last executing test programs: 8.740884336s ago: executing program 3 (id=245): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file4\x00', 0xa08c54, &(0x7f00000005c0)={[{@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@fat=@time_offset={'time_offset', 0x3d, 0x66}}, {@shortname_winnt}, {@utf8no}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0x1fb}}, {@rodir}, {@numtail}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x8b, 0x2d3, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) fallocate(r0, 0x10, 0x37eb, 0x1955) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x10) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 8.657068898s ago: executing program 3 (id=249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@jqfmt_vfsv1}, {@quota}, {@abort}, {@init_itable}, {@nodioread_nolock}]}, 0xf9, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xd) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r1, 0xa6d60000) readv(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 8.507892871s ago: executing program 1 (id=252): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x71, 0x3, 0x1, 0x5, 0x9}) socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}]}}}]}, 0x48}}, 0x0) fallocate(r1, 0x0, 0x9, 0x8ffff) read$FUSE(0xffffffffffffffff, &(0x7f0000007fc0)={0x2020}, 0x2020) r6 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000180)='ro\x00', 0x0, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x15, 0x1f, 0x143, &(0x7f0000000040)}) socket$nl_route(0x10, 0x3, 0x0) 7.533958313s ago: executing program 1 (id=253): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x268, &(0x7f0000000640)=ANY=[]) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000007c0)={0x14, &(0x7f0000000640)={0x20, 0x8, 0x2, {0x2, 0x7}}, 0x0}, 0x0) syz_usb_connect$midi(0x6, 0x0, 0x0, 0x0) 7.407393926s ago: executing program 3 (id=254): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x4800) r0 = socket$packet(0x11, 0x3, 0x300) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x4d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 5.530471077s ago: executing program 3 (id=259): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e64, @local}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 3.972104042s ago: executing program 1 (id=264): readv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000002d00)=""/4102, 0x1000}], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4640}, 0x20048040) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.971927982s ago: executing program 3 (id=265): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) close(r5) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = creat(0x0, 0xd931d3864d39dcdb) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000340)) mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x3c, r0, 0x1, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400080a}, 0x0) 3.560923451s ago: executing program 0 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x40) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) 3.548457921s ago: executing program 1 (id=270): r0 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000480)=ANY=[@ANYBLOB="1201500200000008662410804000010203010902600003010000840904000000010100000a240109000a0002010209040100"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1809}}, {0xfe, &(0x7f0000000080)=@string={0xfe, 0x3, "cdc4eb58ff7b95fe72441a88b880b568d2e1241ba1fe40c9c4a135584396d3b11dbdaabf1addecfb66be714a34c4a23eaa99a529dccb055001c01b31edc4fd0199cf052aa6ac3ad272089c9717ce36cdbcf818c74990bf1383daf33abe8f410bfb5325a0beb4ac745212444cf675bb4f9049ae057b52eec7ea1d99d54df53236d02ff7f18bfbcd5eeb683b4bc8692d07e89000133fe2ae1df49dff8e35a3bf73063c88823079d16ffd3fc980a8e5f8213b287118326b8890357ffde708d2f6c08d5b774e264f0975c19522575dd557da7a3b5d861e34de35dd75c8edfc5b7d626c4f6cd118f4e91795194afca57ae27731701616c4f1940fddccc15e"}}, {0x61, &(0x7f0000000180)=@string={0x61, 0x3, "d1dab7776ef881b5febdd9d356be50927ed52b869d539f0c4a3b2fd402dc5081ba6ef886b7934469ebbf2508514f481e0c4c9457f45583d442cdd3ff803c1a20ef31265665ebaf24c83f993306e21ba202a13860760276d927f6a8bcf00d7a"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b48, &(0x7f0000000040)) 3.488199873s ago: executing program 4 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x3c}}, 0x20040894) 3.480518583s ago: executing program 4 (id=272): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) 2.756219079s ago: executing program 3 (id=274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00000524060800052c0000000d240f015018d2994e2c1d240006241a"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) 2.68906745s ago: executing program 0 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capget(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x1c7, 0x1, 0x5, 0xffffff81, 0x8, 0x6}) syz_io_uring_setup(0x126e, &(0x7f0000000200)={0x0, 0x9b8e, 0x0, 0x80000000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000000)) 2.631669961s ago: executing program 4 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) 2.532241314s ago: executing program 0 (id=277): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000066c0)=[{&(0x7f0000005380)=""/219, 0xdb}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006580)=""/134, 0x86}, {&(0x7f0000006640)=""/126, 0x7e}], 0x6}, 0x9a9}], 0x1, 0x21, 0x0) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 2.352438118s ago: executing program 2 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001080)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) 2.344494108s ago: executing program 2 (id=280): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000081) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2.285355549s ago: executing program 2 (id=281): syz_io_uring_setup(0x46ab, 0x0, 0x0, 0x0, &(0x7f0000001180)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 2.285149469s ago: executing program 2 (id=282): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000680)={&(0x7f0000000600)="84c197d0cd02526d189f4524e3dd1f25b73d6eae750091f82ddf8272d9f02ed23d479366ad0fa50077270f4c3e95e8f31ce1e485abafe9e8719f6be64c0d81e4d48bcc1752e85887b7aeac1cf23a1839fad2f0999b244c3d0f", 0x59}, 0x1, 0x0, 0x0, 0x4000000}, 0x80a0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0xfff0) r6 = socket(0x2a, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$tipc(r6, &(0x7f00000004c0)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x43, 0x4}, 0x4}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000000440)="b80871079cecfa6c0054b45e90cfd761eec7f88a99bdf89704fd95838bc91b7a240849d74fa6cb7d08127d3d199fcee716f9a050e2e9808759dac8708b06d6a3987969fa194dd2058432dbbcc1d1404ccfd45c72d67312bdd1a435a86df71859367378dec79c08b7841fa29feff6082404d6d5a036", 0x75, 0x40010}, 0x20000000) 2.285049239s ago: executing program 2 (id=283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x38}, @empty, [0x1ff0001ff, 0xff000000, 0x0, 0xff], [0xff, 0x0, 0xffffffff, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {0xff}, {}, 0x29, 0x6, 0x7}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x3], 0x2, 0x10, 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7, 0xf2f0, 0x4, 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 2.274680479s ago: executing program 2 (id=284): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048894) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x40, "20854e8c4b94a5715f8227fd4236ff070000000000001c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e3470c50febcb7566c61ba4ffbb8c84e5b"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20012900000005a8"], 0x0}) 1.753651311s ago: executing program 4 (id=285): connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@empty, @empty, 0x18, 0x2}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.692171213s ago: executing program 4 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x9d1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12040) 1.692051262s ago: executing program 0 (id=287): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000000)=ANY=[], 0x8, 0x1e4, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x14927e, 0x20) lseek(r0, 0x0, 0x4) 1.501620576s ago: executing program 0 (id=288): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000000c0)=@filename='./file0\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_procfs(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 627.877886ms ago: executing program 4 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gre0\x00'}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, {0x20000010304, @multicast}, 0x12, {0x2, 0x4e22, @rand_addr=0x64010102}}) 384.217171ms ago: executing program 0 (id=290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000005a80)=[{&(0x7f0000000440)="edd5", 0x2}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 72.157418ms ago: executing program 1 (id=291): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) r2 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x7e) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000023c0)={&(0x7f0000002d00)=""/4096, 0x1000}) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002c80)={0x80, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x24060004) 0s ago: executing program 1 (id=292): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {@usrjquota}, {@nouser_xattr}, {@norecovery}, {@dioread_nolock}]}, 0x82, 0x4c4, &(0x7f0000000d00)="$eJzs3E9oHNUfAPDvTP70f5Pfz6ptLRotYvBP0qRVK3hRFDxUFPRQKwgxSUtt2kgTwZTSRJHqQZCCntWj4NWLNy+ingTBk96lULSXVhFZmZ2ZZjfNNtuYf81+PrDJe/tmdt53377dN/PNJoCW1ZP9SCK2RsQvEdGVV+s36Ml/Xb18dvjPy2eHk6hUXvo9qW535fLZ4XLTcr8tRaU3jUjfS4qD1JuYOnNiaGxs9HRR7588+Wb/xNSZR46fHDo2emz01ODBgwf2Dzz+2OCjSxJnFteV3efG9+x67pULzw8fvvD6919m/d1atNfGsSid19/VkwX+R6Vqbtv9sek/HW6t2RbxRFlO2le3LzSvLSKy4erI5n+lUpmuaeuKZ99dYPcty9w9YBlln00b5rm/+FycqTSU3LAVuBUksehdNy1+V2D1lZ/32flveVvB5cequ/RUfgKUxX21uOUt7ZEW23Tk57fLoiciDs/89Wl2i6W4DgEAsIAPhz85FA9fW/990HXyjWL9kcYdNdttL3Io3f/kWZ7/R8RtEbEjIm6PqG57Z0TsbOagNQmCuamh69c/6cXFxtaMbP33ZJHbql//lau/6G4ratkasDs6kqPHx0b3Fc9Jb3RsyOoDNzjGN8/89FGjttr1X3bLjl+uBYt+XGyfc4FuZGhyqLooXQKX3onY3R5/VyqVIv6viviTKEcpG/FdEbH75h56e/XndMTxB7/Y02ijheOvf7g6S5Bnqnwe8UA+/jNRN/6zWdAkz09mxTI/2bltNj/ZvzHGRvf1l6+K6/3w4/kXGx2/+fiXRzb+m+tf/0XLZ1NFofvV2nztRDTIXG5teIzzv77f8Jxmsa//zuTl6vtRmXZ9e2hy8vRARGdyqFqvu39wdt+yXm6fxd+7N2sp4y/3TKvvcVGM/10RsafIl90dEfcUfb83Iu6LiL0No4/47ul8v2bjn+96/HLJ4h+pGf8k5r7+d57Lf5fjP3XThbYT337d6PjV+F/bmFcajv+Baqm3uKf6/reAZju4yKcNAAAAbilp9cpNkvZdK6dpX1/+h707YnM6Nj4x+dDR8bdOjeRXeLqjIy2vdHXVXA8dSGaKR8zrg9W22fb9EfG/iPi4Lar1vuHxsZFVjh1a3ZYG8z/zW6OLlsD6MV8ebXCeL7QB68/c+Z/WV6dfWMnOACvK97WhdS0w/9OV6gew8mrm/8H19W9pgIXM9/k/PacuFwDrk/N/aF3mP7Qu8x9a15z53xY/r1ZPgBW0iK/zr63Ckf1rohutV4h0TXSjqcKN/h9E+4rOgiNr4NlorrDa70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABL498AAAD//zN84Kc=") chdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0xa00}]) kernel console output (not intermixed with test programs): m_t tclass=process permissive=1 [ 14.837456][ T30] audit: type=1400 audit(1784226704.667:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. [ 21.846608][ T30] audit: type=1400 audit(1784226711.697:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.847683][ T277] cgroup: Unknown subsys name 'net' [ 21.869292][ T30] audit: type=1400 audit(1784226711.697:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.896542][ T30] audit: type=1400 audit(1784226711.727:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.896726][ T277] cgroup: Unknown subsys name 'devices' [ 22.014251][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.019876][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.156158][ T30] audit: type=1400 audit(1784226712.007:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.179385][ T30] audit: type=1400 audit(1784226712.007:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.204095][ T30] audit: type=1400 audit(1784226712.007:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.233413][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.242140][ T30] audit: type=1400 audit(1784226712.087:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.267884][ T30] audit: type=1400 audit(1784226712.087:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.268324][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.293452][ T30] audit: type=1400 audit(1784226712.117:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.327564][ T30] audit: type=1400 audit(1784226712.117:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.805970][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.813065][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.820490][ T285] device bridge_slave_0 entered promiscuous mode [ 22.853836][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.860889][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.868409][ T285] device bridge_slave_1 entered promiscuous mode [ 22.912043][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.919122][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.926563][ T286] device bridge_slave_0 entered promiscuous mode [ 22.935065][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.942105][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.949558][ T286] device bridge_slave_1 entered promiscuous mode [ 22.993182][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.000230][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.007631][ T287] device bridge_slave_0 entered promiscuous mode [ 23.016910][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.023971][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.031360][ T287] device bridge_slave_1 entered promiscuous mode [ 23.093352][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.100392][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.107743][ T288] device bridge_slave_0 entered promiscuous mode [ 23.114331][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.121354][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.128695][ T289] device bridge_slave_0 entered promiscuous mode [ 23.137048][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.144115][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.151367][ T289] device bridge_slave_1 entered promiscuous mode [ 23.163342][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.170385][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.177811][ T288] device bridge_slave_1 entered promiscuous mode [ 23.254142][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.261194][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.268496][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.275527][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.314175][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.321228][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.328517][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.335562][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.348919][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.355984][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.363251][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.370260][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.402319][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.409382][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.416648][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.423669][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.442785][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.449825][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.457095][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.464128][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.477783][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.485272][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.492505][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.499936][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.507235][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.514604][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.521759][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.528952][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.536094][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.543251][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.550939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.558373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.576851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.585050][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.592052][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.599403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.607671][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.614719][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.645093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.653511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.661631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.669558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.677583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.685690][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.692707][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.699973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.708145][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.715163][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.722430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.730633][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.737675][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.745142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.753314][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.760339][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.767835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.775774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.783717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.800514][ T285] device veth0_vlan entered promiscuous mode [ 23.814206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.822675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.830540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.838196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.846305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.867257][ T286] device veth0_vlan entered promiscuous mode [ 23.873520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.880965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.888476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.897009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.905384][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.912406][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.919878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.927400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.934912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.943115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.951137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.959456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.967553][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.974574][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.981938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.990286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.998978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.006888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.015034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.022412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.031217][ T285] device veth1_macvtap entered promiscuous mode [ 24.041443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.049257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.057561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.065978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.074138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.093602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.101918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.110252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.118263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.126718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.134964][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.141970][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.149384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.157599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.165731][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.172747][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.180054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.188295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.196158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.204162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.212026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.229839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.238002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.246437][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.254767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.263115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.271133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.279775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.287773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.297797][ T289] device veth0_vlan entered promiscuous mode [ 24.306453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.314161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.314295][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 24.321593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.338023][ T286] device veth1_macvtap entered promiscuous mode [ 24.347511][ T287] device veth0_vlan entered promiscuous mode [ 24.353867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.361618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.369085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.388634][ T288] device veth0_vlan entered promiscuous mode [ 24.401115][ T289] device veth1_macvtap entered promiscuous mode [ 24.408168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.416512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.425699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.434128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.442367][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.450740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.459238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.467767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.475831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.483921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.492126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.504875][ T287] device veth1_macvtap entered promiscuous mode [ 24.523548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.531304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.539184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.547462][ T308] loop3: detected capacity change from 0 to 40427 [ 24.547681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.562596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.571238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.579554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.603819][ T288] device veth1_macvtap entered promiscuous mode [ 24.610573][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.621721][ T308] F2FS-fs (loop3): Unrecognized mount option "vI|t_injection=00000000000000000256" or missing value [ 24.622281][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.635731][ T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.645241][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.665906][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.674373][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.699264][ T316] loop1: detected capacity change from 0 to 512 [ 