196303][ T30] audit: type=1400 audit(1728939184.503:1808): avc: denied { open } for pid=5526 comm="syz.2.2113" path="/dev/rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.246099][ T5541] loop3: detected capacity change from 0 to 256 [ 168.280267][ T5541] exfat: Deprecated parameter 'namecase' [ 168.288305][ T5541] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 168.427585][ T312] device bridge_slave_1 left promiscuous mode [ 168.433941][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.454670][ T312] device bridge_slave_0 left promiscuous mode [ 168.464221][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.472824][ T312] device veth1_macvtap left promiscuous mode [ 168.479152][ T312] device veth0_vlan left promiscuous mode [ 168.778450][ T5580] loop2: detected capacity change from 0 to 512 [ 168.846634][ T5580] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 168.851403][ T5521] udevd[5521]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 168.878376][ T5580] EXT4-fs (loop2): 1 orphan inode deleted [ 168.883902][ T5580] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,grpjquota=./bus,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,nodelalloc,,errors=continue. Quota mode: writeback. [ 168.908054][ T5580] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038 (0x7fffffff) [ 168.923354][ T5521] udevd[5521]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 168.946390][ T1200] Bluetooth: hci1: command 0x1009 tx timeout [ 168.958664][ T1966] EXT4-fs warning (device loop2): __ext4_unlink:3333: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 168.971134][ T1966] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 168.988450][ T1966] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 169.028640][ T312] tipc: Disabling bearer [ 169.029310][ T5590] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 169.033561][ T312] tipc: Disabling bearer [ 169.043046][ T5590] SELinux: security_context_str_to_sid(staff_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 169.047954][ T312] tipc: Left network mode [ 169.167683][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.174525][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.181649][ T5596] device bridge_slave_0 entered promiscuous mode [ 169.189869][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.196963][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.204200][ T5596] device bridge_slave_1 entered promiscuous mode [ 169.245615][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.252456][ T5596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.259535][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.266345][ T5596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.287433][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.294734][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.302074][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.319706][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.327788][ T551] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.334633][ T551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.342120][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.350298][ T6] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 169.360447][ T551] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.367301][ T551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.386545][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.394314][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.424432][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.442283][ T5596] device veth0_vlan entered promiscuous mode [ 169.448774][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.456881][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.464162][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.474979][ T312] device bridge_slave_1 left promiscuous mode [ 169.481079][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.488640][ T312] device bridge_slave_0 left promiscuous mode [ 169.494563][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.502388][ T312] device veth1_macvtap left promiscuous mode [ 169.508233][ T312] device veth0_vlan left promiscuous mode [ 169.562172][ T5605] loop3: detected capacity change from 0 to 40427 [ 169.600861][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.610946][ T5605] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 169.617537][ T5521] udevd[5521]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 169.618582][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 169.632027][ T5605] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 169.638370][ T5596] device veth1_macvtap entered promiscuous mode [ 169.654004][ T5605] F2FS-fs (loop3): invalid crc value [ 169.660584][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.666712][ T5605] F2FS-fs (loop3): Found nat_bits in checkpoint [ 169.668816][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.683264][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.691732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.705509][ T5605] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 169.713106][ T5605] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 169.727331][ T5521] udevd[5521]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 169.760897][ T5605] handle_bad_sector: 19 callbacks suppressed [ 169.760909][ T5605] attempt to access beyond end of device [ 169.760909][ T5605] loop3: rw=2049, want=45112, limit=40427 [ 169.782160][ T45] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 169.786555][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.791159][ T45] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 169.801674][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.819995][ T6] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 169.856470][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.868540][ T6] usb 5-1: config 0 descriptor?? [ 170.102007][ T5655] loop3: detected capacity change from 0 to 1024 [ 170.177111][ T5655] EXT4-fs (loop3): Ignoring removed orlov option [ 170.184031][ T5655] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 170.187666][ T5658] udevd[5658]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 170.196595][ T5655] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 170.216390][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 170.222114][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 170.230806][ T6] usb 5-1: USB disconnect, device number 30 [ 170.566308][ T60] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 170.707523][ T5674] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 170.904482][ T5686] loop4: detected capacity change from 0 to 40427 [ 170.926409][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.937277][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.947758][ T60] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 170.955222][ T5658] udevd[5658]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 170.956638][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.958103][ T60] usb 4-1: config 0 descriptor?? [ 170.974572][ T5686] F2FS-fs (loop4): invalid crc value [ 170.989555][ T5686] F2FS-fs (loop4): Found nat_bits in checkpoint [ 171.011072][ T5686] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 171.023415][ T5658] udevd[5658]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 171.038405][ T5517] attempt to access beyond end of device [ 171.038405][ T5517] loop4: rw=2049, want=45104, limit=40427 [ 171.457647][ T60] hid-multitouch 0003:1FD2:6007.004C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 171.678447][ T6] usb 4-1: USB disconnect, device number 32 [ 172.024499][ T5701] loop4: detected capacity change from 0 to 512 [ 172.120186][ T5658] udevd[5658]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 172.132995][ T5701] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.143855][ T5701] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 172.158982][ T5658] udevd[5658]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 172.159480][ T5701] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.2187: Directory hole found for htree leaf block 0 [ 172.248111][ T5713] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 172.309313][ T5723] loop4: detected capacity change from 0 to 512 [ 172.377249][ T5723] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.382231][ T5658] udevd[5658]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 172.398921][ T5723] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.405643][ T5723] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 172.419752][ T5723] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.2196: Failed to acquire dquot type 0 [ 172.431010][ T5723] EXT4-fs (loop4): 1 truncate cleaned up [ 172.436724][ T5723] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 172.526331][ T26] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 172.582967][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 172.582981][ T30] audit: type=1400 audit(1728939188.963:1905): avc: denied { execmem } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 172.610243][ T30] audit: type=1400 audit(1728939188.973:1906): avc: denied { integrity } for pid=5725 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 172.636210][ T30] audit: type=1400 audit(1728939189.013:1907): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.673196][ T30] audit: type=1400 audit(1728939189.043:1908): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.696896][ T30] audit: type=1400 audit(1728939189.043:1909): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 172.718651][ T30] audit: type=1400 audit(1728939189.043:1910): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 172.741144][ T30] audit: type=1400 audit(1728939189.053:1911): avc: denied { create } for pid=5729 comm="syz.4.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.761445][ T30] audit: type=1400 audit(1728939189.053:1912): avc: denied { write } for pid=5729 comm="syz.4.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.791326][ T5732] xt_nat: multiple ranges no longer supported [ 172.793989][ T30] audit: type=1400 audit(1728939189.053:1913): avc: denied { read } for pid=5729 comm="syz.4.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.821411][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.828303][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.835622][ T5728] device bridge_slave_0 entered promiscuous mode [ 172.856188][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.867059][ T30] audit: type=1400 audit(1728939189.083:1914): avc: denied { create } for pid=5731 comm="syz.4.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.886520][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.893789][ T5728] device bridge_slave_1 entered promiscuous mode [ 172.924270][ T804] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 172.932306][ T804] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 172.966599][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 172.976536][ T26] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 172.991506][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 173.001223][ T26] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 173.002702][ T5743] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 173.068536][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.075382][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.082751][ T5737] device bridge_slave_0 entered promiscuous mode [ 173.083095][ T5750] xt_hashlimit: size too large, truncated to 1048576 [ 173.096924][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.103778][ T5728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.110883][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.117663][ T5728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.125838][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.133064][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.140441][ T5737] device bridge_slave_1 entered promiscuous mode [ 173.176370][ T26] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 173.177067][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.193345][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.197604][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.208057][ T26] usb 4-1: Product: syz [ 173.208086][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.212004][ T26] usb 4-1: Manufacturer: syz [ 173.223319][ T26] usb 4-1: SerialNumber: syz [ 173.231214][ T26] usb 4-1: config 0 descriptor?? [ 173.243453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.251538][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.258381][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.265733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.274666][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.281522][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.286675][ T26] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 173.288832][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.318071][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.340052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.356413][ T5728] device veth0_vlan entered promiscuous mode [ 173.362778][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.371520][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.378903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.411606][ T5728] device veth1_macvtap entered promiscuous mode [ 173.419097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.446214][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.463570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.497801][ T312] device bridge_slave_1 left promiscuous mode [ 173.503937][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.526464][ T312] device bridge_slave_0 left promiscuous mode [ 173.533152][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.546897][ T312] device veth1_macvtap left promiscuous mode [ 173.553031][ T312] device veth0_vlan left promiscuous mode [ 173.559411][ T26] scsi host1: usb-storage 4-1:0.0 [ 173.697578][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.714646][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.726709][ T551] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.733001][ T5771] loop4: detected capacity change from 0 to 128 [ 173.733572][ T551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.751791][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.760331][ T551] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.767193][ T551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.778337][ T60] usb 4-1: USB disconnect, device number 33 [ 173.784801][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.804716][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.812965][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.822603][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.830992][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.847020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.855454][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.872561][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.894284][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.905869][ T5737] device veth0_vlan entered promiscuous mode [ 173.921906][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.933489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.946719][ T5737] device veth1_macvtap entered promiscuous mode [ 173.956011][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.964959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.972951][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.996788][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.004569][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.020492][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.028887][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.037092][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.045188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.110369][ T312] tipc: Disabling bearer [ 174.119506][ T312] tipc: Left network mode [ 174.133855][ T5804] loop4: detected capacity change from 0 to 16 [ 174.143912][ T5658] udevd[5658]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 174.167117][ T5804] erofs: (device loop4): mounted with root inode @ nid 36. [ 174.231980][ T5814] input: syz0 as /devices/virtual/input/input41 [ 174.303488][ T5819] loop4: detected capacity change from 0 to 512 [ 174.319855][ T5819] EXT4-fs (loop4): Ignoring removed nobh option [ 174.334192][ T5819] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 174.334396][ T5658] udevd[5658]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 174.341862][ T5819] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 174.361232][ T5819] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.2233: casefold flag without casefold feature [ 174.375615][ T5819] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2233: couldn't read orphan inode 13 (err -117) [ 174.388844][ T5819] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 174.413425][ T5658] udevd[5658]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 174.435238][ T5819] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 174.446448][ T1200] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 174.483848][ T5829] loop4: detected capacity change from 0 to 16 [ 174.536283][ T6] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 174.556927][ T5829] erofs: (device loop4): mounted with root inode @ nid 36. [ 174.560668][ T5658] udevd[5658]: symlink '../../loop4' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:4' failed: Read-only file system [ 174.648869][ T312] device bridge_slave_1 left promiscuous mode [ 174.654834][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.664410][ T312] device bridge_slave_0 left promiscuous mode [ 174.670459][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.677988][ T312] device veth1_macvtap left promiscuous mode [ 174.696280][ T1200] usb 1-1: Using ep0 maxpacket: 8 [ 174.776300][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 174.816427][ T1200] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 174.824723][ T1200] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 174.834949][ T1200] usb 1-1: config 135 has no interface number 0 [ 174.841072][ T1200] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 174.852056][ T1200] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 174.865389][ T1200] usb 1-1: config 135 interface 230 has no altsetting 0 [ 174.896303][ T6] usb 2-1: config 0 has no interfaces? [ 174.936286][ T939] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 175.026477][ T1200] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 175.035555][ T1200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.043391][ T1200] usb 1-1: Product: syz [ 175.047334][ T1200] usb 1-1: Manufacturer: syz [ 175.051750][ T1200] usb 1-1: SerialNumber: syz [ 175.056306][ T6] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 175.065135][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.073434][ T6] usb 2-1: Product: syz [ 175.077688][ T6] usb 2-1: Manufacturer: syz [ 175.082085][ T6] usb 2-1: SerialNumber: syz [ 175.088044][ T6] r8152-cfgselector 2-1: config 0 descriptor?? [ 175.316366][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.327712][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.337297][ T939] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 175.346146][ T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.348425][ T6] r8152-cfgselector 2-1: Unknown version 0x0000 [ 175.357002][ T939] usb 5-1: config 0 descriptor?? [ 175.360128][ T1200] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 175.370977][ T1200] usb 1-1: No valid video chain found. [ 175.559337][ T6] r8152-cfgselector 2-1: USB disconnect, device number 37 [ 175.576610][ T39] usb 1-1: USB disconnect, device number 32 [ 175.766283][ T1200] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 176.006395][ T1200] usb 4-1: Using ep0 maxpacket: 16 [ 176.126401][ T1200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.137423][ T1200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.147346][ T1200] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.160008][ T1200] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 176.169332][ T1200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.178524][ T1200] usb 4-1: config 0 descriptor?? [ 176.271952][ T939] hid-led 0003:27B8:01ED.004E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 176.296340][ T939] hid-led 0003:27B8:01ED.004E: ThingM blink(1) v1 initialized [ 176.474953][ T939] usb 5-1: USB disconnect, device number 31 [ 176.602642][ T5891] syz.1.2265[5891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.602714][ T5891] syz.1.2265[5891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.637743][ T5893] syz.1.2266[5893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.651417][ T5893] syz.1.2266[5893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.663519][ T1200] koneplus 0003:1E7D:2E22.004F: item fetching failed at offset 0/2 [ 176.687293][ T1200] koneplus 0003:1E7D:2E22.004F: parse failed [ 176.693123][ T1200] koneplus: probe of 0003:1E7D:2E22.004F failed with error -22 [ 176.709307][ T5893] loop1: detected capacity change from 0 to 128 [ 176.722106][ T5658] udevd[5658]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system [ 176.737530][ T5893] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 176.751592][ T5893] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 176.788233][ T5658] udevd[5658]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system [ 176.861124][ T5907] loop0: detected capacity change from 0 to 256 [ 176.868013][ T20] usb 4-1: USB disconnect, device number 34 [ 176.886824][ T5907] exfat: Deprecated parameter 'namecase' [ 176.892437][ T5907] exfat: Deprecated parameter 'namecase' [ 176.910387][ T5907] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 177.017844][ T5923] ------------[ cut here ]------------ [ 177.023122][ T5923] WARNING: CPU: 1 PID: 5923 at kernel/trace/bpf_trace.c:1411 bpf_get_stack_raw_tp+0x1d3/0x220 [ 177.033259][ T5923] Modules linked in: [ 177.036936][ T5923] CPU: 1 PID: 5923 Comm: syz.4.2280 Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 177.048049][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.057951][ T5923] RIP: 0010:bpf_get_stack_raw_tp+0x1d3/0x220 [ 177.063743][ T5923] Code: f1 45 31 c0 e8 2e 8f 14 00 65 ff 0d 2f 56 87 7e 4c 63 e8 4c 89 e8 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6d 7e f4 ff <0f> 0b 65 ff 0d 0c 56 87 7e 49 c7 c5 f0 ff ff ff eb d7 e8 56 7e f4 [ 177.083214][ T5923] RSP: 0000:ffffc90000af69b0 EFLAGS: 00010293 [ 177.089101][ T5923] RAX: ffffffff817bd913 RBX: 0000000000000003 RCX: ffff8881150e13c0 [ 177.096907][ T5923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc [ 177.104703][ T5923] RBP: ffffc90000af69f0 R08: ffffffff817bd7d3 R09: fffffbfff0e5326e [ 177.112668][ T5923] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000af6a08 [ 177.120479][ T5923] R13: 0000000000000000 R14: 0000000000000900 R15: ffff8881f7132d30 [ 177.128276][ T5923] FS: 000055557cf81500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 177.137041][ T5923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.143450][ T5923] CR2: 0000001b2ce1bff8 CR3: 000000011f17c000 CR4: 00000000003506a0 [ 177.151281][ T5923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.159089][ T5923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.166898][ T5923] Call Trace: [ 177.170013][ T5923] [ 177.172786][ T5923] ? show_regs+0x58/0x60 [ 177.176892][ T5923] ? __warn+0x160/0x2f0 [ 177.180858][ T5923] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 177.186066][ T5923] ? report_bug+0x3d9/0x5b0 [ 177.190424][ T5923] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 177.195612][ T5923] ? handle_bug+0x41/0x70 [ 177.199809][ T5923] ? exc_invalid_op+0x1b/0x50 [ 177.204292][ T5923] ? asm_exc_invalid_op+0x1b/0x20 [ 177.209169][ T5923] ? bpf_get_stack_raw_tp+0x93/0x220 [ 177.214271][ T5923] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 177.219497][ T5923] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 177.224687][ T5923] ? strlcpy+0x88/0xd0 [ 177.228613][ T5923] bpf_prog_ec3b2eefa702d8d3+0x3a/0xdfc [ 177.233975][ T5923] bpf_trace_run4+0x13f/0x270 [ 177.238510][ T5923] ? bpf_trace_run3+0x250/0x250 [ 177.243176][ T5923] ? get_mem_cgroup_from_mm+0x18e/0x230 [ 177.248576][ T5923] __bpf_trace_mmap_lock_acquire_returned+0x33/0x40 [ 177.254980][ T5923] __mmap_lock_do_trace_acquire_returned+0x198/0x200 [ 177.261509][ T5923] ? get_mm_memcg_path+0x240/0x240 [ 177.266648][ T5923] stack_map_get_build_id_offset+0x5ec/0x900 [ 177.272450][ T5923] ? __bpf_get_stackid+0x950/0x950 [ 177.277411][ T5923] __bpf_get_stack+0x495/0x570 [ 177.282004][ T5923] ? stack_map_get_build_id_offset+0x900/0x900 [ 177.288002][ T5923] ? __kasan_check_write+0x14/0x20 [ 177.292927][ T5923] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 177.298251][ T5923] bpf_get_stack+0x31/0x40 [ 177.302478][ T5923] bpf_get_stack_raw_tp+0x1b2/0x220 [ 177.307526][ T5923] bpf_prog_ec3b2eefa702d8d3+0x3a/0xdfc [ 177.312891][ T5923] bpf_trace_run4+0x13f/0x270 [ 177.317423][ T5923] ? bpf_trace_run3+0x250/0x250 [ 177.322095][ T5923] ? is_bpf_text_address+0x172/0x190 [ 177.327233][ T5923] ? get_mem_cgroup_from_mm+0x18e/0x230 [ 177.332595][ T5923] __bpf_trace_mmap_lock_acquire_returned+0x33/0x40 [ 177.339034][ T5923] __mmap_lock_do_trace_acquire_returned+0x198/0x200 [ 177.345524][ T5923] ? get_mm_memcg_path+0x240/0x240 [ 177.350497][ T5923] stack_map_get_build_id_offset+0x5ec/0x900 [ 177.356309][ T5923] ? __kasan_check_read+0x11/0x20 [ 177.361148][ T5923] ? __bpf_get_stackid+0x950/0x950 [ 177.366096][ T5923] ? compat_start_thread+0x20/0x20 [ 177.371059][ T5923] ? kvm_sched_clock_read+0x18/0x40 [ 177.376074][ T5923] ? sched_clock+0x9/0x10 [ 177.380259][ T5923] __bpf_get_stack+0x495/0x570 [ 177.384845][ T5923] ? stack_map_get_build_id_offset+0x900/0x900 [ 177.390845][ T5923] ? __kasan_check_write+0x14/0x20 [ 177.395776][ T5923] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 177.401091][ T5923] bpf_get_stack+0x31/0x40 [ 177.405328][ T5923] bpf_get_stack_raw_tp+0x1b2/0x220 [ 177.410374][ T5923] bpf_prog_ec3b2eefa702d8d3+0x3a/0xdfc [ 177.415739][ T5923] bpf_trace_run4+0x13f/0x270 [ 177.420277][ T5923] ? bpf_trace_run3+0x250/0x250 [ 177.424941][ T5923] ? remove_hrtimer+0x134/0x290 [ 177.429641][ T5923] ? get_mem_cgroup_from_mm+0x18e/0x230 [ 177.435009][ T5923] __bpf_trace_mmap_lock_acquire_returned+0x33/0x40 [ 177.441448][ T5923] __mmap_lock_do_trace_acquire_returned+0x198/0x200 [ 177.447958][ T5923] ? get_mm_memcg_path+0x240/0x240 [ 177.452895][ T5923] stack_map_get_build_id_offset+0x5ec/0x900 [ 177.458718][ T5923] ? do_futex+0x1367/0x37f0 [ 177.463043][ T5923] ? __bpf_get_stackid+0x950/0x950 [ 177.468008][ T5923] __bpf_get_stack+0x495/0x570 [ 177.472589][ T5923] ? stack_map_get_build_id_offset+0x900/0x900 [ 177.478603][ T5923] ? __kasan_check_write+0x14/0x20 [ 177.483525][ T5923] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 177.488833][ T5923] ? __kasan_check_write+0x14/0x20 [ 177.493766][ T5923] bpf_get_stack+0x31/0x40 [ 177.498035][ T5923] bpf_get_stack_raw_tp+0x1b2/0x220 [ 177.503055][ T5923] bpf_prog_ec3b2eefa702d8d3+0x3a/0xdfc [ 177.508691][ T5923] bpf_trace_run4+0x13f/0x270 [ 177.513189][ T5923] ? bpf_trace_run3+0x250/0x250 [ 177.517888][ T5923] ? get_mem_cgroup_from_mm+0x18e/0x230 [ 177.523253][ T5923] __bpf_trace_mmap_lock_acquire_returned+0x33/0x40 [ 177.529856][ T5923] __mmap_lock_do_trace_acquire_returned+0x198/0x200 [ 177.536425][ T5923] ? get_mm_memcg_path+0x240/0x240 [ 177.541299][ T5923] ? debug_smp_processor_id+0x17/0x20 [ 177.546523][ T5923] exc_page_fault+0x705/0x7f0 [ 177.551023][ T5923] asm_exc_page_fault+0x27/0x30 [ 177.555702][ T5923] RIP: 0033:0x7f0e7d54b366 [ 177.559980][ T5923] Code: 00 00 00 00 be 08 00 00 00 48 89 df 49 83 c6 01 e8 af ad fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <48> 89 6a f8 45 39 e6 0f 83 7d 00 00 00 48 8b 3c 24 49 8b 6d 30 4a [ 177.579413][ T5923] RSP: 002b:00007fffe632a240 EFLAGS: 00010202 [ 177.585297][ T5923] RAX: 0000000000004008 RBX: 00007f0e7e353720 RCX: 0000000000000000 [ 177.593339][ T5923] RDX: 0000001b2ce1c000 RSI: 0000000000000008 RDI: 00007f0e7e353720 [ 177.601154][ T5923] RBP: ffffffff828bead2 R08: 00007f0e7ceed0b0 R09: 00007f0e7d810000 [ 177.608958][ T5923] R10: 00000000812ea896 R11: 0000000000000003 R12: 000000000000015e [ 177.616762][ T5923] R13: 00007f0e7d824018 R14: 0000000000000146 R15: ffffffffffffc000 [ 177.624558][ T5923] ? insn_get_modrm+0x272/0x790 [ 177.629262][ T5923] [ 177.632108][ T5923] ---[ end trace fec52175d06cfd79 ]--- [ 177.641055][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 177.641068][ T30] audit: type=1326 audit(2000000000.340:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.1.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd3361ff9 code=0x7ffc0000 [ 177.677862][ T5943] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2286'. [ 177.701767][ T30] audit: type=1326 audit(2000000000.340:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.1.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd3361ff9 code=0x7ffc0000 [ 177.746728][ T30] audit: type=1326 audit(2000000000.340:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.1.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f9cd3361ff9 code=0x7ffc0000 [ 177.791650][ T30] audit: type=1326 audit(2000000000.340:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.1.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd3361ff9 code=0x7ffc0000 [ 177.874175][ T30] audit: type=1326 audit(2000000000.340:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.1.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd3361ff9 code=0x7ffc0000 [ 177.926932][ T30] audit: type=1400 audit(2000000000.500:1996): avc: denied { unmount } for pid=3941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 177.946720][ T30] audit: type=1400 audit(2000000000.510:1997): avc: denied { setopt } for pid=5955 comm="syz.1.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.966812][ T30] audit: type=1400 audit(2000000000.510:1998): avc: denied { write } for pid=5955 comm="syz.1.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.004361][ T5966] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 178.014153][ T30] audit: type=1400 audit(2000000000.700:1999): avc: denied { load_policy } for pid=5965 comm="syz.1.2297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 178.034320][ T5966] SELinux: failed to load policy [ 178.059467][ T30] audit: type=1400 audit(2000000000.760:2000): avc: denied { read } for pid=5957 comm="syz.3.2293" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 178.061039][ T5521] udevd[5521]: setting mode of /dev/loop11 to 060660 failed: Read-only file system [ 178.142859][ T5975] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 178.152283][ T5521] udevd[5521]: setting owner of /dev/loop11 to uid=0, gid=6 failed: Read-only file system [ 178.186779][ T5975] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 178.233559][ T5658] udevd[5658]: Unable to fix SELinux security context of /dev/block/7:4: Read-only file system [ 178.411700][ T6009] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 178.453456][ T5658] udevd[5658]: setting mode of /dev/vcs23 to 020660 failed: Read-only file system [ 180.572886][ T1197] device bridge_slave_1 left promiscuous mode [ 180.578831][ T1197] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.586001][ T1197] device bridge_slave_0 left promiscuous mode [ 180.591957][ T1197] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.599543][ T1197] device veth1_macvtap left promiscuous mode [ 180.605336][ T1197] device veth0_vlan left promiscuous mode [ 183.074916][ T30] kauditd_printk_skb: 310 callbacks suppressed [ 183.074932][ T30] audit: type=1400 audit(2000000005.770:2311): avc: denied { execmem } for pid=6194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 183.100769][ T30] audit: type=1400 audit(2000000005.780:2312): avc: denied { map_create } for pid=6197 comm="syz.0.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 183.100795][ T30] audit: type=1400 audit(2000000005.780:2313): avc: denied { read write } for pid=5728 comm="syz-executor" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 183.100816][ T30] audit: type=1400 audit(2000000005.780:2314): avc: denied { map_create } for pid=6199 comm="syz.1.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 183.100835][ T30] audit: type=1400 audit(2000000005.790:2315): avc: denied { prog_load } for pid=6199 comm="syz.1.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 183.100854][ T30] audit: type=1400 audit(2000000005.790:2316): avc: denied { read write } for pid=5737 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 183.100875][ T30] audit: type=1400 audit(2000000005.790:2317): avc: denied { map_create } for pid=6201 comm="syz.3.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 183.100894][ T30] audit: type=1400 audit(2000000005.790:2318): avc: denied { prog_load } for pid=6201 comm="syz.3.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 183.100913][ T30] audit: type=1400 audit(2000000005.800:2319): avc: denied { read write } for pid=3941 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 183.111807][ T30] audit: type=1400 audit(2000000005.800:2320): avc: denied { read write } for pid=6203 comm="syz.0.2407" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 188.294713][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 188.294727][ T30] audit: type=1400 audit(2000000010.990:2382): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 188.322297][ T30] audit: type=1400 audit(2000000010.990:2383): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 188.642889][ T30] audit: type=1400 audit(2000000011.340:2384): avc: denied { execmem } for pid=6253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 188.674840][ T30] audit: type=1400 audit(2000000011.350:2385): avc: denied { map_create } for pid=6259 comm="syz.0.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 188.693825][ T30] audit: type=1400 audit(2000000011.350:2386): avc: denied { create } for pid=6254 comm="syz.1.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 188.713060][ T30] audit: type=1400 audit(2000000011.350:2387): avc: denied { create } for pid=6254 comm="syz.1.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 188.733526][ T30] audit: type=1400 audit(2000000011.350:2388): avc: denied { create } for pid=6254 comm="syz.1.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 188.753784][ T30] audit: type=1400 audit(2000000011.360:2389): avc: denied { prog_load } for pid=6259 comm="syz.0.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 188.772606][ T30] audit: type=1400 audit(2000000011.360:2390): avc: denied { prog_load } for pid=6259 comm="syz.0.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 188.791598][ T30] audit: type=1400 audit(2000000011.360:2391): avc: denied { map_create } for pid=6259 comm="syz.0.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 193.300720][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 193.300733][ T30] audit: type=1400 audit(2000000016.000:2454): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 193.328286][ T30] audit: type=1400 audit(2000000016.000:2455): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 194.301976][ T30] audit: type=1400 audit(2000000017.000:2456): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 194.323807][ T30] audit: type=1400 audit(2000000017.000:2457): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 194.915153][ T30] audit: type=1400 audit(2000000017.610:2459): avc: denied { prog_load } for pid=6305 comm="syz.3.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.938007][ T30] audit: type=1400 audit(2000000017.620:2460): avc: denied { execmem } for pid=6300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 194.957260][ T30] audit: type=1400 audit(2000000017.610:2458): avc: denied { read write } for pid=6302 comm="syz.1.2444" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 194.981221][ T30] audit: type=1400 audit(2000000017.620:2461): avc: denied { prog_load } for pid=6301 comm="syz.0.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.000076][ T30] audit: type=1400 audit(2000000017.620:2462): avc: denied { prog_load } for pid=6307 comm="syz.4.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.018910][ T30] audit: type=1400 audit(2000000017.630:2463): avc: denied { prog_load } for pid=6305 comm="syz.3.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.307148][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 198.307163][ T30] audit: type=1400 audit(2000000021.010:2484): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 198.334766][ T30] audit: type=1400 audit(2000000021.010:2485): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 198.641729][ T30] audit: type=1400 audit(2000000021.340:2486): avc: denied { execmem } for pid=6323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 198.662601][ T30] audit: type=1400 audit(2000000021.360:2487): avc: denied { map_create } for pid=6327 comm="syz.4.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.686041][ T30] audit: type=1400 audit(2000000021.360:2488): avc: denied { prog_load } for pid=6327 comm="syz.4.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.704966][ T30] audit: type=1400 audit(2000000021.360:2489): avc: denied { read write } for pid=6324 comm="syz.0.2451" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 198.728796][ T30] audit: type=1400 audit(2000000021.360:2490): avc: denied { prog_load } for pid=6325 comm="syz.1.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.747760][ T30] audit: type=1400 audit(2000000021.360:2491): avc: denied { prog_load } for pid=6325 comm="syz.1.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.767042][ T30] audit: type=1400 audit(2000000021.360:2492): avc: denied { map_create } for pid=6326 comm="syz.3.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.785947][ T30] audit: type=1400 audit(2000000021.360:2493): avc: denied { prog_load } for pid=6326 comm="syz.3.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=2 req=2379 state=1 status=67 (errno 9: Bad file descriptor) [ 200.748599][ T1197] tipc: Disabling bearer [ 200.753803][ T1197] tipc: Left network mode [ 201.626816][ T1197] device bridge_slave_1 left promiscuous mode [ 201.632776][ T1197] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.639925][ T1197] device bridge_slave_0 left promiscuous mode [ 201.645826][ T1197] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.653508][ T1197] device veth1_macvtap left promiscuous mode [ 201.659399][ T1197] device veth0_vlan left promiscuous mode [ 203.067142][ T1197] device bridge_slave_1 left promiscuous mode [ 203.073050][ T1197] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.080276][ T1197] device bridge_slave_0 left promiscuous mode [ 203.086174][ T1197] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.093815][ T1197] device bridge_slave_1 left promiscuous mode [ 203.099758][ T1197] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.106823][ T1197] device bridge_slave_0 left promiscuous mode [ 203.112710][ T1197] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.120284][ T1197] device bridge_slave_1 left promiscuous mode [ 203.126172][ T1197] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.133349][ T1197] device bridge_slave_0 left promiscuous mode [ 203.139306][ T1197] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.147073][ T1197] device veth1_macvtap left promiscuous mode [ 203.152864][ T1197] device veth0_vlan left promiscuous mode [ 203.158695][ T1197] device veth1_macvtap left promiscuous mode [ 203.164474][ T1197] device veth0_vlan left promiscuous mode [ 203.170344][ T1197] device veth1_macvtap left promiscuous mode [ 203.176126][ T1197] device veth0_vlan left promiscuous mode