24.731488][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.742264][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.751535][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.760915][ T316] ======================================================= [ 24.760915][ T316] WARNING: The mand mount option has been deprecated and [ 24.760915][ T316] and is ignored by this kernel. Remove the mand [ 24.760915][ T316] option from the mount to silence this warning. [ 24.760915][ T316] ======================================================= [ 24.792147][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.870571][ T319] loop3: detected capacity change from 0 to 16 [ 26.160631][ T327] futex_wake_op: syz.2.3 tries to shift op by 144; fix this program [ 26.286335][ T327] loop2: detected capacity change from 0 to 256 [ 26.424516][ T319] erofs: (device loop3): mounted with root inode @ nid 36. [ 26.475235][ T327] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 26.494633][ T327] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 26.506667][ T327] overlayfs: filesystem on './file0' not supported [ 26.514580][ T327] overlayfs: filesystem on './file0' not supported [ 26.526125][ T327] attempt to access beyond end of device [ 26.526125][ T327] loop2: rw=0, want=304, limit=256 [ 26.612112][ T316] EXT4-fs error (device loop1): ext4_fill_super:4863: inode #2: comm syz.1.2: inode has both inline data and extents flags [ 26.628336][ T316] EXT4-fs (loop1): get root inode failed [ 26.634197][ T316] EXT4-fs (loop1): mount failed [ 26.998053][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 26.998065][ T30] audit: type=1400 audit(1784226716.847:130): avc: denied { bpf } for pid=346 comm="syz.2.8" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.061376][ T338] loop4: detected capacity change from 0 to 512 [ 27.080003][ T30] audit: type=1400 audit(1784226716.927:131): avc: denied { map_read map_write } for pid=346 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.128953][ T30] audit: type=1400 audit(1784226716.977:132): avc: denied { bind } for pid=346 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.148094][ T30] audit: type=1400 audit(1784226716.977:133): avc: denied { name_bind } for pid=346 comm="syz.2.8" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 27.180088][ T30] audit: type=1400 audit(1784226716.977:134): avc: denied { node_bind } for pid=346 comm="syz.2.8" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 27.202860][ T30] audit: type=1400 audit(1784226716.977:135): avc: denied { connect } for pid=346 comm="syz.2.8" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.235011][ T338] EXT4-fs error (device loop4): ext4_fill_super:4863: inode #2: comm syz.4.6: inode has both inline data and extents flags [ 27.248463][ T338] EXT4-fs (loop4): get root inode failed [ 27.254879][ T30] audit: type=1400 audit(1784226716.977:136): avc: denied { write } for pid=346 comm="syz.2.8" path="socket:[15783]" dev="sockfs" ino=15783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.278820][ T338] EXT4-fs (loop4): mount failed [ 27.285287][ T30] audit: type=1400 audit(1784226717.107:137): avc: denied { write } for pid=312 comm="syz.1.2" path="socket:[16476]" dev="sockfs" ino=16476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.597297][ T30] audit: type=1400 audit(1784226717.447:138): avc: denied { perfmon } for pid=346 comm="syz.2.8" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.642043][ T356] Disabled LAPIC found during irq injection [ 27.682998][ T354] loop3: detected capacity change from 0 to 512 [ 27.822176][ T354] EXT4-fs error (device loop3): ext4_fill_super:4863: inode #2: comm syz.3.9: inode has both inline data and extents flags [ 27.876542][ T354] EXT4-fs (loop3): get root inode failed [ 27.878316][ T30] audit: type=1400 audit(1784226717.727:139): avc: denied { read write } for pid=361 comm="syz.1.11" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.882208][ T354] EXT4-fs (loop3): mount failed [ 28.132445][ T358] loop2: detected capacity change from 0 to 40427 [ 28.159495][ T358] F2FS-fs (loop2): Unrecognized mount option "vI|t_injection=00000000000000000256" or missing value [ 30.396666][ T370] loop2: detected capacity change from 0 to 16 [ 30.639896][ T371] futex_wake_op: syz.4.12 tries to shift op by 144; fix this program [ 30.668900][ T371] loop4: detected capacity change from 0 to 256 [ 30.749556][ T371] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 30.763039][ T370] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.770537][ T293] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.809576][ T371] overlayfs: filesystem on './file0' not supported [ 30.851699][ T371] overlayfs: filesystem on './file0' not supported [ 30.866043][ T371] attempt to access beyond end of device [ 30.866043][ T371] loop4: rw=0, want=304, limit=256 [ 32.103467][ T376] sched: RT throttling activated [ 32.307147][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 32.307160][ T30] audit: type=1400 audit(1784226722.157:142): avc: denied { ioctl } for pid=386 comm="syz.3.18" path="socket:[16548]" dev="sockfs" ino=16548 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.310998][ T385] loop4: detected capacity change from 0 to 256 [ 32.871133][ T393] futex_wake_op: syz.1.17 tries to shift op by 144; fix this program [ 32.917967][ T393] loop1: detected capacity change from 0 to 256 [ 32.926841][ T395] futex_wake_op: syz.2.16 tries to shift op by 144; fix this program [ 32.977094][ T395] loop2: detected capacity change from 0 to 256 [ 33.005607][ T385] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.029784][ T385] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.057794][ T395] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 33.110356][ T395] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.132749][ T30] audit: type=1400 audit(1784226722.957:143): avc: denied { mount } for pid=382 comm="syz.2.16" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.158036][ T393] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 33.167660][ T30] audit: type=1400 audit(1784226722.957:144): avc: denied { mounton } for pid=382 comm="syz.2.16" path="/3/file1/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.174853][ T398] loop3: detected capacity change from 0 to 512 [ 33.202086][ T30] audit: type=1400 audit(1784226722.977:145): avc: denied { read } for pid=382 comm="syz.2.16" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.223840][ T394] attempt to access beyond end of device [ 33.223840][ T394] loop2: rw=0, want=304, limit=256 [ 33.228722][ T30] audit: type=1400 audit(1784226722.977:146): avc: denied { open } for pid=382 comm="syz.2.16" path="/3/file1/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.258802][ T30] audit: type=1400 audit(1784226723.007:147): avc: denied { search } for pid=382 comm="syz.2.16" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.280372][ T30] audit: type=1400 audit(1784226723.007:148): avc: denied { getattr } for pid=382 comm="syz.2.16" name="uprobe_profile" dev="tracefs" ino=13132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 33.303527][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.304465][ T30] audit: type=1400 audit(1784226723.007:149): avc: denied { mount } for pid=384 comm="syz.4.15" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.332891][ T393] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.340837][ T30] audit: type=1400 audit(1784226723.047:150): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.372779][ T30] audit: type=1400 audit(1784226723.117:151): avc: denied { mount } for pid=387 comm="syz.1.17" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.405202][ T393] attempt to access beyond end of device [ 33.405202][ T393] loop1: rw=0, want=304, limit=256 [ 33.423577][ T398] EXT4-fs error (device loop3): ext4_fill_super:4863: inode #2: comm syz.3.20: inode has both inline data and extents flags [ 33.436776][ T398] EXT4-fs (loop3): get root inode failed [ 33.442402][ T398] EXT4-fs (loop3): mount failed [ 33.458719][ T404] loop2: detected capacity change from 0 to 4096 [ 33.492551][ T407] loop4: detected capacity change from 0 to 256 [ 33.500304][ T404] EXT4-fs (loop2): Test dummy encryption mode enabled [ 33.507896][ T404] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 33.610456][ T407] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.633332][ T407] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.698584][ T409] loop1: detected capacity change from 0 to 512 [ 33.722764][ T20] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.748277][ T20] usb 1-1: config 0 interface 0 has no altsetting 0 [ 33.767302][ T20] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 33.782313][ T413] loop4: detected capacity change from 0 to 4096 [ 33.789572][ T409] EXT4-fs error (device loop1): ext4_fill_super:4863: inode #2: comm syz.1.24: inode has both inline data and extents flags [ 33.794924][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.828711][ T409] EXT4-fs (loop1): get root inode failed [ 33.830063][ T413] EXT4-fs (loop4): Test dummy encryption mode enabled [ 33.842365][ T409] EXT4-fs (loop1): mount failed [ 33.848016][ T413] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 33.904155][ T404] F2FS-fs (loop2): invalid crc value [ 33.915161][ T20] usb 1-1: config 0 descriptor?? [ 33.929217][ T404] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 33.967263][ T404] F2FS-fs (loop2): Start checkpoint disabled! [ 33.974071][ T404] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 34.033190][ T8] attempt to access beyond end of device [ 34.033190][ T8] loop2: rw=2049, want=45104, limit=40427 [ 34.154538][ T422] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.27: iget: bad i_size value: 38620345925642 [ 34.167574][ T422] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.27: couldn't read orphan inode 15 (err -117) [ 34.179639][ T422] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 34.449919][ T420] Disabled LAPIC found during irq injection [ 34.457918][ T20] wacom 0003:056A:003F.0001: unknown main item tag 0x2 [ 34.467547][ T20] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.0-1/input0 [ 34.498792][ T422] xt_hashlimit: size too large, truncated to 1048576 [ 34.603330][ T430] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.629758][ T430] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.693453][ T431] EXT4-fs error (device loop4): ext4_fill_super:4863: inode #2: comm syz.4.29: inode has both inline data and extents flags [ 34.709674][ T426] usb 1-1: USB disconnect, device number 2 [ 34.722214][ T438] fido_id[438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 34.742309][ T431] EXT4-fs (loop4): get root inode failed [ 34.749937][ T431] EXT4-fs (loop4): mount failed [ 34.851869][ T444] futex_wake_op: syz.2.31 tries to shift op by 144; fix this program [ 34.941943][ T444] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 34.991245][ T444] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 35.008724][ T444] attempt to access beyond end of device [ 35.008724][ T444] loop2: rw=0, want=304, limit=256 [ 35.202382][ T436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 35.518734][ T445] Disabled LAPIC found during irq injection [ 35.574309][ T448] set_capacity_and_notify: 5 callbacks suppressed [ 35.574324][ T448] loop0: detected capacity change from 0 to 512 [ 35.642711][ T426] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 35.719642][ T451] loop3: detected capacity change from 0 to 40427 [ 35.719794][ T448] EXT4-fs error (device loop0): ext4_fill_super:4863: inode #2: comm syz.0.32: inode has both inline data and extents flags [ 35.739938][ T448] EXT4-fs (loop0): get root inode failed [ 35.745761][ T448] EXT4-fs (loop0): mount failed [ 35.751245][ T456] loop4: detected capacity change from 0 to 256 [ 35.813012][ T459] futex_wake_op: syz.2.34 tries to shift op by 144; fix this program [ 35.839366][ T459] loop2: detected capacity change from 0 to 256 [ 35.875776][ T451] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 35.925395][ T451] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 35.951056][ T459] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 36.000750][ T459] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 36.051731][ T456] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.082775][ T426] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.087925][ T451] F2FS-fs (loop3): invalid crc value [ 36.099214][ T426] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.115427][ T456] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.165758][ T426] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 36.194852][ T451] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 36.219712][ T451] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 36.226847][ T451] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 36.341425][ T467] Disabled LAPIC found during irq injection [ 36.365063][ T466] loop4: detected capacity change from 0 to 512 [ 36.383186][ T426] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 36.404888][ T426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.484721][ T466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.496100][ T466] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.501163][ T426] usb 2-1: Product: syz [ 36.560342][ T426] usb 2-1: Manufacturer: syz [ 36.581482][ T426] usb 2-1: SerialNumber: syz [ 36.593893][ T466] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.36: corrupted inode contents [ 36.639839][ T466] EXT4-fs error (device loop4): ext4_dirty_inode:6108: inode #2: comm syz.4.36: mark_inode_dirty error [ 36.654233][ T474] loop2: detected capacity change from 0 to 512 [ 36.661428][ T466] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.36: corrupted inode contents [ 36.700420][ T466] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.36: mark_inode_dirty error [ 36.728177][ T474] EXT4-fs error (device loop2): ext4_fill_super:4863: inode #2: comm syz.2.38: inode has both inline data and extents flags [ 36.742550][ T474] EXT4-fs (loop2): get root inode failed [ 36.748734][ T474] EXT4-fs (loop2): mount failed [ 36.937960][ T485] futex_wake_op: syz.4.39 tries to shift op by 144; fix this program [ 36.993272][ T485] loop4: detected capacity change from 0 to 256 [ 37.175923][ T486] Disabled LAPIC found during irq injection [ 37.561141][ T485] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 37.612402][ T485] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 37.767731][ T450] syz.3.33 (450) used greatest stack depth: 20832 bytes left [ 37.788296][ T490] process 'syz.1.41' launched './file0' with NULL argv: empty string added [ 37.800089][ T490] loop1: detected capacity change from 0 to 512 [ 37.808826][ T285] attempt to access beyond end of device [ 37.808826][ T285] loop3: rw=2049, want=45104, limit=40427 [ 37.811277][ T488] loop2: detected capacity change from 0 to 256 [ 37.853196][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 37.853210][ T30] audit: type=1400 audit(1784226727.707:182): avc: denied { mounton } for pid=489 comm="syz.1.41" path="/6/file0" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 37.892977][ T488] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.909895][ T426] usb 2-1: Can't get UAC3 power state for id 10 [ 37.946307][ T490] EXT4-fs error (device loop1): __ext4_iget:4950: inode #11: block 1: comm syz.1.41: invalid block [ 37.963246][ T488] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.977036][ T490] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.41: couldn't read orphan inode 11 (err -117) [ 37.994961][ T426] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 38.026085][ T490] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.027636][ T426] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 38.080665][ T30] audit: type=1400 audit(1784226727.927:183): avc: denied { unlink } for pid=491 comm="syz.0.42" name="#1" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.114882][ T500] loop4: detected capacity change from 0 to 512 [ 38.127650][ T426] usb 2-1: USB disconnect, device number 3 [ 38.842299][ T30] audit: type=1400 audit(1784226727.927:184): avc: denied { create } for pid=491 comm="syz.0.42" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.895628][ T30] audit: type=1400 audit(1784226727.927:185): avc: denied { link } for pid=491 comm="syz.0.42" name="#3" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.917430][ T30] audit: type=1400 audit(1784226727.927:186): avc: denied { rename } for pid=491 comm="syz.0.42" name="#4" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.933761][ T490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 38.940117][ T30] audit: type=1400 audit(1784226727.977:187): avc: denied { setopt } for pid=501 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.979205][ T500] EXT4-fs error (device loop4): ext4_fill_super:4863: inode #2: comm syz.4.44: inode has both inline data and extents flags [ 38.999493][ T30] audit: type=1400 audit(1784226727.987:188): avc: denied { create } for pid=501 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.005559][ T500] EXT4-fs (loop4): get root inode failed [ 39.025518][ T507] EXT4-fs error (device loop3): ext4_fill_super:4863: inode #2: comm syz.3.43: inode has both inline data and extents flags [ 39.026532][ T500] EXT4-fs (loop4): mount failed [ 39.052307][ T30] audit: type=1400 audit(1784226728.727:189): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.074014][ T516] futex_wake_op: syz.0.46 tries to shift op by 144; fix this program [ 39.101989][ T507] EXT4-fs (loop3): get root inode failed [ 39.108408][ T507] EXT4-fs (loop3): mount failed [ 39.131689][ T516] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 39.183192][ T516] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 39.352549][ T518] EXT4-fs error (device loop2): __ext4_iget:4950: inode #11: block 1: comm syz.2.47: invalid block [ 39.363620][ T518] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.47: couldn't read orphan inode 11 (err -117) [ 39.375797][ T518] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.390298][ T30] audit: type=1400 audit(1784226729.237:190): avc: denied { setattr } for pid=517 comm="syz.2.47" path="/11/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.506393][ T520] EXT4-fs error (device loop1): ext4_fill_super:4863: inode #2: comm syz.1.48: inode has both inline data and extents flags [ 39.519725][ T520] EXT4-fs (loop1): get root inode failed [ 39.525514][ T520] EXT4-fs (loop1): mount failed [ 39.651689][ T530] futex_wake_op: syz.2.49 tries to shift op by 144; fix this program [ 40.228314][ T530] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 40.514467][ T527] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 40.531306][ T533] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.566892][ T533] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.774870][ T545] set_capacity_and_notify: 6 callbacks suppressed [ 40.774883][ T545] loop2: detected capacity change from 0 to 256 [ 40.807170][ T30] audit: type=1400 audit(1784226730.657:191): avc: denied { ioctl } for pid=541 comm="syz.1.54" path="socket:[17618]" dev="sockfs" ino=17618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.852140][ T546] loop3: detected capacity change from 0 to 512 [ 40.855471][ T550] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 40.883121][ T540] loop4: detected capacity change from 0 to 256 [ 40.896103][ T552] loop1: detected capacity change from 0 to 256 [ 40.928110][ T546] EXT4-fs error (device loop3): ext4_fill_super:4863: inode #2: comm syz.3.56: inode has both inline data and extents flags [ 40.951851][ T545] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.963975][ T546] EXT4-fs (loop3): get root inode failed [ 40.973233][ T552] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.999678][ T546] EXT4-fs (loop3): mount failed [ 41.007981][ T545] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.052863][ T540] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.065572][ T552] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.169494][ T540] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.628999][ T566] xt_hashlimit: size too large, truncated to 1048576 [ 41.687575][ T569] futex_wake_op: syz.4.60 tries to shift op by 144; fix this program [ 41.711252][ T569] loop4: detected capacity change from 0 to 256 [ 41.754404][ T569] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 41.806487][ T569] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 41.896846][ T63] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 41.910688][ T569] attempt to access beyond end of device [ 41.910688][ T569] loop4: rw=0, want=304, limit=256 [ 41.998177][ T572] loop3: detected capacity change from 0 to 4096 [ 42.033451][ T572] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 42.053013][ T572] EXT4-fs (loop3): Test dummy encryption mode enabled [ 42.072944][ T572] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,init_itable=0x0000000000000001,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 42.099475][ T570] loop0: detected capacity change from 0 to 256 [ 42.175266][ T572] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 42.208307][ T574] loop1: detected capacity change from 0 to 40427 [ 42.220826][ T574] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 42.228671][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 42.230900][ T574] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 42.249839][ T574] F2FS-fs (loop1): invalid crc value [ 42.256377][ T574] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 42.285166][ T574] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 42.296347][ T574] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.321630][ T586] xt_hashlimit: size too large, truncated to 1048576 [ 42.352750][ T63] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 42.362446][ T588] tipc: Started in network mode [ 42.367949][ T588] tipc: Node identity 06997ab5b7d2, cluster identity 4711 [ 42.375213][ T588] tipc: Enabled bearer , priority 0 [ 42.385996][ T589] loop0: detected capacity change from 0 to 1024 [ 42.409971][ T588] device syzkaller0 entered promiscuous mode [ 42.443012][ T587] tipc: Resetting bearer [ 42.477687][ T587] tipc: Disabling bearer [ 42.496900][ T589] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,mb_optimize_scan=0x0000000000000000,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x000000000000001f,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,errors=continue. Quota mode: none. [ 42.542734][ T63] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 42.592828][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.612026][ T63] usb 3-1: Product: syz [ 42.619577][ T586] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.64: bg 0: block 153: padding at end of block bitmap is not set [ 42.631250][ T63] usb 3-1: Manufacturer: syz [ 42.647684][ T63] usb 3-1: SerialNumber: syz [ 42.664722][ T63] usb 3-1: config 0 descriptor?? [ 42.707811][ T598] futex_wake_op: syz.3.67 tries to shift op by 144; fix this program [ 42.725373][ T598] loop3: detected capacity change from 0 to 256 [ 42.735028][ T63] usb 3-1: bad CDC descriptors [ 42.742070][ T63] usb 3-1: unsupported MDLM descriptors [ 42.801500][ T598] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 42.848883][ T598] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 42.956399][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 42.956412][ T30] audit: type=1400 audit(1784226732.807:196): avc: denied { create } for pid=559 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.970582][ T560] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 42.982043][ T30] audit: type=1400 audit(1784226732.817:197): avc: denied { create } for pid=559 comm="syz.2.58" dev="anon_inodefs" ino=17746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.016872][ T598] attempt to access beyond end of device [ 43.016872][ T598] loop3: rw=0, want=304, limit=256 [ 43.024755][ T30] audit: type=1400 audit(1784226732.817:198): avc: denied { ioctl } for pid=559 comm="syz.2.58" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17746 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.055272][ T30] audit: type=1400 audit(1784226732.817:199): avc: denied { bind } for pid=559 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.080127][ T30] audit: type=1400 audit(1784226732.817:200): avc: denied { write } for pid=559 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.099472][ T30] audit: type=1400 audit(1784226732.917:201): avc: denied { read } for pid=559 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.099539][ T600] exFAT-fs (loop0): bogus fat length [ 43.119270][ T574] attempt to access beyond end of device [ 43.119270][ T574] loop1: rw=10241, want=45104, limit=40427 [ 43.127305][ T600] exFAT-fs (loop0): failed to read boot sector [ 43.135552][ T30] audit: type=1400 audit(1784226732.977:202): avc: denied { execute } for pid=559 comm="syz.2.58" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.141823][ T600] exFAT-fs (loop0): failed to recognize exfat type [ 43.166214][ T574] attempt to access beyond end of device [ 43.166214][ T574] loop1: rw=2049, want=77952, limit=40427 [ 43.179952][ T30] audit: type=1400 audit(1784226732.977:203): avc: denied { execute_no_trans } for pid=559 comm="syz.2.58" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.180362][ T574] attempt to access beyond end of device [ 43.180362][ T574] loop1: rw=2049, want=45104, limit=40427 [ 43.235672][ T286] attempt to access beyond end of device [ 43.235672][ T286] loop1: rw=2049, want=45120, limit=40427 [ 43.278294][ T600] xt_hashlimit: size too large, truncated to 1048576 [ 43.367271][ T605] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.384413][ T605] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.676798][ T609] EXT4-fs (loop4): Test dummy encryption mode enabled [ 43.691441][ T615] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 43.739495][ T615] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 43.845530][ T614] attempt to access beyond end of device [ 43.845530][ T614] loop1: rw=0, want=304, limit=256 [ 43.856876][ T609] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 43.896428][ T613] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.909422][ T603] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 43.919974][ T603] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 43.937504][ T603] F2FS-fs (loop0): invalid crc value [ 43.945976][ T603] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 43.957222][ T613] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.034194][ T623] futex_wake_op: syz.4.74 tries to shift op by 144; fix this program [ 44.143406][ T623] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 44.172998][ T623] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.228387][ T623] attempt to access beyond end of device [ 44.228387][ T623] loop4: rw=0, want=304, limit=256 [ 44.291200][ T603] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 44.304549][ T603] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.369491][ T600] attempt to access beyond end of device [ 44.369491][ T600] loop0: rw=10241, want=45104, limit=40427 [ 44.382311][ T30] audit: type=1400 audit(1784226734.237:204): avc: denied { listen } for pid=599 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 44.549701][ T63] usb 3-1: USB disconnect, device number 2 [ 44.564020][ T629] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.576767][ T629] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.262988][ T287] attempt to access beyond end of device [ 45.262988][ T287] loop0: rw=2049, want=45112, limit=40427 [ 45.325150][ T30] audit: type=1400 audit(1784226735.177:205): avc: denied { append } for pid=634 comm="syz.2.78" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.445047][ T627] F2FS-fs (loop1): Unrecognized mount option "vI|t_injection=00000000000000000256" or missing value [ 48.778300][ T646] set_capacity_and_notify: 10 callbacks suppressed [ 48.778324][ T646] loop1: detected capacity change from 0 to 16 [ 48.792149][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 48.792433][ T30] audit: type=1400 audit(1784226738.607:207): avc: denied { read write } for pid=638 comm="syz.2.81" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 48.856851][ T646] erofs: (device loop1): mounted with root inode @ nid 36. [ 48.865273][ T646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.872476][ T646] IPv6: NLM_F_CREATE should be set when creating new route [ 48.879696][ T646] IPv6: NLM_F_CREATE should be set when creating new route [ 48.913717][ T30] audit: type=1400 audit(1784226738.607:208): avc: denied { open } for pid=638 comm="syz.2.81" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 49.075244][ T654] loop3: detected capacity change from 0 to 256 [ 49.165670][ T663] loop4: detected capacity change from 0 to 512 [ 49.176320][ T654] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.197227][ T662] tipc: Started in network mode [ 49.230404][ T666] loop1: detected capacity change from 0 to 256 [ 49.237278][ T662] tipc: Node identity f638505d0d27, cluster identity 4711 [ 49.274164][ T662] tipc: Enabled bearer , priority 0 [ 49.283897][ T654] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.300025][ T666] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 49.302579][ T667] device syzkaller0 entered promiscuous mode [ 49.335598][ T663] EXT4-fs error (device loop4): ext4_fill_super:4863: inode #2: comm syz.4.83: inode has both inline data and extents flags [ 49.338058][ T30] audit: type=1400 audit(1784226739.187:209): avc: denied { append } for pid=665 comm="syz.1.87" name="file2" dev="loop1" ino=1048729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.349085][ T663] EXT4-fs (loop4): get root inode failed [ 49.376965][ T661] tipc: Resetting bearer [ 49.400687][ T673] futex_wake_op: syz.2.88 tries to shift op by 144; fix this program [ 49.419665][ T673] loop2: detected capacity change from 0 to 256 [ 49.430463][ T663] EXT4-fs (loop4): mount failed [ 49.564646][ T673] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 49.591177][ T673] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 49.644247][ T673] attempt to access beyond end of device [ 49.644247][ T673] loop2: rw=0, want=304, limit=256 [ 49.679161][ T661] tipc: Disabling bearer [ 49.710997][ T677] loop1: detected capacity change from 0 to 256 [ 49.952491][ T677] exFAT-fs (loop1): bogus fat length [ 49.957889][ T677] exFAT-fs (loop1): failed to read boot sector [ 49.964349][ T677] exFAT-fs (loop1): failed to recognize exfat type [ 50.055378][ T677] xt_hashlimit: size too large, truncated to 1048576 [ 50.603899][ T684] loop1: detected capacity change from 0 to 40427 [ 50.613281][ T684] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 50.615532][ T696] overlayfs: failed to resolve './file1': -2 [ 50.630233][ T684] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 50.664363][ T706] loop3: detected capacity change from 0 to 256 [ 50.682251][ T708] loop4: detected capacity change from 0 to 256 [ 50.694030][ T684] F2FS-fs (loop1): invalid crc value [ 50.743498][ T684] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 50.759363][ T706] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.764442][ T708] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 50.787171][ T691] loop0: detected capacity change from 0 to 40427 [ 50.800000][ T706] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.816050][ T691] F2FS-fs (loop0): Unrecognized mount option "vI|t_injection=00000000000000000256" or missing value [ 50.938698][ T684] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 50.946043][ T684] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 50.970446][ T677] attempt to access beyond end of device [ 50.970446][ T677] loop1: rw=10241, want=45104, limit=40427 [ 51.105711][ T718] erofs: (device loop0): mounted with root inode @ nid 36. [ 51.122293][ T718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.129531][ T718] IPv6: NLM_F_CREATE should be set when creating new route [ 51.136747][ T718] IPv6: NLM_F_CREATE should be set when creating new route [ 51.372944][ T286] attempt to access beyond end of device [ 51.372944][ T286] loop1: rw=2049, want=45112, limit=40427 [ 51.635158][ T729] futex_wake_op: syz.4.103 tries to shift op by 144; fix this program [ 53.783125][ T730] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.796064][ T730] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.823418][ T729] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 53.850891][ T729] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 53.901531][ T729] attempt to access beyond end of device [ 53.901531][ T729] loop4: rw=0, want=304, limit=256 [ 54.329664][ T743] set_capacity_and_notify: 3 callbacks suppressed [ 54.329678][ T743] loop3: detected capacity change from 0 to 256 [ 54.383228][ T743] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.403000][ T743] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.473686][ T753] overlayfs: failed to resolve './file1': -2 [ 54.512385][ T756] loop1: detected capacity change from 0 to 512 [ 54.567301][ T756] EXT4-fs error (device loop1): ext4_fill_super:4863: inode #2: comm syz.1.104: inode has both inline data and extents flags [ 54.571906][ T762] loop4: detected capacity change from 0 to 256 [ 54.580729][ T756] EXT4-fs (loop1): get root inode failed [ 54.592760][ T756] EXT4-fs (loop1): mount failed [ 54.595248][ T762] exFAT-fs (loop4): bogus fat length [ 54.603157][ T762] exFAT-fs (loop4): failed to read boot sector [ 54.609373][ T762] exFAT-fs (loop4): failed to recognize exfat type [ 54.676884][ T762] xt_hashlimit: size too large, truncated to 1048576 [ 55.089082][ T772] loop2: detected capacity change from 0 to 256 [ 55.278917][ T779] loop0: detected capacity change from 0 to 128 [ 55.334015][ T779] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.347377][ T779] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.419508][ T772] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 56.038619][ T768] loop3: detected capacity change from 0 to 40427 [ 56.141658][ T766] loop4: detected capacity change from 0 to 40427 [ 56.173504][ T766] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 56.179968][ T766] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 56.225463][ T766] F2FS-fs (loop4): invalid crc value [ 56.232148][ T768] F2FS-fs (loop3): Unrecognized mount option "vI|t_injection=00000000000000000256" or missing value [ 56.244596][ T794] futex_wake_op: syz.1.122 tries to shift op by 144; fix this program [ 56.262162][ T794] loop1: detected capacity change from 0 to 256 [ 56.319372][ T794] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 56.346734][ T794] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 56.398902][ T794] attempt to access beyond end of device [ 56.398902][ T794] loop1: rw=0, want=304, limit=256 [ 56.501003][ T766] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 56.533817][ T790] overlayfs: failed to resolve './file1': -2 [ 56.618027][ T799] loop2: detected capacity change from 0 to 256 [ 56.624700][ T766] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 56.634590][ T766] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 56.718819][ T802] loop3: detected capacity change from 0 to 16 [ 56.765297][ T802] erofs: (device loop3): mounted with root inode @ nid 36. [ 56.781754][ T802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.788993][ T802] IPv6: NLM_F_CREATE should be set when creating new route [ 56.796200][ T802] IPv6: NLM_F_CREATE should be set when creating new route [ 57.604465][ T762] attempt to access beyond end of device [ 57.604465][ T762] loop4: rw=10241, want=45104, limit=40427 [ 57.645337][ T799] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.740298][ T799] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.909993][ T289] attempt to access beyond end of device [ 57.909993][ T289] loop4: rw=2049, want=45112, limit=40427 [ 57.964666][ T820] bridge_slave_1: default FDB implementation only supports local addresses [ 58.010183][ T817] EXT4-fs error (device loop3): ext4_fill_super:4863: inode #2: comm syz.3.130: inode has both inline data and extents flags [ 58.040125][ T817] EXT4-fs (loop3): get root inode failed [ 58.050027][ T817] EXT4-fs (loop3): mount failed [ 58.232740][ T831] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 58.256381][ T831] EXT4-fs (loop4): Test dummy encryption mode enabled [ 58.374835][ T831] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,init_itable=0x0000000000000001,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 58.491808][ T846] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.507745][ T846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.519709][ T846] EXT4-fs (loop2): 1 truncate cleaned up [ 58.525544][ T846] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.753755][ T30] audit: type=1400 audit(1784226748.607:210): avc: denied { create } for pid=857 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.810825][ T30] audit: type=1400 audit(1784226748.627:211): avc: denied { bind } for pid=857 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.877265][ T867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.962860][ T30] audit: type=1400 audit(1784226748.627:212): avc: denied { listen } for pid=857 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.987820][ T867] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.012869][ T867] EXT4-fs (loop1): 1 truncate cleaned up [ 59.018536][ T867] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 59.052715][ T30] audit: type=1400 audit(1784226748.627:213): avc: denied { connect } for pid=857 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.192773][ T30] audit: type=1400 audit(1784226748.627:214): avc: denied { setopt } for pid=857 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.212378][ T30] audit: type=1400 audit(1784226748.687:215): avc: denied { mount } for pid=852 comm="syz.4.140" name="/" dev="ramfs" ino=18741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 60.047841][ T882] set_capacity_and_notify: 4 callbacks suppressed [ 60.047864][ T882] loop1: detected capacity change from 0 to 40427 [ 60.072405][ T895] loop0: detected capacity change from 0 to 256 [ 60.117345][ T882] F2FS-fs (loop1): invalid crc value [ 60.208774][ T895] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 60.227605][ T882] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 60.250943][ T30] audit: type=1400 audit(1784226750.097:216): avc: denied { setattr } for pid=893 comm="syz.0.154" name="file0" dev="loop0" ino=1048769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.287507][ T882] F2FS-fs (loop1): Start checkpoint disabled! [ 60.294418][ T882] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 60.321514][ T868] loop3: detected capacity change from 0 to 131072 [ 60.332780][ T8] attempt to access beyond end of device [ 60.332780][ T8] loop1: rw=2049, want=40976, limit=40427 [ 60.355162][ T868] F2FS-fs (loop3): Found nat_bits in checkpoint [ 60.369094][ T30] audit: type=1400 audit(1784226750.217:217): avc: denied { read } for pid=905 comm="syz.0.157" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.395669][ T30] audit: type=1400 audit(1784226750.247:218): avc: denied { open } for pid=905 comm="syz.0.157" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.419773][ T30] audit: type=1400 audit(1784226750.247:219): avc: denied { ioctl } for pid=905 comm="syz.0.157" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.629379][ T868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.429615][ T368] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 61.612824][ T927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.164'. [ 61.883171][ T368] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.912064][ T368] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.943120][ T368] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.960812][ T929] input: syz0 as /devices/virtual/input/input7 [ 62.054724][ T936] loop3: detected capacity change from 0 to 256 [ 62.069423][ T936] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 62.122746][ T368] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.131842][ T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.140057][ T368] usb 3-1: Product: syz [ 62.163754][ T368] usb 3-1: Manufacturer: syz [ 62.168424][ T368] usb 3-1: SerialNumber: syz [ 62.219272][ T368] cdc_ncm 3-1:1.0: skipping garbage [ 62.224860][ T368] usb 3-1: selecting invalid altsetting 1 [ 62.782741][ T368] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 62.788852][ T368] cdc_ncm 3-1:1.0: bind() failure [ 62.810250][ T368] usb 3-1: USB disconnect, device number 3 [ 63.159412][ T970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 63.208323][ T974] loop0: detected capacity change from 0 to 512 [ 63.243429][ T974] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 63.264446][ T974] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,nogrpid,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 63.280986][ T974] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.392749][ T984] loop0: detected capacity change from 0 to 512 [ 63.411639][ T984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.436842][ T984] EXT4-fs error (device loop0): __ext4_iget:4950: inode #16: block 8388380: comm syz.0.182: invalid block [ 63.449140][ T984] EXT4-fs (loop0): Remounting filesystem read-only [ 63.456060][ T984] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.182: couldn't read orphan inode 16 (err -117) [ 63.468183][ T984] EXT4-fs (loop0): Remounting filesystem read-only [ 63.474863][ T984] EXT4-fs (loop0): 1 orphan inode deleted [ 63.480684][ T984] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 63.515205][ T984] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 7: comm syz.0.182: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 63.534026][ T984] EXT4-fs (loop0): Remounting filesystem read-only [ 63.638121][ T991] loop0: detected capacity change from 0 to 256 [ 63.653730][ T991] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 63.904216][ T998] device bridge1 entered promiscuous mode [ 64.458134][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 64.458150][ T30] audit: type=1400 audit(1784226753.757:234): avc: denied { mount } for pid=993 comm="syz.3.187" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 64.582040][ T1001] loop4: detected capacity change from 0 to 2048 [ 64.696535][ T1001] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.709939][ T1001] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.724083][ T30] audit: type=1400 audit(1784226754.567:235): avc: denied { bind } for pid=1013 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.804858][ T1018] loop3: detected capacity change from 0 to 512 [ 64.838724][ T1001] fs-verity: sha512 using implementation "sha512-avx2" [ 64.844301][ T1020] loop1: detected capacity change from 0 to 512 [ 64.857883][ T1001] syz.4.188 (1001) used greatest stack depth: 19968 bytes left [ 64.884731][ T1020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.923099][ T1018] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 64.936555][ T1018] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.943823][ T1020] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.195: invalid indirect mapped block 32768 (level 2) [ 64.960497][ T1020] EXT4-fs (loop1): Remounting filesystem read-only [ 64.968655][ T1020] EXT4-fs (loop1): 1 orphan inode deleted [ 64.975211][ T1020] EXT4-fs (loop1): 1 truncate cleaned up [ 64.981116][ T1020] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 65.095338][ T1020] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1471: inode #12: block 7: comm syz.1.195: path /36/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 65.127735][ T1020] EXT4-fs (loop1): Remounting filesystem read-only [ 65.206191][ T1020] EXT4-fs error (device loop1): ext4_check_all_de:667: inode #12: block 7: comm syz.1.195: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 65.225011][ T1020] EXT4-fs (loop1): Remounting filesystem read-only [ 65.310830][ T1040] Illegal XDP return value 4294967294, expect packet loss! [ 65.341419][ T1045] loop1: detected capacity change from 0 to 512 [ 65.368619][ T1045] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 65.380144][ T1045] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 65.396211][ T1045] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 65.413568][ T1042] loop3: detected capacity change from 0 to 8192 [ 65.521449][ T1045] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 65.535689][ T1045] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 65.555462][ T1045] EXT4-fs (loop1): failed to initialize system zone (-117) [ 65.562857][ T1045] EXT4-fs (loop1): mount failed [ 65.572479][ T1052] loop0: detected capacity change from 0 to 2048 [ 65.689918][ T1052] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.720112][ T1050] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.735787][ T1050] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.742677][ T30] audit: type=1400 audit(1784226755.567:236): avc: denied { map } for pid=1050 comm="syz.0.203" path="/43/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.768233][ T1050] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.768233][ T1050] [ 65.780680][ T1050] EXT4-fs (loop0): Total free blocks count 0 [ 65.786846][ T1050] EXT4-fs (loop0): Free/Dirty block details [ 65.792869][ T1050] EXT4-fs (loop0): free_blocks=2415919504 [ 65.801070][ T1050] EXT4-fs (loop0): dirty_blocks=32 [ 65.806261][ T1050] EXT4-fs (loop0): Block reservation details [ 65.812302][ T1050] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 65.818922][ T1052] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 65.831183][ T1052] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.831183][ T1052] [ 65.900614][ T1063] loop0: detected capacity change from 0 to 256 [ 65.936172][ T1063] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 66.062695][ T293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.426178][ T293] usb 5-1: Using ep0 maxpacket: 16 [ 66.912721][ T293] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.924199][ T293] usb 5-1: config 0 interface 0 has no altsetting 0 [ 66.930847][ T293] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 66.940022][ T293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.972716][ T293] usb 5-1: config 0 descriptor?? [ 67.031982][ T1082] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 67.039715][ T1083] Zero length message leads to an empty skb [ 67.055170][ T1082] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 67.096263][ T1082] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 67.196524][ T1096] capability: warning: `syz.1.217' uses 32-bit capabilities (legacy support in use) [ 67.366872][ T1082] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 67.467814][ T1095] loop2: detected capacity change from 0 to 2048 [ 67.482391][ T1082] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 67.495477][ T1082] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 67.511562][ T1082] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 67.524901][ T1095] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.557084][ T1095] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 67.564289][ T293] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 67.572071][ T1095] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.591399][ T1095] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.591399][ T1095] [ 67.599744][ T293] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 67.608561][ T1095] EXT4-fs (loop2): Total free blocks count 0 [ 67.614694][ T1095] EXT4-fs (loop2): Free/Dirty block details [ 67.620723][ T1095] EXT4-fs (loop2): free_blocks=2415919504 [ 67.624483][ T293] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 67.626632][ T1095] EXT4-fs (loop2): dirty_blocks=64 [ 67.639063][ T1095] EXT4-fs (loop2): Block reservation details [ 67.645105][ T1095] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 67.650375][ T293] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 67.664918][ T293] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 67.673061][ T1094] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 67.686426][ T293] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 67.702713][ T426] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.708069][ T1094] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.708069][ T1094] [ 67.822660][ C0] usb 5-1: input irq status -75 received [ 67.864188][ T1108] loop0: detected capacity change from 0 to 512 [ 67.922759][ T30] audit: type=1400 audit(1784226757.737:237): avc: denied { mount } for pid=1103 comm="syz.2.221" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.040566][ T426] usb 4-1: Using ep0 maxpacket: 16 [ 68.055235][ T20] usb 5-1: USB disconnect, device number 2 [ 68.060310][ T1111] loop1: detected capacity change from 0 to 16 [ 68.069279][ T1108] EXT4-fs error (device loop0): ext4_find_extent:929: inode #4: comm syz.0.222: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 68.069991][ T1111] erofs: (device loop1): mounted with root inode @ nid 36. [ 68.088990][ T1108] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 68.105168][ T1108] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 68.120192][ T1108] EXT4-fs (loop0): mount failed [ 68.182721][ T426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.195742][ T426] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 68.210507][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.241383][ T426] usb 4-1: config 0 descriptor?? [ 68.482754][ T732] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 68.542683][ T293] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 68.714148][ T426] hid-generic 0003:04D8:00DD.0003: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 69.032714][ T732] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 69.040887][ T732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.051899][ T732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.061666][ T732] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.074594][ T732] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.083654][ T732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.092058][ T732] usb 2-1: config 0 descriptor?? [ 69.132760][ T293] usb 1-1: too many endpoints for config 0 interface 0 altsetting 6: 223, using maximum allowed: 30 [ 69.144162][ T293] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 69.153791][ T426] usb 4-1: USB disconnect, device number 2 [ 69.157305][ T293] usb 1-1: config 0 interface 0 has no altsetting 0 [ 69.169682][ T293] usb 1-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 69.178838][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.187338][ T293] usb 1-1: config 0 descriptor?? [ 69.553605][ T732] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 69.562492][ T732] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 69.577198][ T732] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 69.615772][ T1134] loop4: detected capacity change from 0 to 40427 [ 69.654925][ T293] wacom 0003:056A:0057.0005: ignoring exceeding usage max [ 69.657540][ T1134] F2FS-fs (loop4): invalid crc value [ 69.663495][ T293] wacom 0003:056A:0057.0005: unknown main item tag 0x0 [ 69.674427][ T293] wacom 0003:056A:0057.0005: unknown main item tag 0x0 [ 69.676074][ T1134] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.681342][ T293] wacom 0003:056A:0057.0005: unknown main item tag 0x0 [ 69.695835][ T293] wacom 0003:056A:0057.0005: hidraw1: USB HID v0.81 Device [HID 056a:0057] on usb-dummy_hcd.0-1/input0 [ 69.759335][ T1134] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 69.785784][ T289] attempt to access beyond end of device [ 69.785784][ T289] loop4: rw=2049, want=45104, limit=40427 [ 69.972811][ T30] audit: type=1400 audit(1784226759.727:238): avc: denied { watch } for pid=1139 comm="syz.3.232" path="/47" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.027823][ T426] usb 2-1: USB disconnect, device number 4 [ 70.050183][ T733] usb 1-1: USB disconnect, device number 3 [ 70.200204][ T1152] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.291324][ T30] audit: type=1400 audit(1784226760.137:239): avc: denied { sys_module } for pid=1154 comm="syz.4.236" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.675802][ T1170] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 70.762707][ T426] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.854608][ T30] audit: type=1400 audit(1784226760.707:240): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 71.110082][ T1177] loop2: detected capacity change from 0 to 2048 [ 71.122787][ T426] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.133194][ T426] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.146304][ T426] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 71.156685][ T426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.167006][ T426] usb 5-1: config 0 descriptor?? [ 71.218012][ T1177] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.230882][ T1177] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.493456][ T1184] loop3: detected capacity change from 0 to 256 [ 71.576286][ T1165] loop0: detected capacity change from 0 to 131072 [ 71.590799][ T1192] tipc: Started in network mode [ 71.595737][ T1192] tipc: Node identity 16818df1b3f4, cluster identity 4711 [ 71.603272][ T1192] tipc: Enabled bearer , priority 0 [ 71.611586][ T1192] device syzkaller0 entered promiscuous mode [ 71.619957][ T1192] tipc: Resetting bearer [ 71.627535][ T1165] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.629223][ T1194] loop3: detected capacity change from 0 to 1024 [ 71.642253][ T1191] tipc: Resetting bearer [ 71.660772][ T1191] tipc: Disabling bearer [ 71.663131][ T1165] F2FS-fs (loop0): Mounted with checkpoint version = 1b41e955 [ 71.749889][ T1194] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 71.766969][ T1194] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.849153][ T1206] device bridge1 entered promiscuous mode [ 72.664442][ T315] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 72.664526][ T30] audit: type=1400 audit(1784226762.427:241): avc: denied { map } for pid=1193 comm="syz.3.249" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.731627][ T30] audit: type=1400 audit(1784226762.427:242): avc: denied { execute } for pid=1193 comm="syz.3.249" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.822807][ T8] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set [ 72.837794][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 72.850209][ T8] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.850209][ T8] [ 72.859931][ T8] EXT4-fs (loop3): Total free blocks count 0 [ 72.867158][ T8] EXT4-fs (loop3): Free/Dirty block details [ 72.873491][ T8] EXT4-fs (loop3): free_blocks=0 [ 72.878493][ T8] EXT4-fs (loop3): dirty_blocks=16 [ 72.883850][ T8] EXT4-fs (loop3): Block reservation details [ 72.889848][ T8] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 72.992648][ T63] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 73.001240][ T30] audit: type=1400 audit(1784226762.847:243): avc: denied { create } for pid=1216 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.142691][ T315] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 73.150911][ T315] usb 3-1: config 0 has no interface number 0 [ 73.157034][ T315] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 73.166978][ T315] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 73.176036][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.184680][ T315] usb 3-1: config 0 descriptor?? [ 73.252668][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 73.262822][ T293] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.372716][ T63] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 73.380943][ T63] usb 2-1: config 0 has no interface number 0 [ 73.387042][ T63] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 73.397057][ T63] usb 2-1: config 0 interface 196 has no altsetting 0 [ 73.424716][ T315] usb 3-1: USB disconnect, device number 4 [ 73.562806][ T63] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 73.571917][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.579959][ T63] usb 2-1: Product: syz [ 73.584141][ T63] usb 2-1: Manufacturer: syz [ 73.588719][ T63] usb 2-1: SerialNumber: syz [ 73.594106][ T63] usb 2-1: config 0 descriptor?? [ 73.612755][ T1211] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 73.662718][ T293] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.672929][ T293] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.708301][ T315] usb 5-1: USB disconnect, device number 3 [ 73.772696][ T293] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 73.782019][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 73.790169][ T293] usb 4-1: SerialNumber: syz [ 73.871378][ T1224] loop4: detected capacity change from 0 to 128 [ 73.878622][ T30] audit: type=1400 audit(1784226763.717:244): avc: denied { setopt } for pid=1220 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.907756][ T30] audit: type=1400 audit(1784226763.717:245): avc: denied { write } for pid=1220 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.025485][ T1224] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.036508][ T1224] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.433365][ T63] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 74.678244][ T30] audit: type=1400 audit(1784226764.527:246): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 74.708387][ T30] audit: type=1400 audit(1784226764.547:247): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.773311][ T293] usb 4-1: 0:2 : does not exist [ 74.786033][ T293] usb 4-1: USB disconnect, device number 3 [ 75.025797][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 75.025833][ T30] audit: type=1400 audit(1784226764.877:251): avc: denied { read } for pid=1246 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.098495][ T30] audit: type=1400 audit(1784226764.877:252): avc: denied { open } for pid=1246 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.225727][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.244192][ T30] audit: type=1400 audit(1784226764.877:253): avc: denied { getattr } for pid=1246 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.467165][ T1258] 9pnet: Insufficient options for proto=fd [ 75.478138][ T30] audit: type=1400 audit(1784226765.097:254): avc: denied { write } for pid=1245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.506210][ T30] audit: type=1400 audit(1784226765.097:255): avc: denied { add_name } for pid=1245 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.533725][ T30] audit: type=1400 audit(1784226765.097:256): avc: denied { create } for pid=1245 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.560092][ T30] audit: type=1400 audit(1784226765.097:257): avc: denied { write } for pid=1245 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.205764][ T63] usb 2-1: USB disconnect, device number 5 [ 76.223164][ T30] audit: type=1400 audit(1784226765.097:258): avc: denied { append } for pid=1245 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.345640][ T63] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 76.669856][ T30] audit: type=1400 audit(1784226765.317:259): avc: denied { mounton } for pid=1250 comm="syz.2.261" path="/47/file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.698996][ T1281] device syzkaller0 entered promiscuous mode [ 76.707583][ T30] audit: type=1400 audit(1784226765.327:260): avc: denied { remove_name } for pid=1260 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.982735][ T1173] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 77.572682][ T1173] usb 2-1: Using ep0 maxpacket: 8 [ 77.825037][ T20] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.850897][ T1173] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.898298][ T1329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 77.928126][ T1333] x_tables: duplicate underflow at hook 3 [ 77.934048][ T1173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.944955][ T1173] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 78.112696][ T1173] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 78.121805][ T1173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.129845][ T1173] usb 2-1: Product: 瞷떁뷾폙빖鉐핾蘫厝ಟ㭊퐯腐溺蛸鎷楄뿫ࠥ佑Ṉ䰌垔嗴풃쵂ￓ㲀‚㇯嘦⒯㿈㎙ꈛꄂ怸ɶ벨෰ [ 78.145173][ T1173] usb 2-1: Manufacturer: 쓍士篿ﺕ䑲蠚肸梵ᬤﺡ쥀ꇄ堵陃뇓봝뾪ﯬ빦䩱쐴㺢馪⦥쯜倅쀁ㄛ쓭ǽ쾙⨅겦툺ࡲ鞜츗촶윘遉Ꮏ㫳达ୁ叻ꀥ뒾璬ቒ䱄痶侻䦐֮剻쟮ᷪ햙㘲⿐ﮋ廍棫䬻槈ܭ部ጀᶮ鷴軿ꌵ玿㰆芈礰濑㿽胉⇸⠻ᡱ欲邈缵툈샶宍乷伦甉闁圢핝㭺虝㐞㗞痝导扽佬텬៩ᦕﱊ窥矢瀱ᘖྔ쳝廁 [ 78.181456][ T1173] usb 2-1: SerialNumber: syz [ 78.242666][ T63] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 78.242678][ T20] usb 4-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 78.242696][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.242719][ T20] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.432724][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.441793][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.450054][ T20] usb 4-1: Product: syz [ 78.454281][ T20] usb 4-1: Manufacturer: syz [ 78.458898][ T20] usb 4-1: SerialNumber: syz [ 78.481807][ T1337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 78.544384][ T1341] loop0: detected capacity change from 0 to 16 [ 78.554585][ T20] cdc_ncm 4-1:1.0: skipping garbage [ 78.559824][ T20] usb 4-1: selecting invalid altsetting 1 [ 78.643471][ T1341] erofs: (device loop0): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 78.662986][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.674699][ T1343] netlink: 'syz.4.286': attribute type 2 has an invalid length. [ 78.683042][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.692958][ T63] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 78.702042][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.722915][ T63] usb 3-1: config 0 descriptor?? [ 79.613206][ T1173] usb 2-1: 0:2 : does not exist [ 79.691352][ T1173] usb 2-1: USB disconnect, device number 6 [ 79.871328][ T63] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 79.963581][ T63] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 80.002489][ T20] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 80.012529][ T63] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 80.020491][ T63] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 80.022663][ T20] usb 4-1: selecting invalid altsetting 1 [ 80.028534][ T63] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 80.042130][ T63] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 80.042645][ T20] cdc_ncm 4-1:1.0: bind() failure [ 80.078467][ T20] usb 4-1: USB disconnect, device number 4 [ 80.162598][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 80.168864][ T30] audit: type=1400 audit(1784226770.007:286): avc: denied { connect } for pid=1356 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.188494][ T30] audit: type=1400 audit(1784226770.017:287): avc: denied { ioctl } for pid=1356 comm="syz.1.291" path="socket:[21240]" dev="sockfs" ino=21240 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.213532][ T30] audit: type=1400 audit(1784226770.017:288): avc: denied { create } for pid=1356 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 80.239147][ T1359] loop1: detected capacity change from 0 to 512 [ 80.252784][ C1] ================================================================== [ 80.260860][ C1] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 80.268214][ C1] Read of size 8 at addr ffff888128448190 by task ksoftirqd/1/25 [ 80.275907][ C1] [ 80.278209][ C1] CPU: 1 PID: 25 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 80.285468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 80.295514][ C1] Call Trace: [ 80.298775][ C1] [ 80.301683][ C1] __dump_stack+0x21/0x30 [ 80.305994][ C1] dump_stack_lvl+0x110/0x170 [ 80.310645][ C1] ? show_regs_print_info+0x20/0x20 [ 80.315817][ C1] ? load_image+0x3f0/0x3f0 [ 80.320298][ C1] print_address_description+0x7f/0x2c0 [ 80.325825][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 80.330830][ C1] kasan_report+0x10f/0x150 [ 80.335309][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 80.340311][ C1] __asan_report_load8_noabort+0x14/0x20 [ 80.345933][ C1] rcu_cblist_dequeue+0x6c/0xb0 [ 80.350758][ C1] rcu_do_batch+0x47d/0xbf0 [ 80.355238][ C1] ? local_bh_enable+0x20/0x20 [ 80.359980][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 80.365764][ C1] ? note_gp_changes+0x140/0x220 [ 80.370682][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 80.376476][ C1] ? rcu_report_qs_rnp+0x37e/0x390 [ 80.381587][ C1] rcu_core+0x4a3/0xef0 [ 80.385722][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 80.390910][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 80.396438][ C1] ? rcu_softirq_qs+0xd7/0x2f0 [ 80.401198][ C1] ? rcu_get_gp_kthreads_prio+0x10/0x10 [ 80.406736][ C1] ? irqtime_account_irq+0x76/0x390 [ 80.411926][ C1] rcu_core_si+0x9/0x10 [ 80.416061][ C1] handle_softirqs+0x250/0x560 [ 80.420807][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 80.425987][ C1] run_ksoftirqd+0x28/0x40 [ 80.430381][ C1] smpboot_thread_fn+0x446/0x880 [ 80.435296][ C1] kthread+0x3f5/0x4f0 [ 80.439340][ C1] ? cpu_report_death+0x1b0/0x1b0 [ 80.444340][ C1] ? kthread_blkcg+0xd0/0xd0 [ 80.448907][ C1] ret_from_fork+0x1f/0x30 [ 80.453300][ C1] [ 80.456302][ C1] [ 80.458632][ C1] Allocated by task 1357: [ 80.462938][ C1] __kasan_kmalloc+0xd4/0x100 [ 80.467601][ C1] __kmalloc+0x13d/0x2c0 [ 80.471822][ C1] l2tp_session_create+0x39/0xb60 [ 80.476824][ C1] pppol2tp_connect+0xbf5/0x1640 [ 80.481765][ C1] __sys_connect+0x3cb/0x450 [ 80.486333][ C1] __x64_sys_connect+0x7a/0x90 [ 80.491072][ C1] x64_sys_call+0x7c/0x9a0 [ 80.495464][ C1] do_syscall_64+0x4c/0xa0 [ 80.499853][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.505726][ C1] [ 80.508032][ C1] Freed by task 313: [ 80.511914][ C1] kasan_set_track+0x4a/0x70 [ 80.516486][ C1] kasan_set_free_info+0x23/0x40 [ 80.521400][ C1] ____kasan_slab_free+0x125/0x160 [ 80.526494][ C1] __kasan_slab_free+0x11/0x20 [ 80.531237][ C1] slab_free_freelist_hook+0xc2/0x190 [ 80.536609][ C1] kfree+0xc4/0x270 [ 80.540394][ C1] l2tp_session_put+0xaf/0x1a0 [ 80.545133][ C1] l2tp_session_delete+0x3a9/0x4a0 [ 80.550226][ C1] l2tp_tunnel_del_work+0x180/0x3d0 [ 80.555412][ C1] process_one_work+0x6c8/0xbb0 [ 80.560275][ C1] worker_thread+0xaa0/0x1250 [ 80.564930][ C1] kthread+0x3f5/0x4f0 [ 80.568977][ C1] ret_from_fork+0x1f/0x30 [ 80.573371][ C1] [ 80.575670][ C1] Last potentially related work creation: [ 80.581361][ C1] kasan_save_stack+0x3a/0x60 [ 80.586028][ C1] __kasan_record_aux_stack+0xd2/0x100 [ 80.591608][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 80.597399][ C1] call_rcu+0x10b/0xf60 [ 80.601534][ C1] pppol2tp_release+0x1e3/0x2b0 [ 80.606365][ C1] sock_close+0xb8/0x200 [ 80.610762][ C1] __fput+0x22b/0x900 [ 80.614733][ C1] ____fput+0x15/0x20 [ 80.618694][ C1] task_work_run+0x127/0x190 [ 80.623257][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 80.628433][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 80.633897][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 80.639335][ C1] do_syscall_64+0x58/0xa0 [ 80.643727][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.649602][ C1] [ 80.651909][ C1] The buggy address belongs to the object at ffff888128448000 [ 80.651909][ C1] which belongs to the cache kmalloc-512 of size 512 [ 80.665947][ C1] The buggy address is located 400 bytes inside of [ 80.665947][ C1] 512-byte region [ffff888128448000, ffff888128448200) [ 80.679201][ C1] The buggy address belongs to the page: [ 80.684825][ C1] page:ffffea0004a11200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128448 [ 80.695043][ C1] head:ffffea0004a11200 order:2 compound_mapcount:0 compound_pincount:0 [ 80.703343][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 80.709400][ C1] raw: 4000000000010200 ffffea0004bd7400 0000000600000006 ffff888100042f00 [ 80.717963][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 80.726519][ C1] page dumped because: kasan: bad access detected [ 80.732908][ C1] page_owner tracks the page as allocated [ 80.738609][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 289, ts 23251628098, free_ts 0 [ 80.756733][ C1] post_alloc_hook+0x192/0x1b0 [ 80.761480][ C1] prep_new_page+0x1c/0x110 [ 80.765963][ C1] get_page_from_freelist+0x2c3a/0x2cd0 [ 80.771488][ C1] __alloc_pages+0x1a2/0x460 [ 80.776057][ C1] new_slab+0xa0/0x4d0 [ 80.780105][ C1] ___slab_alloc+0x3ac/0x840 [ 80.784672][ C1] __slab_alloc+0x49/0x90 [ 80.788982][ C1] __kmalloc+0x16a/0x2c0 [ 80.793203][ C1] __register_sysctl_table+0xa35/0x1240 [ 80.798728][ C1] register_net_sysctl+0x21d/0x230 [ 80.803821][ C1] __devinet_sysctl_register+0x2bd/0x390 [ 80.809435][ C1] devinet_sysctl_register+0x169/0x1e0 [ 80.814878][ C1] inetdev_init+0x2b2/0x500 [ 80.819358][ C1] inetdev_event+0x1f4/0x1060 [ 80.824012][ C1] raw_notifier_call_chain+0x90/0x100 [ 80.829363][ C1] call_netdevice_notifiers+0x119/0x190 [ 80.834887][ C1] page_owner free stack trace missing [ 80.840231][ C1] [ 80.842533][ C1] Memory state around the buggy address: [ 80.848147][ C1] ffff888128448080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.856208][ C1] ffff888128448100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.864259][ C1] >ffff888128448180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.872294][ C1] ^ [ 80.876860][ C1] ffff888128448200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.884899][ C1] ffff888128448280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.892934][ C1] ================================================================== [ 80.903250][ C1] Disabling lock debugging due to kernel taint [ 80.914062][ T1359] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 80.914062][ T1359] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 80.914062][ T1359] [ 80.948469][ T30] audit: type=1400 audit(1784226770.797:289): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 80.964388][ T1359] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.986028][ T1359] EXT4-fs (loop1): 1 truncate cleaned up [ 80.989277][ T30] audit: type=1400 audit(1784226770.797:290): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.991712][ T1359] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota=,nouser_xattr,norecovery,dioread_nolock,. Quota mode: none. [ 81.013789][ T30] audit: type=1400 audit(1784226770.797:291): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.049401][ T30] audit: type=1400 audit(1784226770.797:292): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.069931][ T30] audit: type=1400 audit(1784226770.797:293): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.090503][ T30] audit: type=1400 audit(1784226770.797:294): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.113475][ T63] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 5: -71 [ 81.113509][ T30] audit: type=1400 audit(1784226770.797:295): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.123440][ T63] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense calibration info: -71 [ 81.154903][ T63] playstation 0003:054C:0DF2.0006: Failed to get calibration data from DualSense [ 81.164323][ T63] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 81.172579][ T63] playstation: probe of 0003:054C:0DF2.0006 failed with error -71 [ 81.183203][ T63] usb 3-1: USB disconnect, device number 5 [ 81.194387][ T1363] fido_id[1363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory